last executing test programs: 2.383964315s ago: executing program 3 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) mount(0x0, 0x0, &(0x7f0000000140)='hugetlbfs\x00', 0x1000004, &(0x7f0000000180)='uid') r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xa00) 1.65195973s ago: executing program 4 (id=464): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES16, @ANYBLOB="0000000000000000b70000000069a35873260000007b8af8ff00e9ff00bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYRESHEX=r1], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xb5, &(0x7f0000000300)=""/181, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x29, 0xc, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000004c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000a80)="c1090287ed98470083db899f3f713720252cc73f3e7388311a373a33215f5202e68bc6a666b06a16983eb79c54c5579c862aaa36baaaa7ee3ae5e8657fd82805468d42dbd0bc8ba3475412996b38c14847093406e31ccc9c98341bb66396c9bc71b473b27c8f45bb4f2adccf2a5c0f75abd7e069b9f1fc9a7bd7af696aa9b65d2f09efbb00fb2912fdbb7923e379a68cd01a56b74e41b701e1cfa5c228d0596ba9457f624c42ebf6531d29f8d2930d6397d43ca77a723d09edb6dd064625048c565d0463c8cab1f612fe93ed45351344af02d306ef8d930de2704493a7cc0e1128b09ccca7be9340a72f2707c3c00b896efed469937399c82db3b38b0c8ef2e75abf1422874179177baf522faa2115ffc58485ef73dc425fe59af10e92bdbc76c181037b1836999c749b76fe62285317965b79463e77e0922a8f18322686f41d13ae9cfec7faf3b6e8d248c5fe59965c814328c650e68208dc3765437271699522001a69e4d0b7dec12da50ad1e70af04a5c24d19ef2219406bd8e8ecda449bc84a64c79b71d4623cdeb31fec493ba38186b454d6c544231b8f135f43f8a04a612c057a09bde7b77ad3a748faa41ad46a02068a3ad0784ee997ca3edc69c3880dd512d03c3f75d42f92ac641faf52c789d4d28102d3dd198fd5a17bb210b50166f4bd7c9c017cc6b4b9ea5fe7e0c6c888b1669093f82556de062bb2c57b6df5fdf2d44e6cfce5a4b9cf662c7708dd145fcd2ac3392c3b4b3afd36aed44f1ae3195643efbf4df9ab896dbc5dc1bbee63eee2e3b145cfd19f29e734443eeffa09a1052d23eef7afacb1d6e43fd1707d14641e84774183e16e0a6c2eecf957b84576584ca155f98e606e465d7a4b4a9918ec2ea4059dc6d01d115fc60c76a24eaf17c10038a810908bad2bd59e2532441cfe72fdc07235e0b8108b650b1d7ed9801c55b47150af7f78a86ca8aa02c01d34baf46c73bbc677b14acc9f0d82673fe1efa14d3e433f2c3d419764bcd49d612e358bebbe7f4bf92d819a99430eab1525b828d09280b564fce53767efa34c7972031c602250a7718ae3af160cdced87716cd0a79b54b2a79a98a095a8dbf641977341bd5be580cd8480179fda8ed751a28a2013674fd44bac6b242c0b02258355e34686a2e8888ec7d28db6e6ca92ad00fef8bfbe3d2ef3ec121c67b0703f9880e98e4bc66b28942277ed1f9508b0aee2b05560bcfb69255918ff8f298f0ab7a4adcea733df2a1f7cca1d5746962701f530fc665588f7509766c8cfac3efbe3b804cf5574102619b3349eaf080694842547d832ea4011715f353517b4f0a6d491a44ee2298fc8c00d4c1eb0dfd119697f54cc9b0ab0b74463d4151d3c2c03064487b1fe571d75486c991a80418729292978aa53773043be25fc34ba759c3a5e96bc7c7da757d4d8807c0886bbd85386da9e189679e0486eec5e8af800b0f7b1f183636ae26bdd01913252df7202af7e5f6c9611e98b5b54fd172c8bbf79e19edb875cb1164b1cedcb721c9fde2bb736fa5a90b322b4554f3381bced9ed7815b25b2658943a66285d1e23dcf2d3bee359683cddca8b350cd4de1ee19969de5d4febfeb2899e936a450565f9e637899fdd10ae1ae5681d8c5a8ea766b1902849af0e814bdac156a968a8e9b1cfe9c28f584cd31f3347bbfc2db9a18de808873b8e843dc5f846e217f7bcb6412011ca8ec4af9f0f048230e293e43a9990c1a6a32559df8c228c180d455b39a2193de6aa21e0597eaa677be00f5987eb8b583db46179c667ac5bd10fbdeb1514fc7e475ca7afc70fdde56c75d70ed24b2998be59841df0a8c42405809a9b8fd888a67e0e991a2d091be11980a4328a71fb40f63ddb3eb584481358488e687b07f9a6a9f17570467ff41dbb019c302e9fc431a95294a16cac313ca35e022e297b9ca7c6f02b80669f0edf64dfd2e8287d6ab237d75a8d84119b23980d54d6581b8a86dff986f2ed342686e24d31f84726a9098fbffe117919496df00a09826916d35bbaf8589e997c2eadb1956a896f65b8d2e24b9ef1318f86e6d0fd23ac8b9ade7413766794da4995afd938a986b5a8da11bc45d9a099124cf62428af34baaf03f232c5f6351f45e5b2022283b2e7346508fb222a6ed6b0bfacc917135844786bf5a18009dffdf40bae72e703103c906306ec9177eb9de9a7d9726d4a99fadf483a2e554ed0e6a053cf984bbddcec629b48d7e3571439137bf236a04a36db8f8a6ed388d466e3ecf74d4f3ba751b32261bd4b925d3d3820f4726b43095db9995d4a6a17fc752ad34a36c39224ebdeaa86ac22e50862b614c5ccb07df2f8151f9e95aa1dce23efa3a951d8e7dfc79f1413299fcdb2fbbdfe99d854bf0452c14508657cff65a71cab458fc2e442245143044c706d547ff72db794d50fb48d66623876b63cb3dacefb1bbbf3a5dc428d2404bdd16362654663e828191e3d0f7f9bdf63b0995688bb7f7b6a837eb6569b6b402b3ce1d47880fa073b5b6acb6d63b71d2798546ffd8d0af77ba9f6d0b5e62c80f330300546a5f63beec569a3b9525ca12e95b04016faa26cd8bc055285338aa1eede54af2e5d092d6cdcdda7f67e05a082f2f9c3b092e37af6d245f9d22266e7c82235029bcd9048c95d0c26bc66b0a1a81af341244d150661e84252dba8e2321ca3ee34ec1deef750b65d2db3c3665005babcff356bd1f6df4d55b07c69116094d2855c83a838b6029967505acf98babc1a153df87bb11c54daf1ef33f28677b2b710a1d1544ee8e8edc5126ca0edeaca3c9cedba1e060d1b73a8f7dc0bd114704e10ca38ec6a1fb4c9487c355d18aae4b657554f9a6de9cb754a17853529a46f23aeaacfa105ed6b748c01206d6ec6fb24947f6ef4aea7b9d0c6f43ad21c8a00723745a08d14f0c779cda25c50c4a0936a97c5df903aa514266ff059622c6d5e746e51da29479890016b3a0c35367dd3b4d489cf7442bb308f60908f2be30e9ca51d679a605290430de69d3e4a8e5b89482b14ff8fd93ebab1601d624dc9b68e3991dede0ef4ef78cf32dc4cbbf01d6171f2bf1b8d71be8f9c743919165fae28e811d03948e6c42c7f978c8b0bf47f331da7ec40709f85063d41b8047d3055064e775375196f248798e34ea9cc4fd0e2cab486cba59f84ab7a12b0f01627990daf45fea4cfe4d2be9866a00dfca966be8d1d33b9db96bcf89ba80f1b4971414ab16853134e33453e8a7a9cd9cb3e8e216f8856c77ae694b050b7b1526471ba37687814769cac437cc985545b9c0a92403c2612149ca9d0e36d550f3080558172f6ccfc0b437862be33647e6ff442901ef8caf60d59a4b21b0fb8c2d5787561bab4894c09c97c7e179b5acdf347480ba6f0141bf5a457cd393ade9c846aca818cb94e72baf6cbc70424551a6fbfeff74b3e7aa8d9817acdac7e21b810d75ddffbb521201c25bbde9b6d446bb81fb6e1a121acc2631cc3dc97717869aef2f3bca2692042b9d0b869e21364fe1eb41fd86ff98f9ca08b1fd10ccaeabff78bfe6b74d1ffa1a4ba9cf03b09a7c57457672c54caae7a6976c5c31f1349e20a1e5c3e3944e9a1dcf29298565fec03dfb3032d5c60ee61cec56a871f2f7aad8f5f42f14632105aaa1662cf8275622351404f3bf6d35633327ca9c7b724c0615f2cb17be150065efe7fbb5d992be98b6d492b3938ca4c1c97792c43d8094ae9b49998b1b3cda2999712471027a811d82f443e70864f34f741b870354fdd8f94a00fd1487ede36b4a909941f4606dd3aec480b5eeb237e2d02f49be0ee7314ae7d9c2c4e6bb99054d221190bce17b82ded46553093d03ef0955ee0ec6dfbfdd3969b2e5286be884622b6ad07e97d0fb6b33c4e7d05cd7d20d2930f731a4330c64be86bad1201d86eaa957b97a03ea6377be7a960dd66901a2e15792c8caf42c1dbd3058f15669be8c3503af242b79fd4eefe9e905be0302a117b7898d69718f0800f090a7cd4b3647a3ee9f21f037e247ade3024bbfab8dcff4a9a0e499425533979d95ceb3bd2fa02174f67601dc5cd5e08936f09fe84c039943bb3f9423b04d4de8a76eaa11d5f6bcabe6ace52a624b4f228b9213c236a137ea7f760de5a633ca0fe76d9fe63aa93edfbedfed432eb31aba21184a4f04b5152d9788d9c160dbb41c97e54b8208a707b57591452f184a2bf2c4b4635af9dae76d3351a86da8ea563a80fe51d1d48b911ddf887c8c9f11adea6d4439bda7eeb7a83e741c81a93217ebeda36534038169d5b13976f5ea0853bdfb6ec8ca9b2ef24622715c1f7b70fd8c6a415fe87ad3feaf4149ad11afae092b4a7b0c228fe04862dd164bb214ec7e2ba41f97b22eafac9e55bab3a9536a5a0e878030b7053f0990ff5bc0ac375af7949a4f5ba9b5c979c3ad517f05a9aaaa1a62e279ab63b70c8db6e7ba900cfecbb46ccb3f2a060b3cb2d9113e5451ab8d80ce7d6d802ec24d552de9a49003583f7e46eec3296ce80764e2a6cc302aca48bdcf5492f3295273db5b212bf369117e22684628b03eeca0cb073a476278357e77a0248a0d4b7039dbf2f635f3ca51e3b71e018e9cf47b0f587fadd2b5f09d2e4d32e5e19145e0029472cd6175d6a01ec2625b2794f8387809acaed1e0206dc2ddcaafeb581422cb17e4987ac1ddc3cb2894b707ce17cd3092f313fceefe4fd64095a7554ef1c0b20d6621098a5b0960ee43b6639094bb5b28d174f7472d48b155fc00e779bf57d0a3c009edb01e11f104dfb7adc7a1ae86b31af3463423e5c59d9270b86d5ca7210c9c7855ab2356db030bb94c2827a8cabba1d251b7eeece8b4ca2ade41db1dc2b6403292bd6c62ac1e288bb893d7c2a0dc772e2186d7a13b41ca069a40e96181b8497be92163c257de8c7311b2a34ad76a415d0d78d949aab522f83e74c3c8306c0a9b5df7bfc62e15d65a365ff3f82c2088e820983f09846f5931d3c53e2c657ede8d9388f9caad15aad2dc1c4a74cfc17460008028e16a3feabc9a3c5a1d661f82767042cbe48a6ab31621e40f1bd830b929b7930c09b69fdcf8120198ff2a73e4ab8195c9447a674ef77929ca82ee9195d2ada8abf8f3de328d640b7f4c53899cfdf6908935349f096134eafb193d91ed46ffd7c871cffc73988248e6a3f4b9347712b1a511723feee25923314b4662563989f5493c72257e07ebcc18600b97d1fd9466945d089cc451ed0ce177bc2860f3dbe627b66133ae6942cdd2e163a02847da58d1df45d58125b0501a53252f19b88192dc1ddcbab0f61e8579afd88e520bfd0a77a4fe17706222348ff08b098d38efbfa34d56ec9333ea5522415d5a1a2d7823e07e87db5e1c5b40ad45914815aabdce4332887c6a4dc5f57ebe501af2905369a1a713c286037cc918fad86d59c9e8f8783a5c3a8f3d136d6448f7db36ef1d71f4efb0d4a16b95068ca857aa21c7617232e791bd5d3088cf19dd27515ef7487448bacb66296a226c43f74600387ede270e4c12ff3ee4b9491dc631122a5808dd9b939a64a37b569a062736f7dd215600f18b6207e734315af3f358bc935fc3d50eba2ac5dbd1a870776388ed0cc934b1bf45b2f49dbbdbac54c22b8c225eb3ea0818cb30fb4c20e46c69947ea36e7bfe3ea76cd84649830d074b6fc1a76f53a4e9a710e8740d2e362e446b8a60b3b3dbf75059b8424ea3fd4252b6cb3c1fe65c125f5b8f684bd7b227d32dd4883bb45fd52bb041d1e86d34a22efddac40ecc21909b1104ef8c0069404628a17800093cb34c5c36cab4884091595", 0x1000}, {&(0x7f00000006c0)="7c198bea6503284b59d1765907970b357775c8b895f1a067520d332e2172627c5406b3cdffd4c80394cc343d9ae9bc16f877165a2faa612c3a67c79aa16d876a8b19a0b88a6c60550d8c864f606ea4be1fb14e75233776cc58cff99209b2ba35eb71f557be2a10f605dfbddd284ee8f30f86fde02985d433fed27ccdafd25daf369cdf6e3e4bc65c2a6d", 0x8a}, {&(0x7f0000000180)="408d322268c5bd8053ed97d8517886122c8f5b620110fb0e75bcaaf6cc4584dadb60b2164a", 0x25}, {&(0x7f0000001a80)="c8ef05fd936a639dc3d77f51a48390fed2e1a2f4b95750e7b17cf18061e02838309f8ab09ba938b73461c6284862f1b01416792487797c75e17834591983f6d55d20b0e018a1928d47aad650a70d1a163dc98fce908412c52e42bf86764e61582e3766f0abf68c2fa839e2b7b67cb0354ad2651b5ce18c43a3cc0e58393adb54c679a562ecb8193f4a12c14d92918797570a99f9cbf77521760a25f9139c467b335f328ce3d015cc13dc95963e004a836d4d2f1dc0997f0dabcf304c0e", 0xbd}], 0x4, &(0x7f0000002d80)=ANY=[@ANYBLOB="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"/4688], 0x1250}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) unshare(0x2030600) syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000001c0)=""/3, 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) chdir(&(0x7f0000000140)='./file0\x00') bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x8}, 0x10) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000200)=0x30) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x4) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 1.507886081s ago: executing program 3 (id=466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000b4c852", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000da00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ff010000000000000000000000000001000000003c00000002000000ac1414aa000000000000000000000000060000000403"], 0xfc}}, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f00000005c0)=0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000004c900200000000000300011900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000000), &(0x7f00000003c0)=r8}, 0x20) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x18) r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r10, 0x2007ffc) (async) syz_read_part_table(0x1052, &(0x7f00000010c0)="$eJzsz7GRwjAQBdBv2Xf23VwpF9OJ+3FAIcRURQXEZGJkzLgCBoL3gt2V9itQeKv/lOTWD8N+VeuY5O/3eSwlyaWNJXtsDX23aalfra0l07Zett7X62FOlym1ay9OP8fxsWhlPr/+hwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw+e4BAAD///1sDhQ=") (async) sendfile(r10, r10, 0x0, 0x800000009) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) inotify_init() 1.393835632s ago: executing program 3 (id=469): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0x10c00, 0x23e, 0x10000, 0x2}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa312, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) 1.393315072s ago: executing program 0 (id=470): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e8d040000000100"}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x9}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 1.224828073s ago: executing program 1 (id=472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.154003163s ago: executing program 0 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8ae74f10c62ece292d00", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00'}, 0x10) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=@delqdisc={0x12c, 0x25, 0x200, 0x2070bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x10, 0x3}, {0xb}, {0xfff3, 0x6}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc0}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3c}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2038}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1a}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x2}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18f1ff0000000000000000000000000071108f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x9}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYRESDEC=r5], &(0x7f0000000240)=""/9, 0x68, 0x9, 0x2000, 0x2}, 0x28) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) open_tree(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x80100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) 1.029194864s ago: executing program 3 (id=474): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) shutdown(r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250200000008000800", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x264ab1c8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0x4}, 0x100203, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000008af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000085000000160000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r9, 0x0, 0x4}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) 869.925345ms ago: executing program 3 (id=477): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) mount(0x0, 0x0, &(0x7f0000000140)='hugetlbfs\x00', 0x1000004, &(0x7f0000000180)='uid') r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xa00) 667.924866ms ago: executing program 4 (id=480): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = syz_io_uring_setup(0x73d2, &(0x7f0000000240)={0x0, 0x7d89, 0x10100, 0x3, 0x289}, &(0x7f0000000080)=0x0, &(0x7f0000000700)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x6000, @fd=r2, 0x81, 0x0, 0x0, 0x4, 0x1, {0x2, r5}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r2, 0x1d39, 0xcec, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 512.812577ms ago: executing program 4 (id=482): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x7, &(0x7f0000002400)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r2, 0x713, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8c09}, 0x2de0d2a06d7aeea8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="120000000000bab23f42051b6749000085c50000", @ANYRES32=r5, @ANYBLOB='\f\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32=r8, @ANYBLOB='\x00'], 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x20000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffd}, {0xffffffffffffffff, 0x0, 0x3f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) 511.585687ms ago: executing program 2 (id=483): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xb, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x9, 0xf7, 0xbffffffb, 0xf, 0x18, "4240755a41142a3f25f18e203b2385d5a077fe"}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000008f40)="d4d84b77145279839cbb6761e3a28f6283e3b2ffa8454ffd82ad350a5ae6c6ffe18ca746694c2f2a2ea50965f1c922a0ccf1dd8637c50edf448ee02aa6e466c0f574d9c57894ba73d4ff6e453e02a529e3a73c874ec970960d", 0x59}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b0000900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccc7ac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8", 0xd8}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000280012800b0001006272696467650000180002800500260001"], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r5 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x0, 0x105}, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, 0x0, 0x1) connect$nfc_raw(r0, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x7}, 0x10) 491.437267ms ago: executing program 2 (id=484): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x7, &(0x7f0000002400)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r2, 0x713, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8c09}, 0x2de0d2a06d7aeea8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="120000000000bab23f42051b6749000085c50000", @ANYRES32=r5, @ANYBLOB='\f\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32=r8, @ANYBLOB='\x00'], 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x20000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffd}, {0xffffffffffffffff, 0x0, 0x3f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) (fail_nth: 3) 432.431358ms ago: executing program 4 (id=485): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0x10c00, 0x23e, 0x10000, 0x2}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa312, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) 345.909718ms ago: executing program 2 (id=486): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x7, &(0x7f0000002400)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="f60729bd7000fcdbdf250d000600a991d4e0ebccdf217b602036126288da14b7507fd51faf6435d95a1aa9edc1e8a4bfa93ac18be0c75d1067b045aeba42962a504b3183efb06068a0e8a54972f3780dc4db995012b41c82cc54abea9d0333825e138627f2cf0af5c27b7c5d8364ebdcdb181067cd5f6ea571dca0133fc8d39a991cd9a6804662cdf915f4d698c0336ce0f88720eb3f6a378cda0256dda9cbd1d1b50dadd26d6a8c34c8e97016d5929b0f9e8341149797dbfc9d4a7f984a8c24fc788caa4e0fc499c83dd243fc17e3487d0a33ba62f4aec3cbaa0d40377e76292bd30672a499227e4235ecde94"], 0x14}, 0x1, 0x0, 0x0, 0x8c09}, 0x2de0d2a06d7aeea8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7], 0x24}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="120000000000bab23f42051b6749000085c50000", @ANYRES32=r5, @ANYBLOB='\f\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32=r8, @ANYBLOB='\x00'], 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x20000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffd}, {0xffffffffffffffff, 0x0, 0x3f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) 345.137578ms ago: executing program 4 (id=487): pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000190001000000000001000000f1e08e504f3ccdffffffff000000000000002c1d000000001d000000000000000000000000000100040000000007ff0200a000000000829e97f3358703e1055ca208f22c3b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='fscache_resize\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000030000000080000001000000000000", @ANYRES32, @ANYBLOB="00000000000000ad269a6f00eef6ffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000", @ANYBLOB="7176fd9bfbe434cd874b3564114e128ed70fa94f72d97e86af01f24b61d8eb4b037d60ee19eac001b89f6df597a329caf3e4376bd31274420657eefab3ee8656f326ae7ac0ec65bf992678be3c1f31957022c657abe3e9f9aa13b03315b30ce251f2f41a765339ec51e4876dd2c1a526b23813f3a18c075d170f44", @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r4, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474203, 0x408}, 0x18) 282.550449ms ago: executing program 0 (id=488): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r5, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r7, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c000100040000000200", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(r6, &(0x7f00000002c0)='mountinfo\x00') ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) 282.151979ms ago: executing program 1 (id=489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x2, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 280.816889ms ago: executing program 2 (id=490): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth0_to_team\x00', 0x2}) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x0, 0x1, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syncfs(r9) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x6) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 215.317199ms ago: executing program 1 (id=491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2002400, &(0x7f0000000500)={[{@nouid32}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") 214.646139ms ago: executing program 4 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xa8}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x1], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000001080)="$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") r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0x16, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000000280)='B', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x6, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x844) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r7], 0x4394) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0xffffffffffffff68, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000001000)=@gettfilter={0x5c, 0x2e, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0xb, 0xfff3}, {0xfff2, 0xfff2}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xef00000}, {0x8, 0xb, 0x5cc}, {0x8, 0xb, 0xfffffffa}, {0x8}, {0x8, 0xb, 0x1}]}, 0x5c}}, 0x40000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000600", @ANYRES32=0x0, @ANYBLOB="0000001400000000000000000000000000ffd817", @ANYRES8, @ANYRES32, @ANYBLOB="00000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 147.218009ms ago: executing program 0 (id=493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000240)={{0x8, 0x9}, {0x3, 0x6}, 0x2, 0x7, 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000e08000340000000040900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500200a"], 0x7c}}, 0x0) 146.681899ms ago: executing program 2 (id=494): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) 145.321119ms ago: executing program 1 (id=495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) (async) 73.21294ms ago: executing program 0 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 72.64155ms ago: executing program 2 (id=497): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000022000000000000000000800711049000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xd}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006"], 0x2c}, 0x1, 0x0, 0x0, 0x2404c011}, 0x4044000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x48) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c00, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYRES64=r1], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setxattr$security_capability(&(0x7f0000000200)='./file2\x00', &(0x7f0000000300), &(0x7f0000000400)=@v2={0x2000000, [{0x9, 0x7}, {0x80000000, 0x9}]}, 0x14, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_io_uring_setup(0x499, &(0x7f0000000380)={0x0, 0x707b, 0x10000, 0x0, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r6, 0x154e, 0x0, 0x41, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 69.55568ms ago: executing program 1 (id=498): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0x10c00, 0x23e, 0x10000, 0x2}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa312, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) 55.71766ms ago: executing program 3 (id=499): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) getresuid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001ffffffff0000000002000100000000000005070c0100000005000500000000000a004e24000000090000000000000000000000000000000000090000000000000200130003"], 0x98}, 0x1, 0x7}, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r1, r0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) brk(0x400000ffc020) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x5, 0x0, 0x7fff, 0x0, 0xfffffff7, 0x1ff, 0x81, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0xfb8d, 0x7b2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x6, 0x0, 0x0, 0x7fffffff, 0x3035, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0xe9, 0x3, 0xfffffffe, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xff, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, 0x2, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0xfff8, 0x8, 0x40}, 0x0, 0x0, 0x6e4}}]}}]}, 0x45c}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) 19.25477ms ago: executing program 0 (id=500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0xf5, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0) 0s ago: executing program 1 (id=501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) timer_create(0x1, &(0x7f0000000080)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 27.403583][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 27.403601][ T29] audit: type=1400 audit(1762223246.175:57): avc: denied { transition } for pid=3294 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 27.432483][ T29] audit: type=1400 audit(1762223246.175:58): avc: denied { noatsecure } for pid=3294 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 27.452477][ T29] audit: type=1400 audit(1762223246.175:59): avc: denied { write } for pid=3294 comm="sh" path="pipe:[603]" dev="pipefs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 27.474900][ T29] audit: type=1400 audit(1762223246.175:60): avc: denied { rlimitinh } for pid=3294 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 27.493677][ T29] audit: type=1400 audit(1762223246.175:61): avc: denied { siginh } for pid=3294 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 36.136670][ T29] audit: type=1400 audit(1762223254.905:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 36.159914][ T29] audit: type=1400 audit(1762223254.935:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.160946][ T3304] cgroup: Unknown subsys name 'net' [ 36.187855][ T29] audit: type=1400 audit(1762223254.965:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.308260][ T3304] cgroup: Unknown subsys name 'cpuset' [ 36.314631][ T3304] cgroup: Unknown subsys name 'rlimit' [ 36.446234][ T29] audit: type=1400 audit(1762223255.215:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.470135][ T29] audit: type=1400 audit(1762223255.215:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.490659][ T29] audit: type=1400 audit(1762223255.215:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.511027][ T29] audit: type=1400 audit(1762223255.215:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.531379][ T29] audit: type=1400 audit(1762223255.215:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.541521][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.556638][ T29] audit: type=1400 audit(1762223255.215:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.589119][ T29] audit: type=1400 audit(1762223255.345:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.620159][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.509323][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 38.554466][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 38.608630][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.615759][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.623188][ T3319] bridge_slave_0: entered allmulticast mode [ 38.629704][ T3319] bridge_slave_0: entered promiscuous mode [ 38.637187][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.644388][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.651581][ T3319] bridge_slave_1: entered allmulticast mode [ 38.658064][ T3319] bridge_slave_1: entered promiscuous mode [ 38.722410][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.734536][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.760493][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.767615][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.774776][ T3315] bridge_slave_0: entered allmulticast mode [ 38.781414][ T3315] bridge_slave_0: entered promiscuous mode [ 38.787972][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 38.797023][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.804205][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.811361][ T3315] bridge_slave_1: entered allmulticast mode [ 38.817765][ T3315] bridge_slave_1: entered promiscuous mode [ 38.856336][ T3319] team0: Port device team_slave_0 added [ 38.862266][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 38.879612][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.889624][ T3319] team0: Port device team_slave_1 added [ 38.896276][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.932855][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 38.954760][ T3315] team0: Port device team_slave_0 added [ 38.960887][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.967892][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.993835][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.015395][ T3315] team0: Port device team_slave_1 added [ 39.021548][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.028628][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.055525][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.097862][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.105106][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.112432][ T3321] bridge_slave_0: entered allmulticast mode [ 39.119052][ T3321] bridge_slave_0: entered promiscuous mode [ 39.126219][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.133568][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.141087][ T3321] bridge_slave_1: entered allmulticast mode [ 39.147752][ T3321] bridge_slave_1: entered promiscuous mode [ 39.154474][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.161482][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.187751][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.211608][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.218647][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.244670][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.276318][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.288894][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.296160][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.303464][ T3318] bridge_slave_0: entered allmulticast mode [ 39.309830][ T3318] bridge_slave_0: entered promiscuous mode [ 39.323063][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.342768][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.350058][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.357215][ T3318] bridge_slave_1: entered allmulticast mode [ 39.363918][ T3318] bridge_slave_1: entered promiscuous mode [ 39.372428][ T3319] hsr_slave_0: entered promiscuous mode [ 39.378691][ T3319] hsr_slave_1: entered promiscuous mode [ 39.395804][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.403125][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.410395][ T3314] bridge_slave_0: entered allmulticast mode [ 39.416781][ T3314] bridge_slave_0: entered promiscuous mode [ 39.442571][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.449720][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.456866][ T3314] bridge_slave_1: entered allmulticast mode [ 39.463418][ T3314] bridge_slave_1: entered promiscuous mode [ 39.476298][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.487909][ T3315] hsr_slave_0: entered promiscuous mode [ 39.494061][ T3315] hsr_slave_1: entered promiscuous mode [ 39.500056][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 39.505791][ T3315] Cannot create hsr debugfs directory [ 39.512084][ T3321] team0: Port device team_slave_0 added [ 39.533929][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.544042][ T3321] team0: Port device team_slave_1 added [ 39.568919][ T3318] team0: Port device team_slave_0 added [ 39.575891][ T3318] team0: Port device team_slave_1 added [ 39.587558][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.621232][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.630766][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.637853][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.663837][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.682924][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.690020][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.716068][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.732248][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.739338][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.765401][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.783838][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.791011][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.817132][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.846645][ T3314] team0: Port device team_slave_0 added [ 39.855309][ T3314] team0: Port device team_slave_1 added [ 39.919556][ T3318] hsr_slave_0: entered promiscuous mode [ 39.925677][ T3318] hsr_slave_1: entered promiscuous mode [ 39.931822][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 39.937608][ T3318] Cannot create hsr debugfs directory [ 39.945382][ T3321] hsr_slave_0: entered promiscuous mode [ 39.951711][ T3321] hsr_slave_1: entered promiscuous mode [ 39.957804][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 39.963548][ T3321] Cannot create hsr debugfs directory [ 39.972524][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.979600][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.005726][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.023500][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.030632][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.056628][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.138658][ T3314] hsr_slave_0: entered promiscuous mode [ 40.144764][ T3314] hsr_slave_1: entered promiscuous mode [ 40.150675][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 40.156406][ T3314] Cannot create hsr debugfs directory [ 40.195093][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.219100][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.239233][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.248207][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.294420][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.303655][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.314131][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.323438][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.361749][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.372189][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.390902][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.400470][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.437262][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.448214][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.461954][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.474028][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.496608][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.507056][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.534290][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.553053][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.565379][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.572589][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.584213][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.591892][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.605181][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.614101][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.621280][ T1742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.632121][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.646539][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.659823][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.666927][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.677982][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.691429][ T1742] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.698665][ T1742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.710231][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.717370][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.728553][ T1742] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.735701][ T1742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.800966][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.850701][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.869520][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.881548][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.903165][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.910502][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.929771][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.938955][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.949886][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.956999][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.977174][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.984377][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.998406][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.005510][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.015070][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.036252][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.058927][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.089594][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.193710][ T3318] veth0_vlan: entered promiscuous mode [ 41.222545][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.244880][ T3319] veth0_vlan: entered promiscuous mode [ 41.257635][ T3318] veth1_vlan: entered promiscuous mode [ 41.266136][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.301144][ T3319] veth1_vlan: entered promiscuous mode [ 41.311920][ T3318] veth0_macvtap: entered promiscuous mode [ 41.330575][ T3318] veth1_macvtap: entered promiscuous mode [ 41.355773][ T3315] veth0_vlan: entered promiscuous mode [ 41.365102][ T3315] veth1_vlan: entered promiscuous mode [ 41.377255][ T3319] veth0_macvtap: entered promiscuous mode [ 41.389110][ T3319] veth1_macvtap: entered promiscuous mode [ 41.411374][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.419730][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.435037][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.451457][ T3314] veth0_vlan: entered promiscuous mode [ 41.458013][ T3315] veth0_macvtap: entered promiscuous mode [ 41.465486][ T3315] veth1_macvtap: entered promiscuous mode [ 41.473060][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.488811][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.501608][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.510924][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.531725][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.542333][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.553901][ T3314] veth1_vlan: entered promiscuous mode [ 41.566259][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.578034][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 41.578048][ T29] audit: type=1400 audit(1762223260.355:81): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.1AzKGI/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.610212][ T29] audit: type=1400 audit(1762223260.355:82): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.632331][ T29] audit: type=1400 audit(1762223260.355:83): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.1AzKGI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.657755][ T29] audit: type=1400 audit(1762223260.355:84): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.679623][ T29] audit: type=1400 audit(1762223260.355:85): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.1AzKGI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.706416][ T29] audit: type=1400 audit(1762223260.355:86): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.1AzKGI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 41.733912][ T29] audit: type=1400 audit(1762223260.355:87): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.759220][ T29] audit: type=1400 audit(1762223260.535:88): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.760259][ T3321] veth0_vlan: entered promiscuous mode [ 41.782000][ T29] audit: type=1400 audit(1762223260.535:89): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=4597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 41.805321][ T3314] veth0_macvtap: entered promiscuous mode [ 41.818745][ T3314] veth1_macvtap: entered promiscuous mode [ 41.826117][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.830231][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.850872][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.860141][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.878947][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.895746][ T3321] veth1_vlan: entered promiscuous mode [ 41.902531][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.917747][ T29] audit: type=1400 audit(1762223260.695:90): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.943888][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.965472][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.007599][ T1742] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.016686][ T3321] veth0_macvtap: entered promiscuous mode [ 42.026628][ T1742] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.061912][ T1742] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.074402][ T3321] veth1_macvtap: entered promiscuous mode [ 42.087920][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.114258][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.135298][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.156790][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.169874][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.194231][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.207103][ T3502] loop2: detected capacity change from 0 to 164 [ 42.230181][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.255628][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.274779][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.294310][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.332876][ T3510] loop1: detected capacity change from 0 to 128 [ 42.342151][ T3512] loop4: detected capacity change from 0 to 164 [ 42.349950][ T3510] FAT-fs (loop1): bogus logical sector size 8 [ 42.356074][ T3510] FAT-fs (loop1): Can't find a valid FAT filesystem [ 42.379130][ T3510] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2'. [ 42.401454][ T3516] loop2: detected capacity change from 0 to 7 [ 42.575445][ T3530] netlink: 'syz.1.17': attribute type 13 has an invalid length. [ 42.809315][ T3535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'. [ 42.907452][ T3539] 9pnet_fd: Insufficient options for proto=fd [ 42.956769][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.964109][ T3542] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.068447][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.091876][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.140445][ T3550] loop4: detected capacity change from 0 to 164 [ 43.206325][ T3451] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.230306][ T3451] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.256340][ T3451] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.285687][ T3451] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.352128][ T3558] loop0: detected capacity change from 0 to 164 [ 43.413957][ T3562] loop2: detected capacity change from 0 to 512 [ 43.429595][ T3562] EXT4-fs: Ignoring removed nobh option [ 43.443979][ T3562] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.490939][ T3562] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.28: corrupted inode contents [ 43.503480][ T3562] EXT4-fs (loop2): Remounting filesystem read-only [ 43.513894][ T3562] EXT4-fs (loop2): 1 truncate cleaned up [ 43.530865][ T3562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.624590][ T3562] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.742302][ T3569] loop3: detected capacity change from 0 to 512 [ 43.769221][ T3569] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.30: bad orphan inode 11862016 [ 43.780437][ T3569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.794149][ T3569] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.828796][ T3576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.32'. [ 43.957008][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.984450][ T3584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3584 comm=syz.3.35 [ 44.026837][ T3589] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.097480][ T3594] syzkaller0: entered promiscuous mode [ 44.103020][ T3594] syzkaller0: entered allmulticast mode [ 44.192659][ T3562] syz.2.28 (3562) used greatest stack depth: 9696 bytes left [ 44.200649][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.212388][ T3589] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.311613][ T3589] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.370283][ T3589] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.423617][ T3451] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.435084][ T3451] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.446931][ T3451] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.474844][ T1742] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.536757][ T3608] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 44.553605][ T3608] ip6t_srh: unknown srh match flags 4000 [ 44.623821][ T3616] ip6t_srh: unknown srh match flags 4000 [ 44.650124][ T3617] loop4: detected capacity change from 0 to 164 [ 44.702766][ T3619] loop0: detected capacity change from 0 to 164 [ 45.257214][ T3646] netlink: 'syz.4.58': attribute type 13 has an invalid length. [ 45.302318][ C1] hrtimer: interrupt took 31495 ns [ 45.326920][ T3648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.59'. [ 45.336666][ T3648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 45.356786][ T3648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.59'. [ 45.367976][ T3648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 45.391910][ T3648] Zero length message leads to an empty skb [ 45.418432][ T3653] loop2: detected capacity change from 0 to 7 [ 45.656020][ T3657] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.740447][ T3657] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.808793][ T3657] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.860971][ T3657] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.905241][ T3451] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.925272][ T3451] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.962569][ T3451] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.982945][ T3451] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.013221][ T3669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 46.022974][ T3669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 46.042252][ T3669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 46.115120][ T3680] vlan2: entered allmulticast mode [ 46.292014][ T3695] loop4: detected capacity change from 0 to 512 [ 46.302326][ T3695] EXT4-fs: Ignoring removed nobh option [ 46.334054][ T3695] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.76: corrupted inode contents [ 46.346599][ T3695] EXT4-fs (loop4): Remounting filesystem read-only [ 46.354194][ T3695] EXT4-fs (loop4): 1 truncate cleaned up [ 46.360672][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.374079][ T3695] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.466328][ T3700] loop1: detected capacity change from 0 to 164 [ 46.559091][ T3704] ip6t_srh: unknown srh match flags 4000 [ 46.572976][ T3706] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.630641][ T3706] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.648275][ T3708] loop2: detected capacity change from 0 to 164 [ 46.680195][ T3706] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.756908][ T3714] ip6t_srh: unknown srh match flags 4000 [ 46.766342][ T3706] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.834792][ T3715] loop0: detected capacity change from 0 to 164 [ 47.078944][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.115928][ T3728] vlan1: entered allmulticast mode [ 47.147353][ T3732] netlink: 'syz.4.88': attribute type 13 has an invalid length. [ 47.384440][ T3753] loop3: detected capacity change from 0 to 164 [ 47.590644][ T3761] netlink: 'syz.0.101': attribute type 13 has an invalid length. [ 48.021387][ T3764] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.060721][ T3764] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.101121][ T3764] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.150431][ T3764] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.224811][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.236470][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.248518][ T1742] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.261331][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.348146][ T3771] ip6t_srh: unknown srh match flags 4000 [ 48.375223][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 48.375240][ T29] audit: type=1326 audit(1762223267.135:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3164a3f6c9 code=0x7ffc0000 [ 48.405250][ T29] audit: type=1326 audit(1762223267.135:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3164a3f6c9 code=0x7ffc0000 [ 48.428762][ T29] audit: type=1326 audit(1762223267.135:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3164a3f6c9 code=0x7ffc0000 [ 48.452360][ T29] audit: type=1326 audit(1762223267.135:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3164a3f6c9 code=0x7ffc0000 [ 48.463118][ T3776] loop4: detected capacity change from 0 to 512 [ 48.476284][ T29] audit: type=1326 audit(1762223267.135:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3164a3f6c9 code=0x7ffc0000 [ 48.476368][ T29] audit: type=1326 audit(1762223267.135:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3164a3f6c9 code=0x7ffc0000 [ 48.529338][ T29] audit: type=1326 audit(1762223267.135:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3164a3f6c9 code=0x7ffc0000 [ 48.530124][ T3777] loop2: detected capacity change from 0 to 164 [ 48.552724][ T29] audit: type=1326 audit(1762223267.135:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3164a3f6c9 code=0x7ffc0000 [ 48.582404][ T29] audit: type=1326 audit(1762223267.135:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3164a3f6c9 code=0x7ffc0000 [ 48.605601][ T29] audit: type=1326 audit(1762223267.135:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3164a3f6c9 code=0x7ffc0000 [ 48.624973][ T3776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.645772][ T3776] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.668545][ T3782] loop3: detected capacity change from 0 to 512 [ 48.722304][ T3782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.755183][ T3782] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.843810][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.860823][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.001619][ T3802] syzkaller0: entered promiscuous mode [ 49.007220][ T3802] syzkaller0: entered allmulticast mode [ 49.395696][ T3820] loop2: detected capacity change from 0 to 512 [ 49.402387][ T3820] EXT4-fs: Ignoring removed nobh option [ 49.419035][ T3820] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.121: corrupted inode contents [ 49.431216][ T3820] EXT4-fs (loop2): Remounting filesystem read-only [ 49.438548][ T3820] EXT4-fs (loop2): 1 truncate cleaned up [ 49.444641][ T3820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.457786][ T3820] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.596613][ T3826] __nla_validate_parse: 11 callbacks suppressed [ 49.596633][ T3826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 49.632196][ T3828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.125'. [ 50.001910][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.035083][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.071657][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.080185][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.115921][ T3849] ip6t_srh: unknown srh match flags 4000 [ 50.150139][ T3853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.137'. [ 50.169701][ T3852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 50.223347][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.295315][ T3862] loop1: detected capacity change from 0 to 164 [ 50.365876][ T3870] loop2: detected capacity change from 0 to 512 [ 50.463091][ T3870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.498022][ T3870] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.509968][ T3846] loop0: detected capacity change from 0 to 512 [ 50.540193][ T3846] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.132: bad orphan inode 11862016 [ 50.551638][ T3846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 50.564497][ T3846] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.599167][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.844668][ T3885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 50.964843][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 50.990858][ T3891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.151'. [ 51.053471][ T3899] loop1: detected capacity change from 0 to 512 [ 51.115331][ T3899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.133004][ T3901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.156'. [ 51.143144][ T3901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 51.144520][ T3899] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.174350][ T3901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.156'. [ 51.183840][ T3901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 51.248751][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.519555][ T3932] vlan2: entered allmulticast mode [ 51.633349][ T3947] vlan2: entered allmulticast mode [ 51.872310][ T3954] ip6t_srh: unknown srh match flags 4000 [ 51.971267][ T3961] loop3: detected capacity change from 0 to 164 [ 52.240129][ T3971] loop2: detected capacity change from 0 to 7 [ 52.430152][ T3994] loop2: detected capacity change from 0 to 164 [ 52.613646][ T4005] loop2: detected capacity change from 0 to 7 [ 52.699470][ T4012] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.759151][ T4012] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.806263][ T4012] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.879740][ T4012] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.949758][ T3451] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.973798][ T3451] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.004974][ T3451] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.040051][ T3451] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.767156][ T4084] loop0: detected capacity change from 0 to 512 [ 53.818813][ T4084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.847455][ T4084] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.951424][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.072320][ T4107] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.136286][ T4107] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.146419][ T4112] loop2: detected capacity change from 0 to 7 [ 54.181074][ T4114] ip6t_srh: unknown srh match flags 4000 [ 54.217189][ T4107] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.311683][ T4126] loop0: detected capacity change from 0 to 164 [ 54.348516][ T4107] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.508642][ T1742] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.542749][ T1742] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.571243][ T1742] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.589442][ T1742] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.019982][ T4152] loop2: detected capacity change from 0 to 7 [ 55.121367][ T4157] loop2: detected capacity change from 0 to 7 [ 55.139316][ T4155] __nla_validate_parse: 16 callbacks suppressed [ 55.139348][ T4155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.259'. [ 55.177805][ T4155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.259'. [ 55.374901][ T4176] loop2: detected capacity change from 0 to 7 [ 55.482778][ T4188] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.540980][ T4188] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.590215][ T4188] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.651400][ T4195] vlan2: entered allmulticast mode [ 55.679793][ T4188] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.923331][ T4213] ip6t_srh: unknown srh match flags 4000 [ 56.033954][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 56.033974][ T29] audit: type=1400 audit(1762223274.805:194): avc: denied { read write } for pid=4217 comm="syz.1.285" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 56.105399][ T4221] loop2: detected capacity change from 0 to 164 [ 56.115006][ T29] audit: type=1400 audit(1762223274.805:195): avc: denied { open } for pid=4217 comm="syz.1.285" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 56.159013][ T4222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 56.223773][ T4224] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.341375][ T4224] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.421579][ T4224] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.512723][ T4224] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.654428][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.672884][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.710598][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.722500][ T1742] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.865372][ T4248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 56.967014][ T4259] loop2: detected capacity change from 0 to 7 [ 56.998397][ T4261] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.007635][ T4263] loop2: detected capacity change from 0 to 7 [ 57.040889][ T4261] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.090463][ T4261] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.161126][ T4261] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.263626][ T3451] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.276071][ T3451] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.292640][ T3451] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.307882][ T3451] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.380785][ T4280] ip6t_srh: unknown srh match flags 4000 [ 57.471937][ T4283] loop4: detected capacity change from 0 to 164 [ 57.489182][ T4285] loop0: detected capacity change from 0 to 512 [ 57.532357][ T4285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.607791][ T4285] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.734034][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.811345][ T29] audit: type=1400 audit(1762223276.585:196): avc: denied { bind } for pid=4295 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.830678][ T29] audit: type=1400 audit(1762223276.585:197): avc: denied { name_bind } for pid=4295 comm="syz.0.317" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 57.852370][ T29] audit: type=1400 audit(1762223276.585:198): avc: denied { node_bind } for pid=4295 comm="syz.0.317" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 58.561222][ T4319] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.609046][ T4319] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.669364][ T4319] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.709064][ T4319] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.784587][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.796386][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.808843][ T1742] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.821398][ T1742] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.008363][ T4330] ip6t_srh: unknown srh match flags 4000 [ 59.102080][ T4335] loop0: detected capacity change from 0 to 164 [ 59.109463][ T4332] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.161013][ T4332] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.183818][ T4334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.333'. [ 59.193608][ T4334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.333'. [ 59.225639][ T4334] netlink: 20 bytes leftover after parsing attributes in process `syz.4.333'. [ 59.237315][ T4334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.333'. [ 59.261695][ T4332] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.293618][ T4339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 59.324625][ T4332] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.360844][ T29] audit: type=1400 audit(1762223278.115:199): avc: denied { bind } for pid=4345 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.510052][ T29] audit: type=1400 audit(1762223278.275:200): avc: denied { read write } for pid=4352 comm="syz.4.340" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.570282][ T29] audit: type=1400 audit(1762223278.345:201): avc: denied { create } for pid=4356 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.591014][ T29] audit: type=1400 audit(1762223278.345:202): avc: denied { write } for pid=4356 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.641554][ T29] audit: type=1400 audit(1762223278.415:203): avc: denied { create } for pid=4358 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.729604][ T4370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.347'. [ 59.874873][ T4380] lo: Caught tx_queue_len zero misconfig [ 59.961235][ T4397] FAULT_INJECTION: forcing a failure. [ 59.961235][ T4397] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.974451][ T4397] CPU: 0 UID: 0 PID: 4397 Comm: syz.4.358 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.974483][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.974518][ T4397] Call Trace: [ 59.974525][ T4397] [ 59.974533][ T4397] __dump_stack+0x1d/0x30 [ 59.974622][ T4397] dump_stack_lvl+0xe8/0x140 [ 59.974642][ T4397] dump_stack+0x15/0x1b [ 59.974662][ T4397] should_fail_ex+0x265/0x280 [ 59.974690][ T4397] should_fail+0xb/0x20 [ 59.974815][ T4397] should_fail_usercopy+0x1a/0x20 [ 59.974844][ T4397] _copy_from_user+0x1c/0xb0 [ 59.974894][ T4397] ___sys_sendmsg+0xc1/0x1d0 [ 59.974926][ T4397] __x64_sys_sendmsg+0xd4/0x160 [ 59.974958][ T4397] x64_sys_call+0x191e/0x3000 [ 59.974989][ T4397] do_syscall_64+0xd2/0x200 [ 59.975015][ T4397] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.975046][ T4397] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.975134][ T4397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.975157][ T4397] RIP: 0033:0x7f3164a3f6c9 [ 59.975176][ T4397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.975200][ T4397] RSP: 002b:00007f31634a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.975230][ T4397] RAX: ffffffffffffffda RBX: 00007f3164c95fa0 RCX: 00007f3164a3f6c9 [ 59.975247][ T4397] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 59.975337][ T4397] RBP: 00007f31634a7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.975349][ T4397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.975361][ T4397] R13: 00007f3164c96038 R14: 00007f3164c95fa0 R15: 00007fff14d2be08 [ 59.975378][ T4397] [ 60.147916][ T4395] loop0: detected capacity change from 0 to 8192 [ 60.169796][ T4395] pimreg: entered allmulticast mode [ 60.193758][ T4395] pimreg: left allmulticast mode [ 60.230479][ T4403] __nla_validate_parse: 7 callbacks suppressed [ 60.230673][ T4403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.361'. [ 60.269145][ T4403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'. [ 60.300643][ T4403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.361'. [ 60.312237][ T4403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'. [ 60.362729][ T4411] loop4: detected capacity change from 0 to 164 [ 60.377294][ T4409] loop2: detected capacity change from 0 to 2048 [ 60.433054][ T4416] FAULT_INJECTION: forcing a failure. [ 60.433054][ T4416] name failslab, interval 1, probability 0, space 0, times 0 [ 60.445801][ T4416] CPU: 0 UID: 0 PID: 4416 Comm: syz.2.366 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.445836][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.445852][ T4416] Call Trace: [ 60.445924][ T4416] [ 60.445931][ T4416] __dump_stack+0x1d/0x30 [ 60.445959][ T4416] dump_stack_lvl+0xe8/0x140 [ 60.445980][ T4416] dump_stack+0x15/0x1b [ 60.445999][ T4416] should_fail_ex+0x265/0x280 [ 60.446024][ T4416] should_failslab+0x8c/0xb0 [ 60.446070][ T4416] kmem_cache_alloc_noprof+0x50/0x480 [ 60.446108][ T4416] ? prepare_creds+0x37/0x4c0 [ 60.446144][ T4416] prepare_creds+0x37/0x4c0 [ 60.446172][ T4416] copy_creds+0x8f/0x3f0 [ 60.446222][ T4416] copy_process+0x658/0x2000 [ 60.446326][ T4416] ? kstrtouint+0x76/0xc0 [ 60.446371][ T4416] ? __rcu_read_unlock+0x4f/0x70 [ 60.446412][ T4416] kernel_clone+0x16c/0x5c0 [ 60.446444][ T4416] ? vfs_write+0x7e8/0x960 [ 60.446470][ T4416] __x64_sys_clone+0xe6/0x120 [ 60.446645][ T4416] x64_sys_call+0x119c/0x3000 [ 60.446675][ T4416] do_syscall_64+0xd2/0x200 [ 60.446697][ T4416] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.446725][ T4416] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.446816][ T4416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.446837][ T4416] RIP: 0033:0x7f8522a9f6c9 [ 60.446856][ T4416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.446911][ T4416] RSP: 002b:00007f85214fefe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 60.446974][ T4416] RAX: ffffffffffffffda RBX: 00007f8522cf5fa0 RCX: 00007f8522a9f6c9 [ 60.446999][ T4416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000b44040 [ 60.447011][ T4416] RBP: 00007f85214ff090 R08: 0000000000000000 R09: 0000000000000000 [ 60.447026][ T4416] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 60.447041][ T4416] R13: 00007f8522cf6038 R14: 00007f8522cf5fa0 R15: 00007ffde5a96398 [ 60.447063][ T4416] [ 60.665007][ T4418] netlink: 148 bytes leftover after parsing attributes in process `syz.0.367'. [ 60.738718][ T4426] FAULT_INJECTION: forcing a failure. [ 60.738718][ T4426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.751904][ T4426] CPU: 0 UID: 0 PID: 4426 Comm: syz.0.371 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.751939][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.751955][ T4426] Call Trace: [ 60.751964][ T4426] [ 60.751974][ T4426] __dump_stack+0x1d/0x30 [ 60.752006][ T4426] dump_stack_lvl+0xe8/0x140 [ 60.752026][ T4426] dump_stack+0x15/0x1b [ 60.752065][ T4426] should_fail_ex+0x265/0x280 [ 60.752085][ T4426] should_fail+0xb/0x20 [ 60.752100][ T4426] should_fail_usercopy+0x1a/0x20 [ 60.752177][ T4426] _copy_from_user+0x1c/0xb0 [ 60.752212][ T4426] ip_options_get+0x11a/0x350 [ 60.752241][ T4426] do_ip_setsockopt+0x19d4/0x2240 [ 60.752348][ T4426] ip_setsockopt+0x58/0x110 [ 60.752463][ T4426] raw_setsockopt+0xbd/0x150 [ 60.752491][ T4426] sock_common_setsockopt+0x69/0x80 [ 60.752601][ T4426] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 60.752692][ T4426] __sys_setsockopt+0x184/0x200 [ 60.752728][ T4426] __x64_sys_setsockopt+0x64/0x80 [ 60.752772][ T4426] x64_sys_call+0x20ec/0x3000 [ 60.752802][ T4426] do_syscall_64+0xd2/0x200 [ 60.752900][ T4426] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.752944][ T4426] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.753053][ T4426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.753079][ T4426] RIP: 0033:0x7f9994adf6c9 [ 60.753099][ T4426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.753123][ T4426] RSP: 002b:00007f999353f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.753147][ T4426] RAX: ffffffffffffffda RBX: 00007f9994d35fa0 RCX: 00007f9994adf6c9 [ 60.753164][ T4426] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.753228][ T4426] RBP: 00007f999353f090 R08: 0000000000000004 R09: 0000000000000000 [ 60.753244][ T4426] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.753323][ T4426] R13: 00007f9994d36038 R14: 00007f9994d35fa0 R15: 00007ffe01dd8ff8 [ 60.753348][ T4426] [ 60.991409][ T4430] 9pnet: Could not find request transport: t [ 61.027759][ T4433] loop0: detected capacity change from 0 to 1024 [ 61.036564][ T4433] EXT4-fs: Ignoring removed orlov option [ 61.048802][ T4433] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 61.061192][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 61.061209][ T29] audit: type=1400 audit(1762223279.825:237): avc: denied { write } for pid=4434 comm="syz.4.374" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.090857][ T29] audit: type=1400 audit(1762223279.865:238): avc: denied { setopt } for pid=4436 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.100151][ T4433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.130260][ T4433] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 61.143884][ T29] audit: type=1400 audit(1762223279.905:239): avc: denied { mount } for pid=4432 comm="syz.0.373" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.144653][ T4433] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #12: block 7: comm syz.0.373: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 61.165459][ T29] audit: type=1400 audit(1762223279.905:240): avc: denied { write } for pid=4432 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.204480][ T29] audit: type=1400 audit(1762223279.905:241): avc: denied { add_name } for pid=4432 comm="syz.0.373" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.225374][ T29] audit: type=1400 audit(1762223279.905:242): avc: denied { create } for pid=4432 comm="syz.0.373" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.227749][ T4442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.376'. [ 61.245824][ T29] audit: type=1400 audit(1762223279.905:243): avc: denied { write } for pid=4432 comm="syz.0.373" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.245929][ T29] audit: type=1400 audit(1762223279.905:244): avc: denied { open } for pid=4432 comm="syz.0.373" path="/82/file1/file0/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.245964][ T29] audit: type=1400 audit(1762223279.905:245): avc: denied { mounton } for pid=4432 comm="syz.0.373" path="/82/file1/file0/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.246070][ T29] audit: type=1400 audit(1762223279.905:246): avc: denied { read } for pid=4432 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.345416][ T4442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 61.364724][ T4442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.376'. [ 61.374250][ T4442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 61.384495][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.406239][ T4446] FAULT_INJECTION: forcing a failure. [ 61.406239][ T4446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.419464][ T4446] CPU: 0 UID: 0 PID: 4446 Comm: syz.0.377 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.419527][ T4446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 61.419543][ T4446] Call Trace: [ 61.419550][ T4446] [ 61.419559][ T4446] __dump_stack+0x1d/0x30 [ 61.419585][ T4446] dump_stack_lvl+0xe8/0x140 [ 61.419611][ T4446] dump_stack+0x15/0x1b [ 61.419634][ T4446] should_fail_ex+0x265/0x280 [ 61.419688][ T4446] should_fail+0xb/0x20 [ 61.419718][ T4446] should_fail_usercopy+0x1a/0x20 [ 61.419787][ T4446] _copy_from_user+0x1c/0xb0 [ 61.419820][ T4446] ___sys_sendmsg+0xc1/0x1d0 [ 61.419860][ T4446] __sys_sendmmsg+0x178/0x300 [ 61.419896][ T4446] __x64_sys_sendmmsg+0x57/0x70 [ 61.419988][ T4446] x64_sys_call+0x1c4a/0x3000 [ 61.420017][ T4446] do_syscall_64+0xd2/0x200 [ 61.420043][ T4446] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.420086][ T4446] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 61.420150][ T4446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.420243][ T4446] RIP: 0033:0x7f9994adf6c9 [ 61.420344][ T4446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.420368][ T4446] RSP: 002b:00007f999353f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 61.420392][ T4446] RAX: ffffffffffffffda RBX: 00007f9994d35fa0 RCX: 00007f9994adf6c9 [ 61.420440][ T4446] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 61.420456][ T4446] RBP: 00007f999353f090 R08: 0000000000000000 R09: 0000000000000000 [ 61.420548][ T4446] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001 [ 61.420565][ T4446] R13: 00007f9994d36038 R14: 00007f9994d35fa0 R15: 00007ffe01dd8ff8 [ 61.420589][ T4446] [ 61.674012][ T125] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.674066][ T125] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.674168][ T125] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.693353][ T3451] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.703977][ T4454] netlink: 148 bytes leftover after parsing attributes in process `syz.2.381'. [ 61.749459][ T4459] 9pnet: Could not find request transport: t [ 61.880368][ T4466] loop0: detected capacity change from 0 to 760 [ 61.963344][ T4480] loop0: detected capacity change from 0 to 1024 [ 62.077910][ T4480] EXT4-fs: inline encryption not supported [ 62.083852][ T4480] EXT4-fs: Ignoring removed orlov option [ 62.105493][ T4480] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 62.250966][ T4480] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 62.259415][ T4480] System zones: 0-1, 3-12 [ 62.264899][ T4480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.285831][ T4488] random: crng reseeded on system resumption [ 62.376899][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.408079][ T4490] loop4: detected capacity change from 0 to 1764 [ 62.425067][ T4490] grow_buffers: requested out-of-range block 18446744071681881834 for device loop4 [ 62.434506][ T4490] isofs_fill_super: bread failed, dev=loop4, iso_blknum=1133648757, block=-2027669782 [ 62.571375][ T4502] random: crng reseeded on system resumption [ 62.617984][ T4508] FAULT_INJECTION: forcing a failure. [ 62.617984][ T4508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.631131][ T4508] CPU: 1 UID: 0 PID: 4508 Comm: syz.0.399 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.631162][ T4508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 62.631174][ T4508] Call Trace: [ 62.631181][ T4508] [ 62.631233][ T4508] __dump_stack+0x1d/0x30 [ 62.631255][ T4508] dump_stack_lvl+0xe8/0x140 [ 62.631275][ T4508] dump_stack+0x15/0x1b [ 62.631310][ T4508] should_fail_ex+0x265/0x280 [ 62.631337][ T4508] should_fail+0xb/0x20 [ 62.631358][ T4508] should_fail_usercopy+0x1a/0x20 [ 62.631432][ T4508] _copy_from_user+0x1c/0xb0 [ 62.631467][ T4508] memdup_user+0x5e/0xd0 [ 62.631548][ T4508] autofs_dev_ioctl+0x167/0x6a0 [ 62.631576][ T4508] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 62.631604][ T4508] __se_sys_ioctl+0xce/0x140 [ 62.631705][ T4508] __x64_sys_ioctl+0x43/0x50 [ 62.631732][ T4508] x64_sys_call+0x1816/0x3000 [ 62.631760][ T4508] do_syscall_64+0xd2/0x200 [ 62.631779][ T4508] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.631848][ T4508] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.631887][ T4508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.631908][ T4508] RIP: 0033:0x7f9994adf6c9 [ 62.631928][ T4508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.631946][ T4508] RSP: 002b:00007f999353f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.631970][ T4508] RAX: ffffffffffffffda RBX: 00007f9994d35fa0 RCX: 00007f9994adf6c9 [ 62.631986][ T4508] RDX: 0000200000001980 RSI: 00000000c0189374 RDI: 0000000000000003 [ 62.632002][ T4508] RBP: 00007f999353f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.632014][ T4508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.632026][ T4508] R13: 00007f9994d36038 R14: 00007f9994d35fa0 R15: 00007ffe01dd8ff8 [ 62.632044][ T4508] [ 62.852792][ T4514] netlink: 'syz.0.401': attribute type 6 has an invalid length. [ 62.900342][ T4516] loop0: detected capacity change from 0 to 1024 [ 62.908186][ T4518] loop1: detected capacity change from 0 to 128 [ 62.924651][ T4516] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 62.924651][ T4516] [ 62.935455][ T4516] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 63.025673][ T4530] loop0: detected capacity change from 0 to 1024 [ 63.041606][ T4530] EXT4-fs: inline encryption not supported [ 63.047765][ T4530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.071997][ T4530] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 63.090769][ T4538] loop2: detected capacity change from 0 to 1024 [ 63.101035][ T4538] EXT4-fs: inline encryption not supported [ 63.106915][ T4538] EXT4-fs: Ignoring removed orlov option [ 63.119297][ T4538] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 63.121593][ T4530] loop0: detected capacity change from 0 to 512 [ 63.136689][ T4530] ======================================================= [ 63.136689][ T4530] WARNING: The mand mount option has been deprecated and [ 63.136689][ T4530] and is ignored by this kernel. Remove the mand [ 63.136689][ T4530] option from the mount to silence this warning. [ 63.136689][ T4530] ======================================================= [ 63.203805][ T4538] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 63.212003][ T4530] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.0.406: corrupted xattr block 95: invalid header [ 63.226973][ T4538] System zones: 0-1, 3-12 [ 63.231943][ T4538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.255528][ T4530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.406: bg 0: block 7: invalid block bitmap [ 63.257578][ T4538] FAULT_INJECTION: forcing a failure. [ 63.257578][ T4538] name failslab, interval 1, probability 0, space 0, times 0 [ 63.280508][ T4538] CPU: 0 UID: 0 PID: 4538 Comm: syz.2.410 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.280542][ T4538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.280577][ T4538] Call Trace: [ 63.280586][ T4538] [ 63.280595][ T4538] __dump_stack+0x1d/0x30 [ 63.280713][ T4538] dump_stack_lvl+0xe8/0x140 [ 63.280739][ T4538] dump_stack+0x15/0x1b [ 63.280763][ T4538] should_fail_ex+0x265/0x280 [ 63.280789][ T4538] should_failslab+0x8c/0xb0 [ 63.280826][ T4538] kmem_cache_alloc_noprof+0x50/0x480 [ 63.280869][ T4538] ? ext4_mb_new_blocks+0x2ce/0x2080 [ 63.280909][ T4538] ext4_mb_new_blocks+0x2ce/0x2080 [ 63.281020][ T4538] ? ext4_ext_search_right+0x30b/0x4f0 [ 63.281075][ T4538] ? ext4_inode_to_goal_block+0x1be/0x1e0 [ 63.281113][ T4538] ext4_ext_map_blocks+0xff5/0x38a0 [ 63.281165][ T4538] ext4_map_blocks+0x5ee/0xd00 [ 63.281251][ T4538] ? kmem_cache_alloc_noprof+0x2b8/0x480 [ 63.281293][ T4538] _ext4_get_block+0x10a/0x350 [ 63.281393][ T4538] ext4_get_block_unwritten+0x2a/0xb0 [ 63.281437][ T4538] ext4_block_write_begin+0x5e8/0xc00 [ 63.281464][ T4538] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 63.281536][ T4538] ext4_convert_inline_data_to_extent+0x3df/0x7d0 [ 63.281640][ T4538] ext4_try_to_write_inline_data+0x54/0x90 [ 63.281713][ T4538] ext4_write_begin+0x1b3/0xeb0 [ 63.281833][ T4538] ext4_da_write_begin+0x1fb/0x6e0 [ 63.281871][ T4538] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 63.281949][ T4538] generic_perform_write+0x184/0x490 [ 63.281983][ T4538] ext4_buffered_write_iter+0x1ee/0x3c0 [ 63.282009][ T4538] ext4_file_write_iter+0x387/0xf60 [ 63.282035][ T4538] ? kstrtouint+0x76/0xc0 [ 63.282134][ T4538] ? kstrtouint_from_user+0x9f/0xf0 [ 63.282162][ T4538] ? avc_policy_seqno+0x15/0x30 [ 63.282186][ T4538] ? selinux_file_permission+0x1e4/0x320 [ 63.282232][ T4538] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 63.282259][ T4538] vfs_write+0x52a/0x960 [ 63.282361][ T4538] ksys_write+0xda/0x1a0 [ 63.282402][ T4538] __x64_sys_write+0x40/0x50 [ 63.282488][ T4538] x64_sys_call+0x2802/0x3000 [ 63.282519][ T4538] do_syscall_64+0xd2/0x200 [ 63.282545][ T4538] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.282581][ T4538] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.282676][ T4538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.282704][ T4538] RIP: 0033:0x7f8522a9f6c9 [ 63.282723][ T4538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.282745][ T4538] RSP: 002b:00007f85214ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.282767][ T4538] RAX: ffffffffffffffda RBX: 00007f8522cf5fa0 RCX: 00007f8522a9f6c9 [ 63.282784][ T4538] RDX: 00000000fffffdab RSI: 0000200000000000 RDI: 0000000000000004 [ 63.282879][ T4538] RBP: 00007f85214ff090 R08: 0000000000000000 R09: 0000000000000000 [ 63.282891][ T4538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.282940][ T4538] R13: 00007f8522cf6038 R14: 00007f8522cf5fa0 R15: 00007ffde5a96398 [ 63.282959][ T4538] [ 63.315150][ T4558] loop1: detected capacity change from 0 to 1024 [ 63.328103][ T4530] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 63.352273][ T4558] EXT4-fs: inline encryption not supported [ 63.369842][ T4530] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2967: inode #11: comm syz.0.406: corrupted xattr block 95: invalid header [ 63.373159][ T4558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.380502][ T4530] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 63.387227][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.389432][ T4530] EXT4-fs (loop0): 1 orphan inode deleted [ 63.424088][ T4558] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 63.457146][ T4530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.645025][ T4574] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 63.693713][ T3451] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.699956][ T4558] FAULT_INJECTION: forcing a failure. [ 63.699956][ T4558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.705356][ T3451] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.715106][ T4558] CPU: 1 UID: 0 PID: 4558 Comm: syz.1.414 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.715246][ T4558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.715263][ T4558] Call Trace: [ 63.715273][ T4558] [ 63.715283][ T4558] __dump_stack+0x1d/0x30 [ 63.715338][ T4558] dump_stack_lvl+0xe8/0x140 [ 63.715367][ T4558] dump_stack+0x15/0x1b [ 63.715393][ T4558] should_fail_ex+0x265/0x280 [ 63.715422][ T4558] should_fail+0xb/0x20 [ 63.715446][ T4558] should_fail_usercopy+0x1a/0x20 [ 63.715487][ T4558] strncpy_from_user+0x25/0x230 [ 63.715537][ T4558] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 63.715585][ T4558] __se_sys_memfd_create+0x1ff/0x590 [ 63.715667][ T4558] __x64_sys_memfd_create+0x31/0x40 [ 63.715702][ T4558] x64_sys_call+0x2ac2/0x3000 [ 63.715735][ T4558] do_syscall_64+0xd2/0x200 [ 63.715774][ T4558] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.715837][ T4558] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.715883][ T4558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.715915][ T4558] RIP: 0033:0x7f1ac1d6f6c9 [ 63.715936][ T4558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.715961][ T4558] RSP: 002b:00007f1ac07d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 63.715988][ T4558] RAX: ffffffffffffffda RBX: 00000000000004a0 RCX: 00007f1ac1d6f6c9 [ 63.716083][ T4558] RDX: 00007f1ac07d6ef0 RSI: 0000000000000000 RDI: 00007f1ac1df2960 [ 63.716101][ T4558] RBP: 0000200000000e00 R08: 00007f1ac07d6bb7 R09: 00007f1ac07d6e40 [ 63.716118][ T4558] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 63.716136][ T4558] R13: 00007f1ac07d6ef0 R14: 00007f1ac07d6eb0 R15: 00002000000002c0 [ 63.716214][ T4558] [ 63.815065][ T4579] loop4: detected capacity change from 0 to 1024 [ 63.896567][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.902611][ T4579] EXT4-fs: Ignoring removed bh option [ 63.925045][ T4579] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 63.939397][ T4574] loop2: detected capacity change from 0 to 1024 [ 63.946199][ T4574] EXT4-fs: Ignoring removed bh option [ 63.952319][ T4574] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 63.953509][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.981501][ T4579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.983725][ T4587] loop3: detected capacity change from 0 to 1024 [ 64.000735][ T58] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.010072][ T4574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.024520][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.035128][ T4587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.048632][ T4574] FAULT_INJECTION: forcing a failure. [ 64.048632][ T4574] name failslab, interval 1, probability 0, space 0, times 0 [ 64.061318][ T4574] CPU: 1 UID: 0 PID: 4574 Comm: syz.2.416 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.061348][ T4574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.061409][ T4574] Call Trace: [ 64.061417][ T4574] [ 64.061426][ T4574] __dump_stack+0x1d/0x30 [ 64.061461][ T4574] dump_stack_lvl+0xe8/0x140 [ 64.061526][ T4574] dump_stack+0x15/0x1b [ 64.061550][ T4574] should_fail_ex+0x265/0x280 [ 64.061576][ T4574] should_failslab+0x8c/0xb0 [ 64.061611][ T4574] kmem_cache_alloc_noprof+0x50/0x480 [ 64.061742][ T4574] ? getname_flags+0x80/0x3b0 [ 64.061785][ T4574] getname_flags+0x80/0x3b0 [ 64.061825][ T4574] __se_sys_move_mount+0x2d6/0x490 [ 64.061918][ T4574] __x64_sys_move_mount+0x67/0x80 [ 64.061946][ T4574] x64_sys_call+0xcfe/0x3000 [ 64.062055][ T4574] do_syscall_64+0xd2/0x200 [ 64.062074][ T4574] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.062108][ T4574] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.062150][ T4574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.062235][ T4574] RIP: 0033:0x7f8522a9f6c9 [ 64.062255][ T4574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.062277][ T4574] RSP: 002b:00007f85214ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 64.062335][ T4574] RAX: ffffffffffffffda RBX: 00007f8522cf5fa0 RCX: 00007f8522a9f6c9 [ 64.062348][ T4574] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 000000000000000a [ 64.062388][ T4574] RBP: 00007f85214ff090 R08: 0000000000000262 R09: 0000000000000000 [ 64.062401][ T4574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.062413][ T4574] R13: 00007f8522cf6038 R14: 00007f8522cf5fa0 R15: 00007ffde5a96398 [ 64.062432][ T4574] [ 64.264039][ T4587] loop7: detected capacity change from 0 to 7 [ 64.277772][ T4587] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.286687][ T4587] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.294734][ T4587] loop7: unable to read partition table [ 64.301244][ T4587] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P) failed (rc=-5) [ 64.302430][ T3902] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.321470][ T3318] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /86/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 64.328749][ T3902] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.352073][ T3902] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.360632][ T3318] EXT4-fs (loop2): Remounting filesystem read-only [ 64.369115][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.378394][ T3902] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.393642][ T3902] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.405450][ T3902] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.423997][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.438331][ T3902] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.446489][ T3902] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.484653][ T4613] FAULT_INJECTION: forcing a failure. [ 64.484653][ T4613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.497936][ T4613] CPU: 0 UID: 0 PID: 4613 Comm: syz.3.427 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.497966][ T4613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.497981][ T4613] Call Trace: [ 64.497989][ T4613] [ 64.497998][ T4613] __dump_stack+0x1d/0x30 [ 64.498107][ T4613] dump_stack_lvl+0xe8/0x140 [ 64.498127][ T4613] dump_stack+0x15/0x1b [ 64.498210][ T4613] should_fail_ex+0x265/0x280 [ 64.498245][ T4613] should_fail+0xb/0x20 [ 64.498305][ T4613] should_fail_usercopy+0x1a/0x20 [ 64.498326][ T4613] _copy_from_user+0x1c/0xb0 [ 64.498359][ T4613] ___sys_sendmsg+0xc1/0x1d0 [ 64.498401][ T4613] __sys_sendmmsg+0x178/0x300 [ 64.498500][ T4613] __x64_sys_sendmmsg+0x57/0x70 [ 64.498525][ T4613] x64_sys_call+0x1c4a/0x3000 [ 64.498548][ T4613] do_syscall_64+0xd2/0x200 [ 64.498567][ T4613] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.498666][ T4613] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.498709][ T4613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.498782][ T4613] RIP: 0033:0x7f694829f6c9 [ 64.498799][ T4613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.498823][ T4613] RSP: 002b:00007f6946d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.498847][ T4613] RAX: ffffffffffffffda RBX: 00007f69484f5fa0 RCX: 00007f694829f6c9 [ 64.498864][ T4613] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 64.498880][ T4613] RBP: 00007f6946d07090 R08: 0000000000000000 R09: 0000000000000000 [ 64.498895][ T4613] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001 [ 64.498993][ T4613] R13: 00007f69484f6038 R14: 00007f69484f5fa0 R15: 00007ffc41362c38 [ 64.499015][ T4613] [ 64.519059][ T4616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4616 comm=syz.2.424 [ 65.046979][ T4183] kernel write not supported for file /211/gid_map (pid: 4183 comm: kworker/1:4) [ 65.072990][ T4645] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.095633][ T4649] loop2: detected capacity change from 0 to 128 [ 65.103969][ T4649] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.104161][ T4649] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.209336][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.243016][ T4656] loop3: detected capacity change from 0 to 128 [ 65.266016][ T4656] syz.3.442: attempt to access beyond end of device [ 65.266016][ T4656] loop3: rw=2049, sector=138, nr_sectors = 24 limit=128 [ 65.286731][ T4660] af_packet: tpacket_rcv: packet too big, clamped from 332 to 4294967272. macoff=96 [ 65.292776][ T4656] syz.3.442: attempt to access beyond end of device [ 65.292776][ T4656] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 65.384714][ T4668] __nla_validate_parse: 26 callbacks suppressed [ 65.384731][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 65.487287][ T4676] loop3: detected capacity change from 0 to 512 [ 65.494082][ T4677] loop4: detected capacity change from 0 to 2048 [ 65.530459][ T4676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.543320][ T4677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.558479][ T4676] ext4 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.591383][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.602100][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.639534][ T4685] FAULT_INJECTION: forcing a failure. [ 65.639534][ T4685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.652830][ T4685] CPU: 0 UID: 0 PID: 4685 Comm: syz.4.450 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.652897][ T4685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.652980][ T4685] Call Trace: [ 65.652988][ T4685] [ 65.652996][ T4685] __dump_stack+0x1d/0x30 [ 65.653025][ T4685] dump_stack_lvl+0xe8/0x140 [ 65.653052][ T4685] dump_stack+0x15/0x1b [ 65.653108][ T4685] should_fail_ex+0x265/0x280 [ 65.653131][ T4685] should_fail+0xb/0x20 [ 65.653147][ T4685] should_fail_usercopy+0x1a/0x20 [ 65.653167][ T4685] _copy_from_user+0x1c/0xb0 [ 65.653193][ T4685] sctp_setsockopt+0x154/0xe30 [ 65.653255][ T4685] sock_common_setsockopt+0x69/0x80 [ 65.653287][ T4685] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 65.653338][ T4685] __sys_setsockopt+0x184/0x200 [ 65.653418][ T4685] __x64_sys_setsockopt+0x64/0x80 [ 65.653463][ T4685] x64_sys_call+0x20ec/0x3000 [ 65.653492][ T4685] do_syscall_64+0xd2/0x200 [ 65.653556][ T4685] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.653590][ T4685] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.653660][ T4685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.653757][ T4685] RIP: 0033:0x7f3164a3f6c9 [ 65.653772][ T4685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.653793][ T4685] RSP: 002b:00007f31634a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 65.653850][ T4685] RAX: ffffffffffffffda RBX: 00007f3164c95fa0 RCX: 00007f3164a3f6c9 [ 65.653865][ T4685] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000006 [ 65.653881][ T4685] RBP: 00007f31634a7090 R08: 0000000000000008 R09: 0000000000000000 [ 65.653897][ T4685] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.653913][ T4685] R13: 00007f3164c96038 R14: 00007f3164c95fa0 R15: 00007fff14d2be08 [ 65.653936][ T4685] [ 65.859295][ T4689] bond1: entered promiscuous mode [ 65.864422][ T4689] bond1: entered allmulticast mode [ 65.869833][ T4689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.880457][ T4689] bond1 (unregistering): Released all slaves [ 65.894683][ T4687] netlink: 'wޣ': attribute type 13 has an invalid length. [ 65.934309][ T4687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.044906][ T4710] SELinux: policydb string SE`Linux does not match my string SE Linux [ 66.053579][ T4710] SELinux: failed to load policy [ 66.081923][ T4714] netlink: 60 bytes leftover after parsing attributes in process `syz.3.460'. [ 66.091294][ T4715] netlink: 60 bytes leftover after parsing attributes in process `syz.3.460'. [ 66.570066][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 66.570081][ T29] audit: type=1400 audit(1762223285.345:450): avc: denied { bind } for pid=4721 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.631492][ T29] audit: type=1400 audit(1762223285.365:451): avc: denied { getopt } for pid=4721 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.836798][ T29] audit: type=1400 audit(1762223285.605:452): avc: denied { create } for pid=4730 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.925719][ T4734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.465'. [ 66.936269][ T4734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'. [ 66.962101][ T4734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.465'. [ 66.974180][ T4734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'. [ 67.017190][ T29] audit: type=1400 audit(1762223285.775:453): avc: denied { setopt } for pid=4736 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.087955][ T4743] loop2: detected capacity change from 0 to 4096 [ 67.121928][ T4743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.139088][ T4750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 67.140645][ T29] audit: type=1400 audit(1762223285.915:454): avc: denied { create } for pid=4749 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.167626][ T29] audit: type=1400 audit(1762223285.915:455): avc: denied { connect } for pid=4749 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.263174][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.321902][ T29] audit: type=1326 audit(1762223286.095:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9994adf6c9 code=0x7ffc0000 [ 67.345247][ T29] audit: type=1326 audit(1762223286.095:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9994adf6c9 code=0x7ffc0000 [ 67.368525][ T29] audit: type=1326 audit(1762223286.095:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f9994adf6c9 code=0x7ffc0000 [ 67.391829][ T29] audit: type=1326 audit(1762223286.095:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.0.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9994adf6c9 code=0x7ffc0000 [ 67.578113][ T4775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.476'. [ 67.587250][ T4775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.476'. [ 67.981475][ T4798] netlink: 'syz.2.483': attribute type 5 has an invalid length. [ 68.270938][ T4814] loop1: detected capacity change from 0 to 512 [ 68.334636][ T4817] loop4: detected capacity change from 0 to 1024 [ 68.346581][ T4817] EXT4-fs: Ignoring removed nobh option [ 68.352346][ T4817] EXT4-fs: Ignoring removed bh option [ 68.368643][ T4817] EXT4-fs: Mount option(s) incompatible with ext2 [ 68.520744][ T3902] ================================================================== [ 68.529092][ T3902] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 68.535904][ T3902] [ 68.538242][ T3902] write to 0xffff88810b33c610 of 8 bytes by task 3003 on cpu 0: [ 68.545885][ T3902] __dentry_kill+0x142/0x4b0 [ 68.550584][ T3902] dput+0x5e/0xd0 [ 68.554236][ T3902] step_into+0x58c/0x7f0 [ 68.558535][ T3902] walk_component+0x162/0x220 [ 68.563251][ T3902] path_lookupat+0xfe/0x2a0 [ 68.567794][ T3902] filename_lookup+0x2d7/0x340 [ 68.572598][ T3902] do_readlinkat+0x7d/0x320 [ 68.577119][ T3902] __x64_sys_readlink+0x47/0x60 [ 68.581976][ T3902] x64_sys_call+0x28de/0x3000 [ 68.586802][ T3902] do_syscall_64+0xd2/0x200 [ 68.591316][ T3902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.597230][ T3902] [ 68.599576][ T3902] read to 0xffff88810b33c610 of 8 bytes by task 3902 on cpu 1: [ 68.607131][ T3902] fast_dput+0x5f/0x2c0 [ 68.611314][ T3902] dput+0x24/0xd0 [ 68.614963][ T3902] do_unlinkat+0x259/0x480 [ 68.619395][ T3902] __x64_sys_unlink+0x2e/0x40 [ 68.624173][ T3902] x64_sys_call+0x2dcf/0x3000 [ 68.628867][ T3902] do_syscall_64+0xd2/0x200 [ 68.633383][ T3902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.639285][ T3902] [ 68.641614][ T3902] value changed: 0xffff8882379fbd28 -> 0x0000000000000000 [ 68.648743][ T3902] [ 68.651072][ T3902] Reported by Kernel Concurrency Sanitizer on: [ 68.657259][ T3902] CPU: 1 UID: 0 PID: 3902 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.666557][ T3902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.676642][ T3902] ==================================================================