last executing test programs: 9.326439089s ago: executing program 2 (id=326): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r1 = syz_io_uring_setup(0x3bc2, &(0x7f0000000440)={0x0, 0x942e, 0x10100, 0x0, 0x2da}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="45f7000000000000000032000000040006"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 9.148211288s ago: executing program 2 (id=327): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x24008850) 9.047277748s ago: executing program 2 (id=331): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@ipv4={""/10, ""/2, @local}}, &(0x7f0000000200)=0x14) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000080008000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, &(0x7f0000001080)) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000012c0)={0x8, 0x5bb0, 0x0, 'queue1\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) 8.980409518s ago: executing program 2 (id=334): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0], 0x1, 0x23d, &(0x7f00000002c0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xa9, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x35a11b81de9b510) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}, {0x0, 0x300}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x578, &(0x7f0000002180)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fe02000000000000200000000c00060001"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kfree\x00', r6}, 0x18) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf250100000008000100ffffffffd40008800c00078008000500938fb13914000780080006006600000008000500bc91ec6f3c00078008000500b4d66b0a080006000800000008000600a400000008000500981e92040800060027000000080005003ad0c74208000600740000000c000780080006004c0000004c000780080005001459ac7608000500f272154b0800050038e5ba350800050061cfb80e080006003400000008000500f662200008000500598dbd290800060065000000080006009f0000001c00078008000500a22212130800060063000000080006008b0000000800010000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x41) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x180) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = fsopen(&(0x7f0000000340)='tmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000380)='lazytime', &(0x7f0000000400)='resgid', 0x0) syz_clone(0x800100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000940)={&(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000500)="35709f822063f6f259ee01113f6f9b263ff7dde008a2a4663958f4be2a53b4fac67a551f6d49cb01e0e783bf5df247492a3705c8f4327bb9799f29ff2a24368827451df38821775a43f1af56911e5d51081429803136e5f6e5048f7ed1be8d809ce3ce51f15e7a1565b8535a586914ed9dd3cc6934b39fc92b3ecf2b6ac0276d95ecec59a3071247258af9f1945470e6c2bf446291ba47970336df81464c7a", 0x9f}, {&(0x7f00000005c0)="0febdd579cca03cc2ddff79c63d799d3ddcda5321699735411ff537e76d3d72b06ea93ce90063875234fc5eb09d3bd0219eab8dd45906a37bf41a985276c3ad605e907a00afdfca1052cb3f099c53826d3f7e283da377220d9d7aaaa70110cceead4401aa2bc83afc27e11d80edf5d6f42229ec661ee1d3aadb31fb1745ba1fc404f4ce35c81a1458f3810b790fa3808f73cf8c4fea777efbd7191be72", 0x9d}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000680)="6d083ce0c7d6181c3f0a3a9496b13ebc0858668ea5e03c309a2857ebd4960d03eaf326a1913f8de983afd3891fe22e1800ec7ad16b2a728a3414ab7d9a8cd0d974f418989ec8f723a94c94a7e09eaff7c5cf0ecb760c87256d4735c6734b5a157f10", 0x62}, {&(0x7f0000000700)="b70fdedaeb49d008595b2fcc7ca7da251aede5d0f5d32b130fdab7dc4f6509947e01e223f208665a0e2774571b29f155672703ef0760debdd33f598f5597df28d0238760aae643b435433835228738979e1c3923861f83ef713f4b2d0a3ece656d4ba380ee160785874640a7205e0cf6b4860e0fa63658fd5c80655eecb85593fdf8239a570dd50f20861c697723f77c338af0a46c0fce3909dcf562567f7f12886fe216e20bc3b03f5772de2be1c8676b", 0xb1}, {&(0x7f00000007c0)="7b4d82e5292f4a05de121a50f8d9382d4c5fdc1f2e2efe0e0a6522b5800b008d6c5f2ee4de759cdb8b5fc2606707311d2bb0036bde839e3c98be3cf6061dc0c5c2a62d2f0e50d3a084b463048c8d4b2cba984933b4e6bc8cd4287a43471950c64c72a17a5fe7d0ed45d88448583f1b27bab627d69ba0e4dc35dc42217c6a1bb61b3c4037d8163e8138d873be99928f43f07fe6d4b3468e9939e776f19621ad93ced7", 0xa2}], 0x6, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x38}, 0x48000) 8.891465987s ago: executing program 2 (id=337): socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x2, 0x4) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r2, 0x1) tkill(r3, 0x14) 8.396083025s ago: executing program 2 (id=348): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 8.354958205s ago: executing program 32 (id=348): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 2.236166819s ago: executing program 0 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = eventfd2(0x9, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = dup3(r2, r1, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) (async) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r5, 0x1, {0x2, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e24, 0x8000, @local, 0x401}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r6, 0x0, 0x800000000}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r7}, &(0x7f0000000080)=0x0) timer_delete(r8) (async) timer_settime(r8, 0x1, &(0x7f00000001c0), 0x0) (async) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x90000}, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8}) (async) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65) 1.967270888s ago: executing program 0 (id=446): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x62020600) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x18c, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, r2}, {@in=@broadcast, 0x0, 0x33}, @in6=@empty, {0x0, 0x8, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x5}}]}, 0x18c}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000480)={0xa1, 0x9, 0x4, 0x0, 0x3f00, 0x0, 0x0}) 1.807041827s ago: executing program 0 (id=449): open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x30ff, 0x8, '9P2000.u'}, 0x15) r0 = dup(0xffffffffffffffff) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00'], 0x53) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, ']!:'}}, {@pcr={'pcr', 0x3d, 0x1d}}, {@obj_type={'obj_type', 0x3d, '9P2000.u'}}, {@euid_eq}], 0x6b}}) 1.806154227s ago: executing program 1 (id=450): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000301000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000100"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private0, 0x8000}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220c52ebd4687636457b9822766c1bfea4e81ff23c6a4caeaf049a582a9774d3b882ef0600000000000000025d"}, 0xd8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) getrlimit(0xc, &(0x7f0000000cc0)) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xb, &(0x7f0000000080)=ANY=[@ANYRESOCT=r6], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 1.769872957s ago: executing program 1 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = dup(r3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000100)={'erspan0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") 1.768838097s ago: executing program 0 (id=453): listen(0xffffffffffffffff, 0x267) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$eJzs3c9PXFsdAPDvvUDh8XgPnjbxR9TWWq2m6QxMW9J0VTca0zQxNq5ctAhTQphhCDPUgl3Q/8HEJq70T3Bh4sKkK/fudOemLkyqNppi4mLMvTNQShlAS+e+MJ9PcnLvuWc63+/pcM8ZDjAngIF1PiK2IuJMRNyPiMnu9aRb4lanZI979fLx/PbLx/NJtNt3/57k7dm12PNvMh92n3MsIn7w3YgfJ2/HbW5sLs/VatW1br3cqq+WmxubV5bqc4vVxepKpTI7Mzt94+r1yon19Vz91y++s3T7h7/77Zef/2HrWz/N0protu3tx0nqdH1kN05mOCJuv49gBRiKiHa73T5TdCL8X9KI+ExEXMju/3bR2QAA/dBuT0Z7cm8dADjt0nwNLElL3bWAiUjTUqmzhnc2xtNao9m6/KCxvrLQWSubipH0wVKtOt1dK5yKkSSrz+Tnr+uVffWrEfFJRPxs9IO8Xppv1BaKfOMDAAPsw33z/79GO/M/AHDKjRWdAADQd+Z/ABg85n8AGDzmfwAYPOZ/ABg85n8AGDzmfwAYKN+/cycr7e3u518vPNxYX248vLJQbS6X6uvzpfnG2mppsdFYzD+zp37U89UajdWZa7H+qNyqNlvl5sbmvXpjfaV1L/9c73vVkb70CgA4zCfnnv0piYitmx/kJbp7gUS+awVwmqVFJwAUZqjoBIDCDBedAFAY3+MDB2zR+4aevyL09ORzAfrj0hes/8Ogsv4Pg8v6Pwwu6/8wuNrtxJ7/ADBgrPEDfv4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7uJvCRpqbsX+ESkaakU8VFETMVI8mCpVp2OiI8j4o+jI6NZfabopAGAd5T+Nenu/3Vp8uLE/tYzyb9H82NE/OQXd3/+aK7VWpvJrv9j93rrafd6pYj8AYCj7MzTO/P4jlcvH8/vlH7m8+Lbnc1Fs7jb3dJpGY7h/DgWIxEx/s+kW+/I3q8MnUD8rScR8fmD+p/kayNT3Z1P98fPYn/U1/jpG/HTvK1zzP4vPnsCucCgeZaNP7cOuv/SOJ8fD77/x/IR6t3tjH/bb41/6e74N9Rj/Dt/3BjXfv+9nm1PIr44fFD8ZDd+0iP+xWPG//OXvnKhV1v7lxGX4uD4e2OVW/XVcnNj88pSfW6xulhdqVRmZ2anb1y9Xinna9TlnZXqt/3t5uWPD+v/eI/4Y0f0/+vH7P+v/nP/R189JP43v3bw63/2kPjZnPiNY8afG/9Nz+27s/gLPfp/1Ot/+Zjxn/9lc+GYDwUA+qC5sbk8V6tV15z07SR77/YpSMNJYSfZV8BJPM/n3mOqRY9MwPv2+qYvOhMAAAAAAAAAAAAAAKCXfvzBU9F9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PT6bwAAAP//vZPaoA==") mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='io_uring_create\x00', r0, 0x0, 0x24f8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000640)=""/235, 0xeb}, {&(0x7f0000000740)=""/235, 0xeb}, {&(0x7f0000000300)=""/154, 0x9a}], 0x4, &(0x7f0000000480)=""/84, 0x54}, 0x10001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 1.681356937s ago: executing program 5 (id=456): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0xcb, &(0x7f0000000180), &(0x7f0000000080)=0x4) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 1.562053336s ago: executing program 5 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24040010}, 0x24000850) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = fcntl$getown(r0, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r7 = socket(0x22, 0x2, 0x4) ioctl$IMGETCOUNT(r7, 0x80044944, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="18"], 0x48) syz_pidfd_open(r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x6) socket$rxrpc(0x21, 0x2, 0xa) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r9], 0x24}}, 0x0) setpgid(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000000), &(0x7f0000000200)=r8}, 0x20) 1.558125286s ago: executing program 5 (id=458): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x80, 0x1, 0xb, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x40, 0x3ff, 0x3}}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmmsg$unix(r2, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00'}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 1.550103536s ago: executing program 5 (id=459): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x24200, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000000c0)=0x936, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = epoll_create(0x1) epoll_pwait(r7, &(0x7f0000000300)=[{}], 0x1, 0x7fff, 0x0, 0x0) epoll_pwait(r7, &(0x7f0000000080)=[{}], 0x1, 0x81, 0x0, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002640), 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000002680)={0x2}) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x14, 0x0, 0x848734f50186bb25, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x24048801}, 0x40) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r6) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000300"], 0x28}, 0x1, 0x0, 0x0, 0x44020}, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b708000038ba9a7e7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setgroups(0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 1.538751386s ago: executing program 1 (id=460): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) mlockall(0x1) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000006004000850000008600000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d080000000000000000070a000a000900142603600e1208001e0000050401a8430400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.504952466s ago: executing program 0 (id=461): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x2000000000000, 0x6100) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000000) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x48a82, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000300)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESDEC=0x0], 0x1, 0x65b, &(0x7f0000002280)="$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") r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0xa, 0x0, @loopback}, 0x57) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 916.511364ms ago: executing program 5 (id=463): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) splice(r2, 0x0, r4, 0x0, 0x2100, 0x0) sendfile(r0, r1, 0x0, 0x1000000000004) 913.432493ms ago: executing program 4 (id=464): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) (async) r0 = io_uring_setup(0x79bf, &(0x7f0000000180)) (async) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80125, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x400, 0xfffffffa, 0x47, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x18, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @local, 'vxcan1\x00'}}, 0x1e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r3, 0x2f, 0x0, 0x0, @void, @value}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x6, &(0x7f0000000200)=[{0x7, 0x3, 0x8, 0xe}, {0xe82, 0xe, 0x1, 0x9}, {0x0, 0x81, 0x40, 0x1}, {0xba, 0x10, 0x6, 0xfffffc5a}, {0x0, 0x35, 0x3, 0x1000}, {0x1000, 0x7, 0x9, 0x41ec}]}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x10, 0x0, 0x7, 0x1010, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x106, @void, @value, @void, @value}, 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r7, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) (async) sendto$inet6(r7, &(0x7f0000000540)="25010600000000000000000000002bbe9196e06d9bd46973fb740219a971634887b4", 0x22, 0x0, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) (async) socket$igmp6(0xa, 0x3, 0x3a) 772.454373ms ago: executing program 4 (id=465): open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/72, 0x32a000, 0x1000}, 0x20) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x30ff, 0x8, '9P2000.u'}, 0x15) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00'], 0x53) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, ']!:'}}, {@pcr={'pcr', 0x3d, 0x1d}}, {@obj_type={'obj_type', 0x3d, '9P2000.u'}}, {@euid_eq={'euid', 0x3d, r5}}], 0x6b}}) 771.919273ms ago: executing program 0 (id=466): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r0}, &(0x7f00000012c0), &(0x7f0000001300)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r3, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) r4 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc030000007f03e3b80000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f801fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x800c000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 538.992232ms ago: executing program 4 (id=471): listen(0xffffffffffffffff, 0x267) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='io_uring_create\x00', r0, 0x0, 0x24f8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000640)=""/235, 0xeb}, {&(0x7f0000000740)=""/235, 0xeb}, {&(0x7f0000000300)=""/154, 0x9a}], 0x4, &(0x7f0000000480)=""/84, 0x54}, 0x10001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 464.037321ms ago: executing program 3 (id=473): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r2) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1907f7000400000008e50000ff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3) r5 = socket$rds(0x15, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xfff, @empty, 0x9}, {0xa, 0x4e22, 0xd, @loopback, 0x3}, r8, 0x40}}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = dup2(r7, r7) write$RDMA_USER_CM_CMD_JOIN_MCAST(r9, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r8, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0xa0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) r10 = syz_io_uring_setup(0x7c8, &(0x7f0000000300)={0x0, 0x4f43, 0x4, 0x3, 0x89}, &(0x7f0000000280), &(0x7f0000000380)) io_uring_enter(r10, 0x5287, 0x5bc2, 0x0, &(0x7f00000003c0), 0x8) sendmsg$rds(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30, 0x8004}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f00000002c0), &(0x7f0000000840)=r4}, 0x20) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100fefffffffedbdf250100ffff0800010003000300010000000500030000000000050003000000000005000700000000000500030005000000080002000200"/74], 0x50}, 0x1, 0x0, 0x0, 0xf36187960dadebcc}, 0xc000) r13 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRK(r13, 0x5409, 0x2) 420.871991ms ago: executing program 4 (id=474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000080000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket(0x18, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x10000) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) syz_emit_ethernet(0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000101100fc010000000000ff0200000000000000000000000000010000"], 0x0) r4 = socket(0x18, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2}}}], 0x20}}], 0x2, 0x840) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000d80)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYBLOB="1a961083c216e398b3852441fbacd14539194e81e2ec74ea00af4757fd632db5866c80f5b55492be6ad393d28d63023cd2e764a6bb41fa00d6c103356045fc3ade2c93339a56afb89b72a46f475c860a952e02dbf9c947a7cb75e89843f6d981fe7eed0ef37d5ab46550aa22", @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x9) r9 = openat(r8, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r9, 0x40047211, &(0x7f0000000000)) 420.192221ms ago: executing program 3 (id=475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000021c4000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x200006, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) 364.106671ms ago: executing program 1 (id=476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xa000032a) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x22000002) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x7a554d659b969b01, 0x3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x448}}, 0x0) sendmmsg$inet(r4, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) fsync(r3) 363.451321ms ago: executing program 1 (id=477): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0x1a0) write$binfmt_register(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x10, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}]}, 0x1c}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00^'], 0x24}], 0x1}, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2287, &(0x7f0000000000)) 362.769841ms ago: executing program 3 (id=478): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c000000040000000000000e0400000000000000000000000000000d00000000060000000000000f04000000000000000000000a0300000000005f615f4f61"], 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x94, r2, 0x1, 0x70bd28, 0x24dfdbfc, {}, [{{0x8, 0x1, r3}, {0x78, 0x2, 0x0, 0x1, [{0x2, 0x1, @activeport={{}, {}, {0x0, 0x4, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0015000000000000140035007767300000fd7b82c3b8ea0000000000000000000000dab7db118477bda4567abfe1650813ebf236a22c9ec34dd839e10773081f7e644fd902a7eaf5e62659ff4302b7083ca446ee32df4d07fa2cf90103b022e6d2ee46889e6ef353ea88095f9dc2cc078c20bddc513351b50df6d8b70e56"], 0x34}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 308.162401ms ago: executing program 4 (id=479): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r0 = open(0x0, 0x2a4c0, 0x0) r1 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x1003, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0xe, 0x0, r0, &(0x7f00000000c0)=0x80, &(0x7f0000000300)=@phonet, 0x0, 0x80800, 0x1, {0x0, r4}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 307.506351ms ago: executing program 1 (id=480): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffff0d850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x800}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 297.183911ms ago: executing program 3 (id=481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r1, &(0x7f0000000300), 0x4) close(r1) 275.32772ms ago: executing program 3 (id=482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r1, &(0x7f0000000300), 0x4) close(r1) (fail_nth: 1) 229.609151ms ago: executing program 4 (id=483): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) syz_read_part_table(0x5e5, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x6dcc}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000500)=""/46) shmat(0x0, &(0x7f000029f000/0x4000)=nil, 0x6000) syz_io_uring_setup(0xf3d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) syz_read_part_table(0x1061, &(0x7f0000002a80)="$eJzsz79xwjAcBeCn2E7sKtkgHiNluhSpM0EGyZ9xWIGCgo4RmIU7cSC8AlB8XyHpnnRP9ws3NZUkXf9WluDlqe19/tphyEOS7XrXl9/kNT+p9fxmbPebzyGpz92YlOw/5v/p0vR4Wg71e2kuLZmXr95LvlZXGRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7twxAAD//w5DDic=") bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r4 = io_uring_setup(0x1de1, &(0x7f0000000440)={0x0, 0x0, 0x800}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x1a, 0x20000028, r5) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, 0x0}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000006da1cdb3d2"], 0x38}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) 603.119µs ago: executing program 3 (id=484): listen(0xffffffffffffffff, 0x267) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='io_uring_create\x00', r0, 0x0, 0x24f8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000540)=""/194, 0xc2}, {&(0x7f0000000640)=""/235, 0xeb}, {&(0x7f0000000740)=""/235, 0xeb}, {&(0x7f0000000300)=""/154, 0x9a}], 0x4, &(0x7f0000000480)=""/84, 0x54}, 0x10001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 0s ago: executing program 5 (id=485): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_script(r1, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) kernel console output (not intermixed with test programs): [ 22.114475][ T29] audit: type=1400 audit(1734934624.043:81): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.10.33' (ED25519) to the list of known hosts. [ 28.105986][ T29] audit: type=1400 audit(1734934630.023:82): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.107262][ T3289] cgroup: Unknown subsys name 'net' [ 28.128720][ T29] audit: type=1400 audit(1734934630.023:83): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.156354][ T29] audit: type=1400 audit(1734934630.063:84): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.287644][ T3289] cgroup: Unknown subsys name 'cpuset' [ 28.293863][ T3289] cgroup: Unknown subsys name 'rlimit' [ 28.443898][ T29] audit: type=1400 audit(1734934630.363:85): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.467154][ T29] audit: type=1400 audit(1734934630.363:86): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.487644][ T29] audit: type=1400 audit(1734934630.363:87): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.491710][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.507994][ T29] audit: type=1400 audit(1734934630.363:88): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.536920][ T29] audit: type=1400 audit(1734934630.373:89): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.559345][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.561716][ T29] audit: type=1400 audit(1734934630.373:90): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.561745][ T29] audit: type=1400 audit(1734934630.443:91): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.717876][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 29.783542][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.790674][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.797806][ T3300] bridge_slave_0: entered allmulticast mode [ 29.804263][ T3300] bridge_slave_0: entered promiscuous mode [ 29.811751][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.818897][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.826132][ T3300] bridge_slave_1: entered allmulticast mode [ 29.832720][ T3300] bridge_slave_1: entered promiscuous mode [ 29.895113][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.923825][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.969865][ T3300] team0: Port device team_slave_0 added [ 29.978276][ T3300] team0: Port device team_slave_1 added [ 29.984035][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.999939][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 30.008557][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 30.049131][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.056082][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.082051][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.104415][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 30.115276][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.122325][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.148427][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.184141][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.191289][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.198490][ T3298] bridge_slave_0: entered allmulticast mode [ 30.205112][ T3298] bridge_slave_0: entered promiscuous mode [ 30.214370][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.221480][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.228664][ T3298] bridge_slave_1: entered allmulticast mode [ 30.235146][ T3298] bridge_slave_1: entered promiscuous mode [ 30.272008][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.279130][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.286317][ T3303] bridge_slave_0: entered allmulticast mode [ 30.292801][ T3303] bridge_slave_0: entered promiscuous mode [ 30.312081][ T3300] hsr_slave_0: entered promiscuous mode [ 30.318206][ T3300] hsr_slave_1: entered promiscuous mode [ 30.324519][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.331762][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.338900][ T3303] bridge_slave_1: entered allmulticast mode [ 30.345392][ T3303] bridge_slave_1: entered promiscuous mode [ 30.359075][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.372556][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.379816][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.387080][ T3309] bridge_slave_0: entered allmulticast mode [ 30.393354][ T3309] bridge_slave_0: entered promiscuous mode [ 30.407735][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.421735][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.428836][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.435961][ T3309] bridge_slave_1: entered allmulticast mode [ 30.442380][ T3309] bridge_slave_1: entered promiscuous mode [ 30.463089][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.488789][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.498388][ T3298] team0: Port device team_slave_0 added [ 30.514699][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.523862][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.530989][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.538114][ T3299] bridge_slave_0: entered allmulticast mode [ 30.544517][ T3299] bridge_slave_0: entered promiscuous mode [ 30.552990][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.560155][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.567288][ T3299] bridge_slave_1: entered allmulticast mode [ 30.573536][ T3299] bridge_slave_1: entered promiscuous mode [ 30.580419][ T3298] team0: Port device team_slave_1 added [ 30.596272][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.624424][ T3303] team0: Port device team_slave_0 added [ 30.645624][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.655401][ T3303] team0: Port device team_slave_1 added [ 30.666573][ T3309] team0: Port device team_slave_0 added [ 30.681772][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.688761][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.714730][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.726380][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.745710][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.752773][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.778730][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.790317][ T3309] team0: Port device team_slave_1 added [ 30.800771][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.807784][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.833833][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.856775][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.863808][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.889794][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.917319][ T3299] team0: Port device team_slave_0 added [ 30.923180][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.930220][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.956553][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.978465][ T3299] team0: Port device team_slave_1 added [ 30.988806][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.995762][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.021739][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.048329][ T3298] hsr_slave_0: entered promiscuous mode [ 31.054421][ T3298] hsr_slave_1: entered promiscuous mode [ 31.060849][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.068478][ T3298] Cannot create hsr debugfs directory [ 31.088274][ T3303] hsr_slave_0: entered promiscuous mode [ 31.094280][ T3303] hsr_slave_1: entered promiscuous mode [ 31.100375][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.107954][ T3303] Cannot create hsr debugfs directory [ 31.118510][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.125486][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.151464][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.166663][ T3309] hsr_slave_0: entered promiscuous mode [ 31.172862][ T3309] hsr_slave_1: entered promiscuous mode [ 31.178878][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.186421][ T3309] Cannot create hsr debugfs directory [ 31.198414][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.205529][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.231467][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.262118][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.292129][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.303598][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.314444][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.329451][ T3299] hsr_slave_0: entered promiscuous mode [ 31.335481][ T3299] hsr_slave_1: entered promiscuous mode [ 31.341431][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.348990][ T3299] Cannot create hsr debugfs directory [ 31.471195][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.479741][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.490915][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.509897][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.530081][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.545437][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.557000][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.565459][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.589664][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.600647][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.613022][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.631192][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.639575][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.661240][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.669680][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.681789][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.696272][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.705185][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.712329][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.722496][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.739214][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.746315][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.793774][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.821525][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.836388][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.863382][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.870590][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.882815][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.895948][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.903138][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.911792][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.918903][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.933380][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.948648][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.955781][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.970035][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.982057][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.006142][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.024636][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.043546][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.050639][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.059460][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.066545][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.085492][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.110425][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.117537][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.135122][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.142230][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.199371][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.223807][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.239183][ T3300] veth0_vlan: entered promiscuous mode [ 32.263230][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.277800][ T3300] veth1_vlan: entered promiscuous mode [ 32.290384][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.311916][ T3300] veth0_macvtap: entered promiscuous mode [ 32.351663][ T3300] veth1_macvtap: entered promiscuous mode [ 32.375476][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.395358][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.412978][ T3298] veth0_vlan: entered promiscuous mode [ 32.427221][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.449488][ T3298] veth1_vlan: entered promiscuous mode [ 32.464906][ T3300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.473725][ T3300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.482553][ T3300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.491384][ T3300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.512559][ T3298] veth0_macvtap: entered promiscuous mode [ 32.536368][ T3309] veth0_vlan: entered promiscuous mode [ 32.543393][ T3298] veth1_macvtap: entered promiscuous mode [ 32.558920][ T3309] veth1_vlan: entered promiscuous mode [ 32.588891][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.589747][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.599431][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.601226][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.632900][ T3299] veth0_vlan: entered promiscuous mode [ 32.643319][ T3309] veth0_macvtap: entered promiscuous mode [ 32.659050][ T3303] veth0_vlan: entered promiscuous mode [ 32.665091][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.675754][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.687852][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.695334][ T3309] veth1_macvtap: entered promiscuous mode [ 32.708618][ T3299] veth1_vlan: entered promiscuous mode [ 32.716257][ T3298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.725167][ T3298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.734030][ T3298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.742828][ T3298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.755464][ T3303] veth1_vlan: entered promiscuous mode [ 32.768938][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.779464][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.789397][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.799965][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.810641][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.822825][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.833448][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.843317][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.853883][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.864420][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.878977][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.887778][ T3309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.896507][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.905304][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.923999][ T3299] veth0_macvtap: entered promiscuous mode [ 32.934818][ T3299] veth1_macvtap: entered promiscuous mode [ 32.957095][ T3303] veth0_macvtap: entered promiscuous mode [ 32.965910][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.976510][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.986400][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.996923][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.006772][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.006790][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.008929][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.011990][ T3303] veth1_macvtap: entered promiscuous mode [ 33.032479][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.032558][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.032572][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.032588][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.032598][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.032611][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.032621][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.032728][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.035762][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.147386][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.157888][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.167722][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.178186][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.188010][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.198537][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.213354][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.224829][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.235405][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.245413][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.255924][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.265861][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.267903][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 33.267916][ T29] audit: type=1400 audit(1734934635.193:137): avc: denied { mounton } for pid=3449 comm="syz.3.6" path="/1/bus" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.276312][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.276329][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.276342][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.281149][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.292123][ T3452] loop0: detected capacity change from 0 to 512 [ 33.305172][ T3299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.324141][ T29] audit: type=1400 audit(1734934635.243:138): avc: denied { read } for pid=3449 comm="syz.3.6" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 33.324670][ T3299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.341493][ T29] audit: type=1400 audit(1734934635.263:139): avc: denied { open } for pid=3449 comm="syz.3.6" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 33.347798][ T3299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.362123][ T3452] EXT4-fs: Ignoring removed oldalloc option [ 33.379612][ T3299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.386083][ T3454] program syz.3.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.422203][ T3452] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.457535][ T3452] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.471241][ T3452] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 33.481784][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.484695][ T29] audit: type=1400 audit(1734934635.393:140): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 33.493011][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.512930][ T3452] EXT4-fs (loop0): 1 truncate cleaned up [ 33.513236][ T3452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.521701][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.548969][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.559686][ T29] audit: type=1400 audit(1734934635.483:141): avc: denied { mount } for pid=3451 comm="syz.0.7" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.586006][ T29] audit: type=1400 audit(1734934635.513:142): avc: denied { create } for pid=3451 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.643816][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.647341][ T29] audit: type=1400 audit(1734934635.563:143): avc: denied { read } for pid=3463 comm="/selinux/checkr" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.674353][ T29] audit: type=1400 audit(1734934635.563:144): avc: denied { open } for pid=3463 comm="/selinux/checkr" path="net:[4026532395]" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.698069][ T29] audit: type=1400 audit(1734934635.563:145): avc: denied { create } for pid=3463 comm="/selinux/checkr" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 33.718012][ T29] audit: type=1400 audit(1734934635.563:146): avc: denied { accept } for pid=3463 comm="/selinux/checkr" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 33.796627][ T3470] loop1: detected capacity change from 0 to 256 [ 33.810338][ T3473] SELinux: Context Ü is not valid (left unmapped). [ 33.835587][ T3476] loop3: detected capacity change from 0 to 1024 [ 33.844368][ T3470] FAT-fs (loop1): Directory bread(block 1285) failed [ 33.858385][ T3470] netlink: 596 bytes leftover after parsing attributes in process `syz.1.11'. [ 33.873396][ T3470] FAT-fs (loop1): Directory bread(block 1285) failed [ 33.881222][ T3470] FAT-fs (loop1): Directory bread(block 1285) failed [ 33.891201][ T3470] FAT-fs (loop1): Directory bread(block 1285) failed [ 33.904907][ T3476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.926444][ T3476] netlink: 'syz.3.12': attribute type 4 has an invalid length. [ 33.934138][ T3476] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12'. [ 33.984337][ T3489] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.992865][ T3493] loop2: detected capacity change from 0 to 2048 [ 33.993373][ T3489] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 34.041250][ T3496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.107447][ T3493] loop2: p1 < > p4 < > [ 34.123408][ T3496] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.123634][ T3001] loop2: p1 < > p4 < > [ 34.156384][ T3493] Zero length message leads to an empty skb [ 34.203952][ T3499] loop4: detected capacity change from 0 to 512 [ 34.227199][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 34.237659][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 34.241415][ T3499] EXT4-fs error (device loop4): ext4_quota_enable:7108: comm syz.4.17: Bad quota inum: 4294967295, type: 1 [ 34.262183][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 34.273649][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 34.278770][ T3499] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 34.326474][ T3499] EXT4-fs (loop4): mount failed [ 34.335629][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.449908][ T3530] pim6reg1: entered promiscuous mode [ 34.455238][ T3530] pim6reg1: entered allmulticast mode [ 34.465933][ T3531] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 35.238093][ T3557] loop1: detected capacity change from 0 to 1024 [ 35.302065][ T3557] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 35.320333][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 35.335436][ T3557] JBD2: no valid journal superblock found [ 35.338512][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.341242][ T3557] EXT4-fs (loop1): Could not load journal inode [ 35.348580][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.362903][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.370357][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.393066][ T3564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36'. [ 35.401957][ T3564] sch_tbf: peakrate 1 is lower than or equals to rate 7 ! [ 35.444766][ T3538] loop2: detected capacity change from 0 to 256 [ 35.478449][ T3566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 35.487256][ T3566] bridge_slave_1: left allmulticast mode [ 35.492913][ T3566] bridge_slave_1: left promiscuous mode [ 35.498634][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.505885][ T3538] FAT-fs (loop2): bogus number of FAT sectors [ 35.512150][ T3538] FAT-fs (loop2): Can't find a valid FAT filesystem [ 35.556597][ T3574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3574 comm=syz.1.37 [ 35.600122][ T3566] bridge_slave_0: left allmulticast mode [ 35.605902][ T3566] bridge_slave_0: left promiscuous mode [ 35.611610][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.620950][ T3578] xt_hashlimit: max too large, truncated to 1048576 [ 35.646299][ T3581] loop4: detected capacity change from 0 to 2048 [ 35.688298][ T3581] loop4: p1 < > p3 p4 < > [ 35.700321][ T3581] loop4: p3 start 4284289 is beyond EOD, truncated [ 35.711464][ T3576] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.883670][ T3591] lo speed is unknown, defaulting to 1000 [ 35.889513][ T3591] lo speed is unknown, defaulting to 1000 [ 35.895412][ T3591] lo speed is unknown, defaulting to 1000 [ 35.902009][ T3591] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 35.912149][ T3591] lo speed is unknown, defaulting to 1000 [ 35.918781][ T3591] lo speed is unknown, defaulting to 1000 [ 35.925009][ T3591] lo speed is unknown, defaulting to 1000 [ 35.931164][ T3591] lo speed is unknown, defaulting to 1000 [ 35.937320][ T3591] lo speed is unknown, defaulting to 1000 [ 36.381894][ T3576] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.442037][ T3576] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.502913][ T3576] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.639994][ T3576] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.651385][ T3576] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.662770][ T3576] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.685335][ T3576] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.740367][ T3612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 36.782103][ T3612] siw: device registration error -23 [ 36.804804][ T3617] netlink: 332 bytes leftover after parsing attributes in process `syz.4.53'. [ 36.811165][ T3612] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=3612 comm=syz.0.52 [ 37.078744][ T3638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.121219][ T3633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 37.155509][ T3633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.162988][ T3633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.168843][ T3645] ucma_write: process 31 (syz.1.63) changed security contexts after opening file descriptor, this is not allowed. [ 37.183982][ T3633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.191467][ T3633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.200635][ T3646] loop4: detected capacity change from 0 to 256 [ 37.210587][ T3646] FAT-fs (loop4): bogus number of FAT sectors [ 37.216684][ T3646] FAT-fs (loop4): Can't find a valid FAT filesystem [ 37.503357][ T3660] Illegal XDP return value 3111084759 on prog (id 53) dev N/A, expect packet loss! [ 37.532926][ T3661] pim6reg1: entered promiscuous mode [ 37.538270][ T3661] pim6reg1: entered allmulticast mode [ 37.785301][ T3667] 9pnet_fd: Insufficient options for proto=fd [ 37.815249][ T3667] loop3: detected capacity change from 0 to 128 [ 37.822211][ T3667] vfat: Unknown parameter '0x00000000000000060177777777777777777777700000000000000000006' [ 38.302124][ T3681] Falling back ldisc for ttyS3. [ 38.383069][ T3690] loop1: detected capacity change from 0 to 512 [ 38.451157][ T3690] EXT4-fs error (device loop1): ext4_quota_enable:7108: comm syz.1.77: Bad quota inum: 4294967295, type: 1 [ 38.483431][ T3690] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 38.544867][ T29] kauditd_printk_skb: 600 callbacks suppressed [ 38.544882][ T29] audit: type=1400 audit(1734934640.463:747): avc: denied { node_bind } for pid=3694 comm="syz.4.79" saddr=224.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.573213][ T3690] EXT4-fs (loop1): mount failed [ 38.581860][ T3695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 38.590776][ T3695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 38.681160][ T3702] loop2: detected capacity change from 0 to 512 [ 38.688474][ T29] audit: type=1326 audit(1734934640.613:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 38.711782][ T29] audit: type=1326 audit(1734934640.613:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 38.776555][ T3702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.789314][ T29] audit: type=1326 audit(1734934640.653:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 38.812941][ T29] audit: type=1326 audit(1734934640.653:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 38.836550][ T29] audit: type=1326 audit(1734934640.653:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 38.859901][ T29] audit: type=1326 audit(1734934640.653:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 38.883343][ T29] audit: type=1326 audit(1734934640.653:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 38.906772][ T29] audit: type=1326 audit(1734934640.653:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 38.930042][ T29] audit: type=1326 audit(1734934640.653:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 39.006965][ T3702] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.058961][ T3714] __nla_validate_parse: 1 callbacks suppressed [ 39.058975][ T3714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 39.148721][ T3714] FAULT_INJECTION: forcing a failure. [ 39.148721][ T3714] name failslab, interval 1, probability 0, space 0, times 1 [ 39.161487][ T3714] CPU: 1 UID: 0 PID: 3714 Comm: syz.4.83 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 39.172059][ T3714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.182143][ T3714] Call Trace: [ 39.185491][ T3714] [ 39.188427][ T3714] dump_stack_lvl+0xf2/0x150 [ 39.193049][ T3714] dump_stack+0x15/0x1a [ 39.197269][ T3714] should_fail_ex+0x223/0x230 [ 39.201957][ T3714] should_failslab+0x8f/0xb0 [ 39.206579][ T3714] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 39.213033][ T3714] ? kasprintf+0x82/0xb0 [ 39.217312][ T3714] kvasprintf+0x8c/0x110 [ 39.221578][ T3714] ? nft_counter_obj_dump+0x2b/0x40 [ 39.226787][ T3714] kasprintf+0x82/0xb0 [ 39.230875][ T3714] nf_tables_dump_obj+0x536/0x660 [ 39.235974][ T3714] nf_tables_dumpreset_obj+0x82/0xa0 [ 39.241279][ T3714] netlink_dump+0x398/0x7e0 [ 39.245862][ T3714] __netlink_dump_start+0x433/0x520 [ 39.251133][ T3714] nf_tables_getobj_reset+0x14e/0x2f0 [ 39.256612][ T3714] ? __pfx_nf_tables_dumpreset_obj_start+0x10/0x10 [ 39.263145][ T3714] ? __pfx_nf_tables_dumpreset_obj+0x10/0x10 [ 39.269196][ T3714] ? __pfx_nf_tables_dump_obj_done+0x10/0x10 [ 39.275211][ T3714] ? __pfx_nf_tables_getobj_reset+0x10/0x10 [ 39.281123][ T3714] nfnetlink_rcv_msg+0x3c5/0x570 [ 39.286099][ T3714] netlink_rcv_skb+0x12c/0x230 [ 39.290904][ T3714] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 39.296394][ T3714] nfnetlink_rcv+0x16c/0x15d0 [ 39.301157][ T3714] ? kmem_cache_free+0xdc/0x2d0 [ 39.306019][ T3714] ? nlmon_xmit+0x51/0x60 [ 39.310436][ T3714] ? __kfree_skb+0x102/0x150 [ 39.315144][ T3714] ? consume_skb+0x49/0x160 [ 39.319656][ T3714] ? nlmon_xmit+0x51/0x60 [ 39.324116][ T3714] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 39.329493][ T3714] ? __dev_queue_xmit+0xb6e/0x2090 [ 39.334624][ T3714] ? ref_tracker_free+0x3a5/0x410 [ 39.339690][ T3714] ? __dev_queue_xmit+0x186/0x2090 [ 39.344892][ T3714] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 39.350520][ T3714] netlink_unicast+0x599/0x670 [ 39.355323][ T3714] netlink_sendmsg+0x5cc/0x6e0 [ 39.360107][ T3714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.365484][ T3714] __sock_sendmsg+0x140/0x180 [ 39.370180][ T3714] ____sys_sendmsg+0x312/0x410 [ 39.375046][ T3714] __sys_sendmsg+0x19d/0x230 [ 39.379714][ T3714] __x64_sys_sendmsg+0x46/0x50 [ 39.384490][ T3714] x64_sys_call+0x2734/0x2dc0 [ 39.389176][ T3714] do_syscall_64+0xc9/0x1c0 [ 39.393723][ T3714] ? clear_bhb_loop+0x55/0xb0 [ 39.398406][ T3714] ? clear_bhb_loop+0x55/0xb0 [ 39.403091][ T3714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.409050][ T3714] RIP: 0033:0x7f7148615d29 [ 39.413473][ T3714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.433089][ T3714] RSP: 002b:00007f7146c81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.441565][ T3714] RAX: ffffffffffffffda RBX: 00007f7148805fa0 RCX: 00007f7148615d29 [ 39.449713][ T3714] RDX: 0000000024040808 RSI: 0000000020000180 RDI: 0000000000000003 [ 39.457688][ T3714] RBP: 00007f7146c81090 R08: 0000000000000000 R09: 0000000000000000 [ 39.465663][ T3714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.473640][ T3714] R13: 0000000000000000 R14: 00007f7148805fa0 R15: 00007fff851eb058 [ 39.481626][ T3714] [ 39.627798][ T3702] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #19: comm syz.2.81: corrupted inode contents [ 39.634042][ T3724] netlink: 'syz.0.89': attribute type 13 has an invalid length. [ 39.643712][ T3718] syz.3.87 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.697505][ T3702] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #19: comm syz.2.81: mark_inode_dirty error [ 39.746848][ T3702] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #19: comm syz.2.81: corrupted inode contents [ 39.823548][ T3714] syz.4.83 (3714) used greatest stack depth: 9832 bytes left [ 39.827189][ T3724] gretap0: refused to change device tx_queue_len [ 39.837376][ T3724] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 39.855457][ T3702] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.81: mark_inode_dirty error [ 39.912503][ T3702] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.81: mark inode dirty (error -117) [ 39.934237][ T3702] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 39.985428][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.126618][ T3747] loop1: detected capacity change from 0 to 512 [ 40.159029][ T3747] EXT4-fs error (device loop1): ext4_quota_enable:7108: comm syz.1.99: Bad quota inum: 4294967295, type: 1 [ 40.178902][ T3747] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 40.202172][ T3747] EXT4-fs (loop1): mount failed [ 40.273595][ T3761] netlink: 'syz.4.102': attribute type 21 has an invalid length. [ 40.313424][ T3764] loop3: detected capacity change from 0 to 512 [ 40.326024][ T3761] netlink: 'syz.4.102': attribute type 1 has an invalid length. [ 40.333732][ T3761] netlink: 144 bytes leftover after parsing attributes in process `syz.4.102'. [ 40.373782][ T3764] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.428292][ T3764] EXT4-fs (loop3): 1 truncate cleaned up [ 40.442225][ T3762] netlink: 'syz.4.102': attribute type 21 has an invalid length. [ 40.458881][ T3764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.483950][ T3762] netlink: 'syz.4.102': attribute type 1 has an invalid length. [ 40.491668][ T3762] netlink: 144 bytes leftover after parsing attributes in process `syz.4.102'. [ 40.579566][ T3768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 40.606861][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.669287][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.676736][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.684879][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.692332][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.057814][ T3786] loop2: detected capacity change from 0 to 2048 [ 41.087254][ T3786] loop2: p1 < > p3 p4 < > [ 41.098823][ T3792] netlink: 52 bytes leftover after parsing attributes in process `syz.0.110'. [ 41.108091][ T3786] loop2: p3 start 4284289 is beyond EOD, truncated [ 41.123344][ T3793] netlink: 'syz.1.108': attribute type 1 has an invalid length. [ 41.131080][ T3793] netlink: 220 bytes leftover after parsing attributes in process `syz.1.108'. [ 41.150670][ T3793] netlink: 'syz.1.108': attribute type 32 has an invalid length. [ 41.158474][ T3793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.108'. [ 41.263667][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 41.299980][ T3797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 41.312726][ T3786] siw: device registration error -23 [ 41.601828][ T3812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.612436][ T3812] random: crng reseeded on system resumption [ 41.688091][ T3821] netlink: 52 bytes leftover after parsing attributes in process `syz.3.121'. [ 41.701820][ T3822] loop2: detected capacity change from 0 to 256 [ 41.717961][ T3822] ======================================================= [ 41.717961][ T3822] WARNING: The mand mount option has been deprecated and [ 41.717961][ T3822] and is ignored by this kernel. Remove the mand [ 41.717961][ T3822] option from the mount to silence this warning. [ 41.717961][ T3822] ======================================================= [ 41.794293][ T3814] xt_connbytes: Forcing CT accounting to be enabled [ 41.809926][ T3814] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 41.843999][ T3830] netlink: 36 bytes leftover after parsing attributes in process `syz.3.125'. [ 41.905676][ T3834] blktrace: Concurrent blktraces are not allowed on sg0 [ 41.944649][ T3836] loop4: detected capacity change from 0 to 512 [ 41.999712][ T3842] loop3: detected capacity change from 0 to 1024 [ 42.007884][ T3842] EXT4-fs: Ignoring removed nobh option [ 42.013519][ T3842] EXT4-fs: Ignoring removed bh option [ 42.030197][ T3842] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 42.046880][ T3836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.059807][ T3836] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.097021][ T3836] wireguard0: entered promiscuous mode [ 42.102532][ T3836] wireguard0: entered allmulticast mode [ 42.220957][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.315048][ T3862] loop4: detected capacity change from 0 to 1024 [ 42.325024][ T3862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.383889][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.402608][ T3869] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 42.410598][ T3868] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 42.442522][ T3872] blktrace: Concurrent blktraces are not allowed on sg0 [ 42.524113][ T3879] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 42.524113][ T3879] program syz.4.141 not setting count and/or reply_len properly [ 42.612246][ T3873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.620877][ T3873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.640240][ T3877] loop2: detected capacity change from 0 to 512 [ 42.647157][ T3877] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.658397][ T3877] EXT4-fs (loop2): 1 truncate cleaned up [ 42.660307][ T3885] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.664521][ T3877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.672780][ T3885] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.694006][ T3885] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.702861][ T3885] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.711963][ T3885] vxlan0: entered promiscuous mode [ 42.721558][ T3887] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 50745 - 0 [ 42.730538][ T3887] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 50745 - 0 [ 42.739369][ T3887] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 50745 - 0 [ 42.748195][ T3887] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 50745 - 0 [ 42.762436][ T3885] netlink: 'syz.4.143': attribute type 3 has an invalid length. [ 42.772386][ T3885] loop4: detected capacity change from 0 to 128 [ 42.779549][ T3885] vfat: Unknown parameter 'diTcard' [ 42.857826][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.884950][ T3889] loop2: detected capacity change from 0 to 2048 [ 42.916985][ T3889] loop2: p1 < > p3 p4 < > [ 42.922254][ T3889] loop2: p3 start 4284289 is beyond EOD, truncated [ 43.018723][ T3889] siw: device registration error -23 [ 43.029154][ T3891] SELinux: policydb version 0 does not match my version range 15-33 [ 43.037433][ T3891] SELinux: failed to load policy [ 43.046298][ T3891] loop3: detected capacity change from 0 to 512 [ 43.050779][ T3893] xt_hashlimit: max too large, truncated to 1048576 [ 43.119290][ T3903] blktrace: Concurrent blktraces are not allowed on sg0 [ 43.201636][ T3906] Cannot find add_set index 0 as target [ 43.302748][ T3908] siw: device registration error -23 [ 43.350890][ T3922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3922 comm=syz.1.156 [ 43.411081][ T3927] loop1: detected capacity change from 0 to 512 [ 43.448569][ T3927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.461379][ T3927] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.540137][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.551763][ T29] kauditd_printk_skb: 896 callbacks suppressed [ 43.551777][ T29] audit: type=1326 audit(1734934645.483:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.4.160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7148615d29 code=0x0 [ 43.643977][ T29] audit: type=1400 audit(1734934645.563:1654): avc: denied { create } for pid=3936 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.664799][ T29] audit: type=1400 audit(1734934645.563:1655): avc: denied { setopt } for pid=3936 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.684796][ T29] audit: type=1400 audit(1734934645.563:1656): avc: denied { getopt } for pid=3936 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.881811][ T3945] loop1: detected capacity change from 0 to 2048 [ 43.899822][ T29] audit: type=1400 audit(1734934645.823:1657): avc: denied { connect } for pid=3946 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.947946][ T3945] loop1: p1 < > p4 [ 43.952776][ T3945] loop1: p4 size 8388608 extends beyond EOD, truncated [ 43.967502][ T29] audit: type=1400 audit(1734934645.893:1658): avc: denied { create } for pid=3948 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 43.988229][ T3001] loop1: p1 < > p4 [ 43.988762][ T3949] loop2: detected capacity change from 0 to 512 [ 43.992745][ T3001] loop1: p4 size 8388608 extends beyond EOD, truncated [ 44.008268][ T3949] EXT4-fs error (device loop2): ext4_quota_enable:7108: comm syz.2.166: Bad quota inum: 4294967295, type: 1 [ 44.022279][ T3949] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 44.037985][ T3949] EXT4-fs (loop2): mount failed [ 44.116756][ T29] audit: type=1326 audit(1734934646.033:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 44.140161][ T29] audit: type=1326 audit(1734934646.033:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 44.163544][ T29] audit: type=1326 audit(1734934646.033:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 44.187013][ T29] audit: type=1326 audit(1734934646.033:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3948 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 44.407210][ T3965] __nla_validate_parse: 5 callbacks suppressed [ 44.407225][ T3965] netlink: 52 bytes leftover after parsing attributes in process `syz.0.171'. [ 44.443152][ T3968] pim6reg: entered allmulticast mode [ 44.467483][ T3968] pim6reg: left allmulticast mode [ 44.739554][ T3978] loop1: detected capacity change from 0 to 1024 [ 44.829258][ T3978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.873989][ T3986] blktrace: Concurrent blktraces are not allowed on sg0 [ 44.882957][ T3988] FAULT_INJECTION: forcing a failure. [ 44.882957][ T3988] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 44.896257][ T3988] CPU: 1 UID: 0 PID: 3988 Comm: syz.3.180 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 44.906948][ T3988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.917112][ T3988] Call Trace: [ 44.920405][ T3988] [ 44.923345][ T3988] dump_stack_lvl+0xf2/0x150 [ 44.928133][ T3988] dump_stack+0x15/0x1a [ 44.932392][ T3988] should_fail_ex+0x223/0x230 [ 44.937096][ T3988] should_fail_alloc_page+0xfd/0x110 [ 44.942543][ T3988] __alloc_pages_noprof+0x109/0x340 [ 44.947787][ T3988] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 44.953194][ T3988] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 44.958596][ T3988] handle_mm_fault+0xdd7/0x2ac0 [ 44.963465][ T3988] ? __rcu_read_unlock+0x4e/0x70 [ 44.968476][ T3988] ? __rcu_read_lock+0x36/0x50 [ 44.973332][ T3988] __get_user_pages+0xf2c/0x2670 [ 44.978303][ T3988] __gup_longterm_locked+0x2ea/0xf90 [ 44.983612][ T3988] ? ___pte_offset_map+0xc4/0x140 [ 44.988667][ T3988] gup_fast_fallback+0x1568/0x2010 [ 44.993859][ T3988] pin_user_pages_fast+0x5f/0x90 [ 44.998874][ T3988] io_pin_pages+0xb4/0x170 [ 45.003311][ T3988] io_sqe_buffer_register+0x109/0x1460 [ 45.008802][ T3988] ? sysvec_reschedule_ipi+0x21/0x110 [ 45.014260][ T3988] ? io_sqe_buffers_register+0x166/0x4e0 [ 45.019981][ T3988] io_sqe_buffers_register+0x2d8/0x4e0 [ 45.025489][ T3988] __se_sys_io_uring_register+0xa6b/0x2200 [ 45.031389][ T3988] ? get_pid_task+0x8e/0xc0 [ 45.035917][ T3988] ? proc_fail_nth_write+0x12a/0x150 [ 45.041233][ T3988] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 45.046927][ T3988] ? vfs_write+0x596/0x920 [ 45.051427][ T3988] ? __fget_files+0x17c/0x1c0 [ 45.056163][ T3988] ? fput+0x1c4/0x200 [ 45.060230][ T3988] ? ksys_write+0x176/0x1b0 [ 45.064759][ T3988] __x64_sys_io_uring_register+0x55/0x70 [ 45.070484][ T3988] x64_sys_call+0x2c52/0x2dc0 [ 45.075181][ T3988] do_syscall_64+0xc9/0x1c0 [ 45.079826][ T3988] ? clear_bhb_loop+0x55/0xb0 [ 45.084570][ T3988] ? clear_bhb_loop+0x55/0xb0 [ 45.089261][ T3988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.095362][ T3988] RIP: 0033:0x7fbfbed05d29 [ 45.099844][ T3988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.119480][ T3988] RSP: 002b:00007fbfbd371038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 45.127918][ T3988] RAX: ffffffffffffffda RBX: 00007fbfbeef5fa0 RCX: 00007fbfbed05d29 [ 45.135908][ T3988] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 45.143909][ T3988] RBP: 00007fbfbd371090 R08: 0000000000000000 R09: 0000000000000000 [ 45.152013][ T3988] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 45.160076][ T3988] R13: 0000000000000000 R14: 00007fbfbeef5fa0 R15: 00007ffd59103768 [ 45.168151][ T3988] [ 45.267521][ T3982] pim6reg1: entered promiscuous mode [ 45.272869][ T3982] pim6reg1: entered allmulticast mode [ 45.290444][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.918655][ T4019] loop3: detected capacity change from 0 to 4096 [ 45.946738][ T4019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.003219][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.015897][ T4025] loop4: detected capacity change from 0 to 512 [ 46.025405][ T4025] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.039525][ T4025] EXT4-fs (loop4): 1 truncate cleaned up [ 46.060164][ T4025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.161557][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.225805][ T4040] netlink: 56 bytes leftover after parsing attributes in process `syz.1.197'. [ 46.241822][ T4040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 46.370053][ T4065] loop2: detected capacity change from 0 to 1024 [ 46.384338][ T4065] EXT4-fs: Ignoring removed nobh option [ 46.390030][ T4065] EXT4-fs: Ignoring removed bh option [ 46.507858][ T4065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.558383][ T4077] blktrace: Concurrent blktraces are not allowed on sg0 [ 46.570112][ T4063] loop3: detected capacity change from 0 to 512 [ 46.680012][ T4079] pim6reg1: entered promiscuous mode [ 46.685352][ T4079] pim6reg1: entered allmulticast mode [ 46.770414][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.801786][ T4088] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 46.947498][ T4098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4098 comm=syz.2.209 [ 46.970415][ T4098] lo speed is unknown, defaulting to 1000 [ 47.043166][ T4105] loop2: detected capacity change from 0 to 512 [ 47.074572][ T4063] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 47.092081][ T4063] System zones: 0-2, 18-18, 34-34 [ 47.104279][ T4105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.122545][ T4063] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.201: bg 0: block 248: padding at end of block bitmap is not set [ 47.123762][ T4105] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.165582][ T4063] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.201: Failed to acquire dquot type 1 [ 47.198621][ T4063] EXT4-fs (loop3): 1 truncate cleaned up [ 47.204868][ T4063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.217692][ T4063] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.237968][ T4063] syz.3.201 (4063) used greatest stack depth: 9288 bytes left [ 47.274616][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.285358][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.350133][ T4121] netlink: 52 bytes leftover after parsing attributes in process `syz.4.216'. [ 47.450531][ T4134] loop3: detected capacity change from 0 to 2048 [ 47.514077][ T4142] FAULT_INJECTION: forcing a failure. [ 47.514077][ T4142] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.527343][ T4142] CPU: 1 UID: 0 PID: 4142 Comm: syz.1.224 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 47.537960][ T4142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.548037][ T4142] Call Trace: [ 47.551405][ T4142] [ 47.554341][ T4142] dump_stack_lvl+0xf2/0x150 [ 47.559174][ T4142] dump_stack+0x15/0x1a [ 47.563348][ T4142] should_fail_ex+0x223/0x230 [ 47.568153][ T4142] should_fail+0xb/0x10 [ 47.572323][ T4142] should_fail_usercopy+0x1a/0x20 [ 47.577384][ T4142] _copy_from_user+0x1e/0xb0 [ 47.582019][ T4142] copy_msghdr_from_user+0x54/0x2a0 [ 47.587289][ T4142] ? __fget_files+0x17c/0x1c0 [ 47.592080][ T4142] __sys_sendmsg+0x13e/0x230 [ 47.596697][ T4142] __x64_sys_sendmsg+0x46/0x50 [ 47.601478][ T4142] x64_sys_call+0x2734/0x2dc0 [ 47.606234][ T4142] do_syscall_64+0xc9/0x1c0 [ 47.610828][ T4142] ? clear_bhb_loop+0x55/0xb0 [ 47.615527][ T4142] ? clear_bhb_loop+0x55/0xb0 [ 47.620219][ T4142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.626130][ T4142] RIP: 0033:0x7f1a67635d29 [ 47.630568][ T4142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.650180][ T4142] RSP: 002b:00007f1a65ca1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.658624][ T4142] RAX: ffffffffffffffda RBX: 00007f1a67825fa0 RCX: 00007f1a67635d29 [ 47.666598][ T4142] RDX: 0000000000000080 RSI: 0000000020000200 RDI: 0000000000000004 [ 47.674664][ T4142] RBP: 00007f1a65ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 47.682634][ T4142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.690641][ T4142] R13: 0000000000000000 R14: 00007f1a67825fa0 R15: 00007ffdeba7d528 [ 47.698622][ T4142] [ 47.745228][ T4134] loop3: p1 < > p3 p4 < > [ 47.753770][ T4134] loop3: p3 start 4284289 is beyond EOD, truncated [ 47.819286][ T4134] siw: device registration error -23 [ 48.051326][ T4167] pim6reg1: entered promiscuous mode [ 48.056679][ T4167] pim6reg1: entered allmulticast mode [ 48.365302][ T4170] $Hÿ: renamed from bond0 (while UP) [ 48.373032][ T4170] $Hÿ: entered promiscuous mode [ 48.378161][ T4170] bond_slave_0: entered promiscuous mode [ 48.384121][ T4170] bond_slave_1: entered promiscuous mode [ 48.463195][ T4189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.238'. [ 48.560954][ T4193] loop3: detected capacity change from 0 to 2048 [ 48.617617][ T4193] loop3: p1 < > p3 p4 < > [ 48.623522][ T4193] loop3: p3 start 4284289 is beyond EOD, truncated [ 49.065431][ T4193] siw: device registration error -23 [ 49.184270][ T4203] netlink: 52 bytes leftover after parsing attributes in process `syz.3.244'. [ 49.246427][ T4210] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 49.263214][ T4209] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.272024][ T4209] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.280936][ T4209] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.289685][ T4209] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.294627][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 49.294644][ T29] audit: type=1400 audit(1734934651.223:1860): avc: denied { read } for pid=4212 comm="syz.1.247" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.301356][ T4209] vxlan0: entered promiscuous mode [ 49.316074][ T4214] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 49.327809][ T4209] vxlan0: entered allmulticast mode [ 49.367702][ T29] audit: type=1326 audit(1734934651.293:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 49.397152][ T29] audit: type=1326 audit(1734934651.313:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc50b484690 code=0x7ffc0000 [ 49.420541][ T29] audit: type=1326 audit(1734934651.313:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc50b487557 code=0x7ffc0000 [ 49.443892][ T29] audit: type=1326 audit(1734934651.313:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 49.443920][ T29] audit: type=1326 audit(1734934651.313:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc50b487557 code=0x7ffc0000 [ 49.443949][ T29] audit: type=1326 audit(1734934651.313:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc50b48498a code=0x7ffc0000 [ 49.443978][ T29] audit: type=1326 audit(1734934651.313:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.2.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 49.444434][ T29] audit: type=1400 audit(1734934651.353:1868): avc: denied { read } for pid=4219 comm="syz.4.249" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.444462][ T29] audit: type=1400 audit(1734934651.353:1869): avc: denied { open } for pid=4219 comm="syz.4.249" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.509230][ T4218] process 'syz.3.248' launched './file0' with NULL argv: empty string added [ 49.539072][ T4222] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 49.617008][ T4222] geneve1: entered promiscuous mode [ 49.630860][ T4222] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 49.670097][ T4230] netlink: 52 bytes leftover after parsing attributes in process `syz.3.253'. [ 49.815379][ T4250] delete_channel: no stack [ 49.826007][ T4247] tmpfs: Unknown parameter 'defcontex}' [ 49.842867][ T4258] loop4: detected capacity change from 0 to 128 [ 49.851012][ T4258] /dev/loop4: Can't open blockdev [ 49.920702][ T4271] SELinux: policydb string SE!Lhnux does not match my string SE Linux [ 49.929617][ T4271] SELinux: failed to load policy [ 50.201214][ T4305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 50.275348][ T4324] loop3: detected capacity change from 0 to 512 [ 50.288832][ T4324] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.267: corrupted in-inode xattr: invalid ea_ino [ 50.302379][ T4324] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.267: couldn't read orphan inode 15 (err -117) [ 50.314826][ T4324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.339847][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.715918][ T4415] loop1: detected capacity change from 0 to 2048 [ 50.729046][ T4415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.752092][ T4415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.871576][ T4429] loop4: detected capacity change from 0 to 512 [ 50.898228][ T4429] EXT4-fs (loop4): too many log groups per flexible block group [ 50.905986][ T4429] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 50.913035][ T4429] EXT4-fs (loop4): mount failed [ 50.957319][ T4435] netlink: 52 bytes leftover after parsing attributes in process `syz.1.277'. [ 51.060806][ T4441] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 51.060806][ T4441] program syz.4.280 not setting count and/or reply_len properly [ 51.115054][ T4443] loop4: detected capacity change from 0 to 512 [ 51.133195][ T4443] journal_path: Non-blockdev passed as './file2' [ 51.139686][ T4443] EXT4-fs: error: could not find journal device path [ 51.302092][ T4450] 9pnet_fd: Insufficient options for proto=fd [ 51.494589][ T4457] netlink: 300 bytes leftover after parsing attributes in process `syz.3.286'. [ 51.509144][ T4460] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 51.578386][ T4461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9350 sclass=netlink_route_socket pid=4461 comm=syz.3.286 [ 51.761120][ T4469] syz.1.291[4469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.761234][ T4469] syz.1.291[4469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.776036][ T4469] syz.1.291[4469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.807274][ T4469] syz.1.291[4469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.832924][ T4469] syz.1.291[4469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.849540][ T4469] syz.1.291[4469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.879359][ T4469] loop1: detected capacity change from 0 to 2048 [ 51.938459][ T4469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.964938][ T4469] EXT4-fs error (device loop1): ext4_ext_precache:631: inode #2: comm syz.1.291: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 52.006674][ T4469] EXT4-fs (loop1): Remounting filesystem read-only [ 52.111543][ T4480] netlink: 52 bytes leftover after parsing attributes in process `syz.3.294'. [ 52.290012][ T4494] loop2: detected capacity change from 0 to 128 [ 52.309007][ T4495] 9pnet_fd: Insufficient options for proto=fd [ 52.316172][ T4494] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.332034][ T4494] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.370384][ T4494] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.298: bg 0: bad block bitmap checksum [ 52.429487][ T4494] pim6reg: entered allmulticast mode [ 52.441519][ T4494] pim6reg: left allmulticast mode [ 52.575447][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.595471][ T4510] netlink: 'syz.3.303': attribute type 15 has an invalid length. [ 52.608772][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.716171][ T4512] loop2: detected capacity change from 0 to 4096 [ 52.738251][ T4512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.768939][ T4518] netlink: 'syz.1.305': attribute type 21 has an invalid length. [ 52.771859][ T4512] mmap: syz.2.304 (4512) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.776803][ T4518] netlink: 132 bytes leftover after parsing attributes in process `syz.1.305'. [ 52.797689][ T4518] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 52.903666][ T4531] pim6reg1: entered promiscuous mode [ 52.909134][ T4531] pim6reg1: entered allmulticast mode [ 53.118719][ T4536] loop4: detected capacity change from 0 to 512 [ 53.154087][ T4538] loop1: detected capacity change from 0 to 512 [ 53.201685][ T4536] EXT4-fs error (device loop4): ext4_quota_enable:7108: comm syz.4.313: Bad quota inum: 4294967295, type: 1 [ 53.220984][ T4538] EXT4-fs error (device loop1): ext4_quota_enable:7108: comm syz.1.312: Bad quota inum: 4294967295, type: 1 [ 53.249412][ T4536] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 53.258858][ T4538] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 53.280788][ T4536] EXT4-fs (loop4): mount failed [ 53.281095][ T4538] EXT4-fs (loop1): mount failed [ 53.420618][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.479189][ T4546] loop2: detected capacity change from 0 to 128 [ 53.502928][ T4546] vfat: Unknown parameter '' [ 53.761942][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 54.099431][ T4571] loop3: detected capacity change from 0 to 2048 [ 54.189639][ T4571] loop3: p1 < > p3 p4 < > [ 54.273827][ T4571] loop3: p3 start 4284289 is beyond EOD, truncated [ 54.344270][ T3001] loop3: p1 < > p3 p4 < > [ 54.351334][ T3001] loop3: p3 start 4284289 is beyond EOD, truncated [ 54.568691][ T4571] siw: device registration error -23 [ 54.587641][ T4596] loop2: detected capacity change from 0 to 128 [ 54.614143][ T4596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'. [ 54.660347][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 54.660362][ T29] audit: type=1326 audit(1734934656.543:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 54.690345][ T29] audit: type=1326 audit(1734934656.543:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 54.713962][ T29] audit: type=1326 audit(1734934656.543:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 54.737465][ T29] audit: type=1326 audit(1734934656.543:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 54.761076][ T29] audit: type=1326 audit(1734934656.553:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 54.784575][ T29] audit: type=1326 audit(1734934656.553:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 54.807896][ T29] audit: type=1326 audit(1734934656.553:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 54.831235][ T29] audit: type=1326 audit(1734934656.553:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 54.836017][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'. [ 54.854778][ T29] audit: type=1326 audit(1734934656.553:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc50b4b85e5 code=0x7ffc0000 [ 54.886928][ T29] audit: type=1326 audit(1734934656.553:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4595 comm="syz.2.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50b485d29 code=0x7ffc0000 [ 54.950090][ T4617] blktrace: Concurrent blktraces are not allowed on sg0 [ 55.041096][ T4623] loop3: detected capacity change from 0 to 2048 [ 55.100570][ T4631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.113073][ T4629] loop4: detected capacity change from 0 to 2048 [ 55.120101][ T4623] loop3: p1 < > p3 p4 < > [ 55.121695][ T4631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.127304][ T4623] loop3: p3 start 4284289 is beyond EOD, truncated [ 55.143959][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 55.160490][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.170843][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.188067][ T4629] loop4: p1 < > p3 p4 < > [ 55.201565][ T4629] loop4: p3 start 4284289 is beyond EOD, truncated [ 55.250974][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.261314][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.367817][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 55.388324][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.398834][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.407492][ T4623] siw: device registration error -23 [ 55.450834][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.461227][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.484369][ T4645] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 55.484369][ T4645] program syz.3.350 not setting count and/or reply_len properly [ 55.538093][ T4637] lo speed is unknown, defaulting to 1000 [ 55.546626][ T4651] netlink: 52 bytes leftover after parsing attributes in process `syz.3.352'. [ 55.578357][ T50] bridge_slave_1: left allmulticast mode [ 55.584138][ T50] bridge_slave_1: left promiscuous mode [ 55.589888][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.598734][ T4633] loop0: detected capacity change from 0 to 256 [ 55.616029][ T4655] blktrace: Concurrent blktraces are not allowed on sg0 [ 55.624171][ T50] bridge_slave_0: left allmulticast mode [ 55.627008][ T4633] FAT-fs (loop0): bogus number of FAT sectors [ 55.629912][ T50] bridge_slave_0: left promiscuous mode [ 55.635940][ T4633] FAT-fs (loop0): Can't find a valid FAT filesystem [ 55.648319][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.668404][ T4657] netlink: 52 bytes leftover after parsing attributes in process `syz.4.354'. [ 55.811810][ T4667] netlink: 100 bytes leftover after parsing attributes in process `syz.1.358'. [ 55.827508][ T4668] 9pnet_fd: Insufficient options for proto=fd [ 55.833704][ T4667] 9pnet_fd: Insufficient options for proto=fd [ 56.126858][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.179550][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.242704][ T50] bond0 (unregistering): Released all slaves [ 56.298016][ T4678] FAULT_INJECTION: forcing a failure. [ 56.298016][ T4678] name failslab, interval 1, probability 0, space 0, times 0 [ 56.310677][ T4678] CPU: 1 UID: 0 PID: 4678 Comm: syz.0.361 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 56.321319][ T4678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.331391][ T4678] Call Trace: [ 56.334677][ T4678] [ 56.337624][ T4678] dump_stack_lvl+0xf2/0x150 [ 56.342262][ T4678] dump_stack+0x15/0x1a [ 56.346516][ T4678] should_fail_ex+0x223/0x230 [ 56.351205][ T4678] should_failslab+0x8f/0xb0 [ 56.355815][ T4678] __kmalloc_noprof+0xab/0x3f0 [ 56.360663][ T4678] ? nla_strdup+0x7a/0xc0 [ 56.365087][ T4678] nla_strdup+0x7a/0xc0 [ 56.369261][ T4678] nf_tables_newtable+0x3e7/0xee0 [ 56.374304][ T4678] nfnetlink_rcv+0xb3e/0x15d0 [ 56.379167][ T4678] ? kmem_cache_free+0xdc/0x2d0 [ 56.384062][ T4678] netlink_unicast+0x599/0x670 [ 56.388914][ T4678] netlink_sendmsg+0x5cc/0x6e0 [ 56.393694][ T4678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.398993][ T4678] __sock_sendmsg+0x140/0x180 [ 56.403689][ T4678] ____sys_sendmsg+0x312/0x410 [ 56.408465][ T4678] __sys_sendmsg+0x19d/0x230 [ 56.413088][ T4678] __x64_sys_sendmsg+0x46/0x50 [ 56.417893][ T4678] x64_sys_call+0x2734/0x2dc0 [ 56.422596][ T4678] do_syscall_64+0xc9/0x1c0 [ 56.427102][ T4678] ? clear_bhb_loop+0x55/0xb0 [ 56.431905][ T4678] ? clear_bhb_loop+0x55/0xb0 [ 56.436607][ T4678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.442596][ T4678] RIP: 0033:0x7f7b16c75d29 [ 56.447016][ T4678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.466628][ T4678] RSP: 002b:00007f7b152e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.475126][ T4678] RAX: ffffffffffffffda RBX: 00007f7b16e65fa0 RCX: 00007f7b16c75d29 [ 56.483117][ T4678] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 56.491092][ T4678] RBP: 00007f7b152e1090 R08: 0000000000000000 R09: 0000000000000000 [ 56.499075][ T4678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.507097][ T4678] R13: 0000000000000000 R14: 00007f7b16e65fa0 R15: 00007ffde2a45f28 [ 56.515084][ T4678] [ 56.554189][ T4683] loop0: detected capacity change from 0 to 512 [ 56.564335][ T4685] loop1: detected capacity change from 0 to 512 [ 56.579428][ T50] hsr_slave_0: left promiscuous mode [ 56.585473][ T50] hsr_slave_1: left promiscuous mode [ 56.589705][ T4685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.603827][ T4685] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.604278][ T4683] EXT4-fs error (device loop0): ext4_quota_enable:7108: comm syz.0.363: Bad quota inum: 4294967295, type: 1 [ 56.627702][ T50] veth1_macvtap: left promiscuous mode [ 56.631471][ T4683] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 56.633177][ T50] veth0_macvtap: left promiscuous mode [ 56.650827][ T4683] EXT4-fs (loop0): mount failed [ 56.654149][ T50] veth1_vlan: left promiscuous mode [ 56.664195][ T50] veth0_vlan: left promiscuous mode [ 56.711032][ T4685] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #19: comm syz.1.364: corrupted inode contents [ 56.723429][ T4685] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #19: comm syz.1.364: mark_inode_dirty error [ 56.735175][ T4685] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #19: comm syz.1.364: corrupted inode contents [ 56.747710][ T4685] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.364: mark_inode_dirty error [ 56.760732][ T4685] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.364: mark inode dirty (error -117) [ 56.773473][ T4685] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 56.799255][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.809057][ T50] team0 (unregistering): Port device team_slave_1 removed [ 56.818322][ T50] team0 (unregistering): Port device team_slave_0 removed [ 56.844049][ T4692] blktrace: Concurrent blktraces are not allowed on sg0 [ 56.926483][ T4637] chnl_net:caif_netlink_parms(): no params data found [ 57.010928][ T4697] netlink: 96 bytes leftover after parsing attributes in process `syz.0.367'. [ 57.027009][ T4701] hub 6-0:1.0: USB hub found [ 57.032401][ T4701] hub 6-0:1.0: 8 ports detected [ 57.059739][ T4699] loop1: detected capacity change from 0 to 512 [ 57.074582][ T4699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.105239][ T4699] EXT4-fs (loop1): 1 truncate cleaned up [ 57.115128][ T4637] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.122270][ T4637] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.124085][ T4699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.162360][ T4637] bridge_slave_0: entered allmulticast mode [ 57.169493][ T4637] bridge_slave_0: entered promiscuous mode [ 57.176163][ T4637] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.183276][ T4637] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.190594][ T4637] bridge_slave_1: entered allmulticast mode [ 57.197316][ T4637] bridge_slave_1: entered promiscuous mode [ 57.215902][ T4637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.233018][ T4717] loop0: detected capacity change from 0 to 128 [ 57.248310][ T4637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.275848][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.333422][ T4717] 9pnet_fd: Insufficient options for proto=fd [ 57.336504][ T4735] loop3: detected capacity change from 0 to 512 [ 57.375362][ T4637] team0: Port device team_slave_0 added [ 57.396400][ T4637] team0: Port device team_slave_1 added [ 57.411663][ T4735] EXT4-fs error (device loop3): ext4_quota_enable:7108: comm syz.3.376: Bad quota inum: 4294967295, type: 1 [ 57.431793][ T4735] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 57.448504][ T4735] EXT4-fs (loop3): mount failed [ 57.461750][ T4754] netlink: 76 bytes leftover after parsing attributes in process `syz.1.374'. [ 57.525168][ T4637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.532185][ T4637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.558151][ T4637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.572905][ T4637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.580010][ T4637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.606014][ T4637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.624051][ T4744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 57.634264][ T4744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.641734][ T4744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.164096][ T4744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.171655][ T4744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.211805][ T4754] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 58.239827][ T4637] hsr_slave_0: entered promiscuous mode [ 58.255882][ T4637] hsr_slave_1: entered promiscuous mode [ 58.263293][ T4637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.271651][ T4637] Cannot create hsr debugfs directory [ 58.418054][ T4792] loop4: detected capacity change from 0 to 8192 [ 58.488486][ T4792] lo speed is unknown, defaulting to 1000 [ 58.567777][ T4637] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.609142][ T4637] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.619154][ T4637] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.633169][ T4637] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.749527][ T4637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.757487][ T4835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 58.785183][ T4637] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.804708][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.811801][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.834660][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.841773][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.887733][ T4849] blktrace: Concurrent blktraces are not allowed on sg0 [ 58.944039][ T4860] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 58.993570][ T4637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.100116][ T4881] loop4: detected capacity change from 0 to 512 [ 59.132634][ T4881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.156831][ T4881] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.221456][ T4891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.228995][ T4891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.239172][ T4891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.246613][ T4891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.254896][ T4881] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #19: comm syz.4.403: corrupted inode contents [ 59.282141][ T4881] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #19: comm syz.4.403: mark_inode_dirty error [ 59.295399][ T4881] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #19: comm syz.4.403: corrupted inode contents [ 59.316190][ T4881] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.403: mark_inode_dirty error [ 59.335118][ T4881] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.403: mark inode dirty (error -117) [ 59.350297][ T4881] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 59.351123][ T4637] veth0_vlan: entered promiscuous mode [ 59.367448][ T4637] veth1_vlan: entered promiscuous mode [ 59.376578][ T4905] loop3: detected capacity change from 0 to 256 [ 59.379393][ T4637] veth0_macvtap: entered promiscuous mode [ 59.390231][ T4637] veth1_macvtap: entered promiscuous mode [ 59.400309][ T4637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.408921][ T4637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.417147][ T4637] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.425920][ T4637] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.434724][ T4637] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.443865][ T4637] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.466907][ T4905] FAT-fs (loop3): bogus number of FAT sectors [ 59.473016][ T4905] FAT-fs (loop3): Can't find a valid FAT filesystem [ 59.544536][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.571865][ T4916] syz.1.407[4916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.572416][ T4916] syz.1.407[4916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.598492][ T4916] syz.1.407[4916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.628918][ T4912] 0ªX¹¦À: renamed from caif0 [ 59.667139][ T4912] 0ªX¹¦À: entered allmulticast mode [ 59.672388][ T4912] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 59.689670][ T4921] smc: net device wg0 applied user defined pnetid SYZ0 [ 59.703465][ T4921] netlink: 'syz.4.405': attribute type 39 has an invalid length. [ 59.724384][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 59.724401][ T29] audit: type=1400 audit(1734934661.643:2566): avc: denied { map } for pid=4911 comm="syz.5.349" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 59.776241][ T29] audit: type=1400 audit(1734934661.693:2567): avc: denied { accept } for pid=4920 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 59.812337][ T4921] smc: removing net device wg0 with user defined pnetid SYZ0 [ 59.904381][ T4956] loop1: detected capacity change from 0 to 2048 [ 59.932773][ T4951] __nla_validate_parse: 3 callbacks suppressed [ 59.932789][ T4951] netlink: 3 bytes leftover after parsing attributes in process `syz.3.414'. [ 59.963517][ T4956] loop1: p1 < > p3 p4 < > [ 59.968335][ T4951] 0ªX¹¦À: renamed from caif0 [ 59.975161][ T4951] 0ªX¹¦À: entered allmulticast mode [ 59.980443][ T4951] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 60.000188][ T4956] loop1: p3 start 4284289 is beyond EOD, truncated [ 60.012675][ T29] audit: type=1326 audit(1734934661.933:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 60.085649][ T29] audit: type=1326 audit(1734934661.983:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 60.109197][ T29] audit: type=1326 audit(1734934661.983:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 60.132595][ T29] audit: type=1326 audit(1734934661.983:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 60.155996][ T29] audit: type=1326 audit(1734934661.983:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 60.179389][ T29] audit: type=1326 audit(1734934661.983:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 60.202800][ T29] audit: type=1326 audit(1734934661.983:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 60.226163][ T29] audit: type=1326 audit(1734934661.983:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4955 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f1a67635d29 code=0x7ffc0000 [ 60.282202][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 60.297051][ T4652] udevd[4652]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 60.394139][ T4956] siw: device registration error -23 [ 60.694514][ T5015] syz.5.426[5015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.694624][ T5015] syz.5.426[5015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.706004][ T5015] syz.5.426[5015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.710840][ T5017] loop4: detected capacity change from 0 to 512 [ 60.739312][ T5015] random: crng reseeded on system resumption [ 60.791341][ T5017] EXT4-fs error (device loop4): ext4_quota_enable:7108: comm syz.4.427: Bad quota inum: 4294967295, type: 1 [ 60.808452][ T5017] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 60.825289][ T5017] EXT4-fs (loop4): mount failed [ 60.860086][ T5025] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.868914][ T5025] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.877813][ T5025] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.886608][ T5025] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.895612][ T5025] vxlan0: entered promiscuous mode [ 60.900812][ T5025] vxlan0: entered allmulticast mode [ 60.915658][ T5025] loop5: detected capacity change from 0 to 512 [ 60.928681][ T5025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 60.941377][ T5025] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.953500][ T5027] netlink: 'syz.4.430': attribute type 3 has an invalid length. [ 60.955648][ T5025] 9pnet_virtio: no channels available for device [ 60.993110][ T5031] blktrace: Concurrent blktraces are not allowed on sg0 [ 61.002883][ T4637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 61.070719][ T5041] loop0: detected capacity change from 0 to 512 [ 61.097556][ T5039] loop5: detected capacity change from 0 to 512 [ 61.109827][ T5039] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 61.122836][ T5041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.137646][ T5041] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.139012][ T5039] EXT4-fs (loop5): 1 truncate cleaned up [ 61.155195][ T5039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.172900][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.267480][ T4637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.294590][ T5060] loop5: detected capacity change from 0 to 512 [ 61.335151][ T5060] EXT4-fs error (device loop5): ext4_quota_enable:7108: comm syz.5.440: Bad quota inum: 4294967295, type: 1 [ 61.348715][ T5060] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 61.368526][ T5060] EXT4-fs (loop5): mount failed [ 61.379148][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.386472][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.408609][ T5071] loop1: detected capacity change from 0 to 164 [ 61.427756][ T5071] Unable to read rock-ridge attributes [ 61.457222][ T5071] Unable to read rock-ridge attributes [ 61.514771][ T5063] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.523874][ T5063] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.533007][ T5063] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.541950][ T5063] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.552546][ T5063] geneve1: left promiscuous mode [ 61.647469][ T5083] lo speed is unknown, defaulting to 1000 [ 61.683626][ T5085] usb usb1: usbfs: process 5085 (syz.0.446) did not claim interface 0 before use [ 61.773589][ T5093] 9pnet_fd: Insufficient options for proto=fd [ 61.832534][ T5100] loop0: detected capacity change from 0 to 512 [ 61.882004][ T5101] loop1: detected capacity change from 0 to 2048 [ 61.893378][ T5100] EXT4-fs error (device loop0): ext4_quota_enable:7108: comm syz.0.453: Bad quota inum: 4294967295, type: 1 [ 61.907186][ T5100] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 61.923645][ T5100] EXT4-fs (loop0): mount failed [ 61.937597][ T5113] syz.5.456[5113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.937688][ T5113] syz.5.456[5113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.949475][ T5113] syz.5.456[5113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.229356][ T5125] loop0: detected capacity change from 0 to 164 [ 62.298333][ T5133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 62.358432][ T5134] netlink: 168 bytes leftover after parsing attributes in process `syz.1.460'. [ 62.401560][ T5125] rock: directory entry would overflow storage [ 62.408243][ T5125] rock: sig=0x66, size=4, remaining=3 [ 62.472678][ T5125] RDS: rds_bind could not find a transport for 91ed:f772:ce16:e8f4:5459:27e1:e385:3374, load rds_tcp or rds_rdma? [ 63.065997][ T5166] loop4: detected capacity change from 0 to 512 [ 63.088320][ T5166] EXT4-fs error (device loop4): ext4_quota_enable:7108: comm syz.4.471: Bad quota inum: 4294967295, type: 1 [ 63.112360][ T5166] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 63.128731][ T5166] EXT4-fs (loop4): mount failed [ 63.143011][ T5174] netlink: 52 bytes leftover after parsing attributes in process `syz.3.473'. [ 63.183978][ T5178] blktrace: Concurrent blktraces are not allowed on sg0 [ 63.195907][ T5176] loop4: detected capacity change from 0 to 256 [ 63.243905][ T5184] netlink: 116 bytes leftover after parsing attributes in process `syz.3.478'. [ 63.270180][ T5188] loop4: detected capacity change from 0 to 128 [ 63.323555][ T5194] FAULT_INJECTION: forcing a failure. [ 63.323555][ T5194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.336740][ T5194] CPU: 1 UID: 0 PID: 5194 Comm: syz.3.482 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 63.347415][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.357517][ T5194] Call Trace: [ 63.360868][ T5194] [ 63.363795][ T5194] dump_stack_lvl+0xf2/0x150 [ 63.368538][ T5194] dump_stack+0x15/0x1a [ 63.372857][ T5194] should_fail_ex+0x223/0x230 [ 63.377554][ T5194] should_fail+0xb/0x10 [ 63.381814][ T5194] should_fail_usercopy+0x1a/0x20 [ 63.386858][ T5194] _copy_to_user+0x20/0xa0 [ 63.391308][ T5194] simple_read_from_buffer+0xa0/0x110 [ 63.396690][ T5194] proc_fail_nth_read+0xf9/0x140 [ 63.401644][ T5194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.407278][ T5194] vfs_read+0x1a2/0x700 [ 63.411458][ T5194] ? __rcu_read_unlock+0x4e/0x70 [ 63.416465][ T5194] ? __fget_files+0x17c/0x1c0 [ 63.421167][ T5194] ksys_read+0xe8/0x1b0 [ 63.425324][ T5194] __x64_sys_read+0x42/0x50 [ 63.429846][ T5194] x64_sys_call+0x2874/0x2dc0 [ 63.434600][ T5194] do_syscall_64+0xc9/0x1c0 [ 63.439138][ T5194] ? clear_bhb_loop+0x55/0xb0 [ 63.443878][ T5194] ? clear_bhb_loop+0x55/0xb0 [ 63.448557][ T5194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.454577][ T5194] RIP: 0033:0x7fbfbed0473c [ 63.459040][ T5194] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 63.478648][ T5194] RSP: 002b:00007fbfbd371030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.487066][ T5194] RAX: ffffffffffffffda RBX: 00007fbfbeef5fa0 RCX: 00007fbfbed0473c [ 63.495036][ T5194] RDX: 000000000000000f RSI: 00007fbfbd3710a0 RDI: 0000000000000006 [ 63.503001][ T5194] RBP: 00007fbfbd371090 R08: 0000000000000000 R09: 0000000000000000 [ 63.510967][ T5194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.518936][ T5194] R13: 0000000000000000 R14: 00007fbfbeef5fa0 R15: 00007ffd59103768 [ 63.526986][ T5194] [ 63.559945][ T5197] loop4: detected capacity change from 0 to 2048 [ 63.572470][ T5199] loop3: detected capacity change from 0 to 512 [ 63.577218][ T5201] loop5: detected capacity change from 0 to 512 [ 63.587381][ T5197] loop4: p1 < > p3 p4 < > [ 63.593423][ T5197] loop4: p3 start 4284289 is beyond EOD, truncated [ 63.601112][ T5197] ================================================================== [ 63.609221][ T5197] BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event [ 63.618004][ T5197] [ 63.620330][ T5197] write to 0xffff888104216db4 of 4 bytes by task 3288 on cpu 0: [ 63.627962][ T5197] fsnotify_detach_mark+0xba/0x160 [ 63.633081][ T5197] fsnotify_destroy_mark+0x6e/0x140 [ 63.638283][ T5197] __se_sys_inotify_rm_watch+0xea/0x170 [ 63.643839][ T5197] __x64_sys_inotify_rm_watch+0x31/0x40 [ 63.649397][ T5197] x64_sys_call+0x25e0/0x2dc0 [ 63.654171][ T5197] do_syscall_64+0xc9/0x1c0 [ 63.658681][ T5197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.664605][ T5197] [ 63.667014][ T5197] read to 0xffff888104216db4 of 4 bytes by task 5197 on cpu 1: [ 63.674559][ T5197] inotify_handle_inode_event+0x2c2/0x310 [ 63.680293][ T5197] fsnotify_handle_inode_event+0x18e/0x1f0 [ 63.686102][ T5197] fsnotify+0x10ae/0x1190 [ 63.690429][ T5197] __fsnotify_parent+0x285/0x380 [ 63.695369][ T5197] __fput+0x5a5/0x6d0 [ 63.699358][ T5197] __fput_sync+0x96/0xc0 [ 63.703609][ T5197] __se_sys_close+0x109/0x1b0 [ 63.709510][ T5197] __x64_sys_close+0x1f/0x30 [ 63.714103][ T5197] x64_sys_call+0x266c/0x2dc0 [ 63.718787][ T5197] do_syscall_64+0xc9/0x1c0 [ 63.723295][ T5197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.729219][ T5197] [ 63.731539][ T5197] value changed: 0x00000003 -> 0x00000000 [ 63.737285][ T5197] [ 63.739602][ T5197] Reported by Kernel Concurrency Sanitizer on: [ 63.745783][ T5197] CPU: 1 UID: 0 PID: 5197 Comm: syz.4.483 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 63.756370][ T5197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.766429][ T5197] ================================================================== [ 63.782346][ T5199] EXT4-fs error (device loop3): ext4_quota_enable:7108: comm syz.3.484: Bad quota inum: 4294967295, type: 1 [ 63.796449][ T5199] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4294967295). Please run e2fsck to fix. [ 63.805596][ T5201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.824987][ T5201] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.835691][ T5199] EXT4-fs (loop3): mount failed [ 63.886268][ T5201] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #19: comm syz.5.485: corrupted inode contents [ 63.901296][ T5201] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #19: comm syz.5.485: mark_inode_dirty error [ 63.912677][ T5201] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #19: comm syz.5.485: corrupted inode contents [ 63.924714][ T5201] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3006: inode #19: comm syz.5.485: mark_inode_dirty error [ 63.936881][ T5201] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3009: inode #19: comm syz.5.485: mark inode dirty (error -117) [ 63.949541][ T5201] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 63.969220][ T4637] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.