last executing test programs: 2.2563693s ago: executing program 1 (id=950): open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3340bdae41000000030000d40000000049", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$TIOCMGET(r0, 0x5423, &(0x7f0000007000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x8, 0x0, 0x0, 0x7ffc1ffb}]}) rename(0x0, 0x0) dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}]}, 0x38}}, 0x0) 2.17523849s ago: executing program 1 (id=953): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbea, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f00000001c0)='.log\x00', 0x31000, 0x24) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, 0x0, 0x3, {0x1, 0x0, 0x2}, 0xfe}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r5 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x1001f0) fallocate(r5, 0x3, 0x0, 0x10000) r6 = syz_socket_connect_nvme_tcp() setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) getresgid(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRESOCT=r4, @ANYRES16], 0x1, 0x1fe, &(0x7f0000000700)="$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") 2.1209726s ago: executing program 2 (id=955): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1) 2.10375896s ago: executing program 2 (id=956): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1) 2.02123378s ago: executing program 2 (id=958): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") chdir(&(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x8e) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) (fail_nth: 2) 1.71819921s ago: executing program 3 (id=973): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000980)={0x2, 0x0, 0x98, &(0x7f0000000a00)={0x2, 0x1, 0x7}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000e600"/28], 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r1, 0x0, 0x0, 0x24000080, 0x0, 0x0) 1.33150981s ago: executing program 2 (id=965): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x800, 0x0) unshare(0x22020600) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.22700876s ago: executing program 2 (id=967): mkdir(&(0x7f0000000000)='./file0\x00', 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wg2\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095", @ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @rand_addr, 0x2069e}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r4, 0x0, 0x0, 0x100, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="320000729639e90716c5ccfe2f00", @ANYRES16=r9, @ANYBLOB="00032abd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x10, 0x2, 0x100) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xf0, 0x5}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r10}, 0x10) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x2710}) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.17676407s ago: executing program 1 (id=969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r1}) 1.09036986s ago: executing program 1 (id=974): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1024, 0x1000000000006) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 1.030436411s ago: executing program 1 (id=976): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x28, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@hopopts={0x11, 0x1, '\x00', [@calipso={0x7, 0x8}]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}}}}}}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x7) setgroups(0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="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"/486], 0x24, 0x1) 812.615891ms ago: executing program 3 (id=981): open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3340bdae41000000030000d40000000049", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$TIOCMGET(r0, 0x5423, &(0x7f0000007000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0xf) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x8, 0x0, 0x0, 0x7ffc1ffb}]}) rename(0x0, 0x0) dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}]}, 0x38}}, 0x0) 746.67845ms ago: executing program 3 (id=983): open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3340bdae41000000030000d40000000049", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$TIOCMGET(r0, 0x5423, &(0x7f0000007000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0xf) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x8, 0x0, 0x0, 0x7ffc1ffb}]}) rename(0x0, 0x0) dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}]}, 0x38}}, 0x0) 684.673941ms ago: executing program 3 (id=984): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000100)=@chain={'key_or_keyring:', r1}) 635.196031ms ago: executing program 3 (id=986): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x2f, &(0x7f0000000140)=""/76, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000b40)={0x0, r1}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x10000, @value=r2}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d0000000400000004000000070000000000", @ANYRES32=r4, @ANYBLOB="19000000000000000000000000000000000000008b9b8938a4a7ca7884ce3ebcaaf06b2408c71209290676c93808a71e9e7d65333f511875e20bd6209a3f1eda9a7356bdfc0f7c69c5f52f87a69ab8164e8733ee25b662e09dd2a677b5242affaf949edb", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x48) read$eventfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) 589.03043ms ago: executing program 3 (id=988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x1400, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x28, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@hopopts={0x11, 0x1, '\x00', [@calipso={0x7, 0x8}]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}}}}}}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x7) setgroups(0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="02000000010006000000000004000100000000001000070000000000200005000000000043fd3b847035d443319e5467c80285767dab5247f4e9797b01473ba0db65ce42618c1a54f943ed2fc581b32dd93966084404b45eb0c65447e769f533bd2423010d42a7ed3e8c82e778e42d5efe0c47e6e19435be2aba2752b8c3e70e4f9fcff308f486c8e570a1fc2d1b5aa506415834776ca3e8cc9e1c4ac9ca229243197fe365502b519a9cfe38dba87b66987c066be6f023748426e139b4bef48f18c0c2dcbe0861be931db8708d9e619203d13a95b05214985e00e159707d578e2b254b7c281bbbf9835e928eb821ecf1e0cf2043eed93c3750b8f2738914bbdf8339d26bad32809b86bc67addde05f6c506ba135f38c72f30d562037a4283f725eea4296a1617bf84bc0ce9630842ab9f1927f06b4fd7058bf40ef85c1521872bb9ce11dfb18c4c79c0d8262da11f03173426836ab6db005d27a65aa01be05b16fbd2881277445cf33ef0bd2ad6a86f90d1d1195958e141851ab6207f8f44048e43a52fa07c0be68aa8e447f2af13e753ef44d90e69ada284b13ebecea8c4e3fefb25d0734804393b3ba20301dc69f012878135639601592310556ac0d936b97f5f5a325b0ad489fd4b6c0a99884875660edc0b6e41d7e00"/486], 0x24, 0x1) 539.894641ms ago: executing program 0 (id=990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 471.93616ms ago: executing program 0 (id=992): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x80000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x1, 0x207, 0x3, 0xfffffffe, 0x1, 0x7, 0x8000}, 0x20) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000010) r3 = syz_io_uring_setup(0x77e8, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) unshare(0x2a060400) r7 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x28, 0x8, 0xfffffffffffffffe, 0x20000000) 471.171951ms ago: executing program 0 (id=993): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, 0x0, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x29, 0x10, &(0x7f0000000340), &(0x7f0000000000), 0xfffffffffffffdee, 0xb6, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf3, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES16=r2, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="9b2fb9e35017b4f463903b4ead028f7d7e28f0c6c73d4f0a9397c0e3b7bd97d2a08f8c1fe719ff37737d5cf6bc06b0223a321368a010f529f182c7cf2de19e3e457bd2a31a21ae79b367c5028a7447eb92eb6bfaf21fce933e24fd15aaf54968e8f6ff9898b7ba4816ba3e19c9a2b5def9a2fa10ee2f4bfc9f9878cef7c9886f6db6f4c6ffbbe92c8b6258c269cbd634704112cb932c2aba5d825304cfa63cb44bcb88cbeaa6908df606ba282a11cf8108d4e3052aa71f580481ba7dab5ac5f82fd7ad2e1489d338efac0438940504e31be14f62cf3a9a3e8a7ee3a6b0d16b4d0000"], 0x44}}, 0x800) 433.36217ms ago: executing program 0 (id=995): open(&(0x7f0000000080)='./file0\x00', 0x1c1c41, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3340bdae41000000030000d40000000049", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$TIOCMGET(r0, 0x5423, &(0x7f0000007000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0xf) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x8, 0x0, 0x0, 0x7ffc1ffb}]}) rename(0x0, 0x0) dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}]}, 0x38}}, 0x0) 386.613311ms ago: executing program 0 (id=997): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x20000041) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x38f}, {&(0x7f00000003c0)="439e9c06fc66", 0x6}], 0x2}}], 0x1, 0x0) 363.909401ms ago: executing program 0 (id=998): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbea, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f00000001c0)='.log\x00', 0x31000, 0x24) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, 0x0, 0x3, {0x1, 0x0, 0x2}, 0xfe}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r4, 0x0, 0x0, 0x1001f0) fallocate(r4, 0x3, 0x0, 0x10000) r5 = syz_socket_connect_nvme_tcp() setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) 326.003731ms ago: executing program 4 (id=1000): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x80000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x1, 0x207, 0x3, 0xfffffffe, 0x1, 0x7, 0x8000}, 0x20) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000010) r3 = syz_io_uring_setup(0x77e8, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) unshare(0x2a060400) r7 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x28, 0x8, 0xfffffffffffffffe, 0x20000000) 262.82746ms ago: executing program 2 (id=1001): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000980)={0x2, 0x0, 0x98, &(0x7f0000000a00)={0x2, 0x1, 0x7}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000e600"/28], 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r1, 0x0, 0x0, 0x24000080, 0x0, 0x0) 262.07891ms ago: executing program 4 (id=1002): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1024, 0x1000000000006) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 208.84409ms ago: executing program 4 (id=1003): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x80000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x1, 0x207, 0x3, 0xfffffffe, 0x1, 0x7, 0x8000}, 0x20) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000010) r3 = syz_io_uring_setup(0x77e8, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) unshare(0x2a060400) r7 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x28, 0x8, 0xfffffffffffffffe, 0x20000000) 168.76184ms ago: executing program 4 (id=1004): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1) 164.096081ms ago: executing program 1 (id=1005): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x7a, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0961d3", 0x44, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r2, 0x0) r6 = dup3(r5, r2, 0x80000) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) read$watch_queue(r2, &(0x7f0000002e00)=""/4088, 0xff8) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180)) read$watch_queue(r6, &(0x7f0000001e00)=""/4096, 0x1000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 130.033111ms ago: executing program 4 (id=1006): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='b'], 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$tun(0xffffffffffffffff, &(0x7f0000003480)=ANY=[@ANYBLOB="00000800010000000000140000004b130fc0006500000406907864010101ac14142e0717", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r9, &(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = syz_pidfd_open(0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1007): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="ba1bda80530ecfee4bb76a", 0xb, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0xc92b) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f48) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) sendmsg$inet6(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5a6871908ddfe3ee43aa1160a73753ce6cab32d184de576a9f314969c1d7546399a47258ea86bbd3febfc84e58f64d32bb361e0af645bad480a103ab7d7fa2404622f26e7f7e668a4d7e5aee1276dc1d52b170003659e627d012cdf5dcb438b8ae0bf19e6c992c68011b7297da8b53655071195f55e0d68ff3a297520e6cd6b2b46822b62f0fa2c9bd78d970b17a23e4096c1aeb98ba30c29a9003ba384101a9bb1ac802a76ec09284effc42886e77fe283439bc49a035bc4699ea3f5f049025dcb27f3bef88634d63ce70dd8756f4bf3100e3fd83131acc6bf88380dd4b1a277f8381d96c02860d605007f25c76d3893b32f43bca88d104b67b9d", 0xfb}, {&(0x7f0000000400)="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", 0x2d6}], 0x2}, 0x40001080) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "27c6ffe2057b6525", "e1315727ee1c2c5d189aa83c29a48200", "9c24c403", "1f7400000000000e"}, 0x28) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r3) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00032bbd7000fddbdf250d000000080004000400000008000400030000001800038014000600fc010000000000000000000000000000b2308c61459996fd0d3c16645cc85f1c4e7941e788e912344b"], 0x3c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2275, &(0x7f0000000700)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 20.980223][ T29] audit: type=1400 audit(1738089749.616:81): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 22.384691][ T29] audit: type=1400 audit(1738089751.016:82): avc: denied { mounton } for pid=3270 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.385689][ T3270] cgroup: Unknown subsys name 'net' [ 22.409656][ T29] audit: type=1400 audit(1738089751.016:83): avc: denied { mount } for pid=3270 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.439053][ T29] audit: type=1400 audit(1738089751.056:84): avc: denied { unmount } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.656393][ T3270] cgroup: Unknown subsys name 'cpuset' [ 22.663016][ T3270] cgroup: Unknown subsys name 'rlimit' [ 22.831451][ T29] audit: type=1400 audit(1738089751.466:85): avc: denied { setattr } for pid=3270 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.859021][ T29] audit: type=1400 audit(1738089751.466:86): avc: denied { create } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.884996][ T29] audit: type=1400 audit(1738089751.466:87): avc: denied { write } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.892344][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.913088][ T29] audit: type=1400 audit(1738089751.466:88): avc: denied { read } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.946796][ T29] audit: type=1400 audit(1738089751.476:89): avc: denied { mounton } for pid=3270 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.975785][ T29] audit: type=1400 audit(1738089751.476:90): avc: denied { mount } for pid=3270 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.014243][ T3270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.136914][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 24.180147][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 24.285898][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.293037][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.300243][ T3297] bridge_slave_0: entered allmulticast mode [ 24.307021][ T3297] bridge_slave_0: entered promiscuous mode [ 24.316308][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 24.331030][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.338488][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.346299][ T3297] bridge_slave_1: entered allmulticast mode [ 24.352881][ T3297] bridge_slave_1: entered promiscuous mode [ 24.363598][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 24.399790][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 24.414032][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.428744][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.438143][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.447504][ T3296] bridge_slave_0: entered allmulticast mode [ 24.454688][ T3296] bridge_slave_0: entered promiscuous mode [ 24.467305][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.484115][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.491365][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.499443][ T3296] bridge_slave_1: entered allmulticast mode [ 24.506006][ T3296] bridge_slave_1: entered promiscuous mode [ 24.540071][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.550639][ T3297] team0: Port device team_slave_0 added [ 24.572065][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.581851][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.589018][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.596649][ T3302] bridge_slave_0: entered allmulticast mode [ 24.603115][ T3302] bridge_slave_0: entered promiscuous mode [ 24.610598][ T3297] team0: Port device team_slave_1 added [ 24.631983][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.641299][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.650663][ T3302] bridge_slave_1: entered allmulticast mode [ 24.658322][ T3302] bridge_slave_1: entered promiscuous mode [ 24.676320][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.685203][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.695178][ T3310] bridge_slave_0: entered allmulticast mode [ 24.703041][ T3310] bridge_slave_0: entered promiscuous mode [ 24.717824][ T3296] team0: Port device team_slave_0 added [ 24.728474][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.735910][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.763664][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.777510][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.785263][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.793555][ T3310] bridge_slave_1: entered allmulticast mode [ 24.800265][ T3310] bridge_slave_1: entered promiscuous mode [ 24.812367][ T3296] team0: Port device team_slave_1 added [ 24.820021][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.830985][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.840731][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.848836][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.876522][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.914834][ T3302] team0: Port device team_slave_0 added [ 24.927218][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.936477][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.944274][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.952704][ T3304] bridge_slave_0: entered allmulticast mode [ 24.959203][ T3304] bridge_slave_0: entered promiscuous mode [ 24.966507][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.973759][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.981036][ T3304] bridge_slave_1: entered allmulticast mode [ 24.987744][ T3304] bridge_slave_1: entered promiscuous mode [ 24.999951][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.007118][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.035157][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.046953][ T3302] team0: Port device team_slave_1 added [ 25.053695][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.072021][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.079522][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.108104][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.142841][ T3297] hsr_slave_0: entered promiscuous mode [ 25.150048][ T3297] hsr_slave_1: entered promiscuous mode [ 25.166472][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.178998][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.199583][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.206693][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.234319][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.246128][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.253243][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.280242][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.292361][ T3310] team0: Port device team_slave_0 added [ 25.301145][ T3310] team0: Port device team_slave_1 added [ 25.356986][ T3304] team0: Port device team_slave_0 added [ 25.371186][ T3302] hsr_slave_0: entered promiscuous mode [ 25.377294][ T3302] hsr_slave_1: entered promiscuous mode [ 25.383363][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.391039][ T3302] Cannot create hsr debugfs directory [ 25.397120][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.404196][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.430537][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.443167][ T3296] hsr_slave_0: entered promiscuous mode [ 25.449337][ T3296] hsr_slave_1: entered promiscuous mode [ 25.455201][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.462911][ T3296] Cannot create hsr debugfs directory [ 25.468988][ T3304] team0: Port device team_slave_1 added [ 25.484438][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.491553][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.518037][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.569871][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.577096][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.605612][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.633474][ T3310] hsr_slave_0: entered promiscuous mode [ 25.639607][ T3310] hsr_slave_1: entered promiscuous mode [ 25.645610][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.653450][ T3310] Cannot create hsr debugfs directory [ 25.659286][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.666901][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.693447][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.763484][ T3304] hsr_slave_0: entered promiscuous mode [ 25.769717][ T3304] hsr_slave_1: entered promiscuous mode [ 25.776082][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.783753][ T3304] Cannot create hsr debugfs directory [ 25.828930][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.838059][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.865166][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.880275][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.908308][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.920151][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.935739][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.953673][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.963332][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.973612][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.989818][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.999171][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.034269][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.048386][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.057723][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.073735][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.106814][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.126874][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.137158][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.149605][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.163984][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.174997][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.192258][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.206397][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.217916][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.225591][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.242612][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.252053][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.259167][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.269748][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.277100][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.296564][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.307350][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.314426][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.339524][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.346984][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.355564][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.362746][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.375790][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.411535][ T3297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.424062][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.446775][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.458321][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.482622][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.491173][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.519684][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.527510][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.550411][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.557623][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.575143][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.588267][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.597765][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.636561][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.644895][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.662527][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.669737][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.682744][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.690042][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.719719][ T3296] veth0_vlan: entered promiscuous mode [ 26.731154][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.744419][ T3296] veth1_vlan: entered promiscuous mode [ 26.752427][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.786123][ T3297] veth0_vlan: entered promiscuous mode [ 26.803013][ T3296] veth0_macvtap: entered promiscuous mode [ 26.817282][ T3296] veth1_macvtap: entered promiscuous mode [ 26.826096][ T3297] veth1_vlan: entered promiscuous mode [ 26.851983][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.872655][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.881472][ T3297] veth0_macvtap: entered promiscuous mode [ 26.889445][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.903979][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.913134][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.922463][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.931866][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.948806][ T3302] veth0_vlan: entered promiscuous mode [ 26.962607][ T3297] veth1_macvtap: entered promiscuous mode [ 26.970457][ T3302] veth1_vlan: entered promiscuous mode [ 26.990605][ T3310] veth0_vlan: entered promiscuous mode [ 27.005955][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.017273][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 27.017289][ T29] audit: type=1400 audit(1738089755.636:110): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.WET2X6/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.018216][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.024514][ T29] audit: type=1400 audit(1738089755.646:111): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.052033][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.061713][ T29] audit: type=1400 audit(1738089755.646:112): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.WET2X6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.088349][ T3310] veth1_vlan: entered promiscuous mode [ 27.093504][ T29] audit: type=1400 audit(1738089755.646:113): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.136434][ T3310] veth0_macvtap: entered promiscuous mode [ 27.148891][ T29] audit: type=1400 audit(1738089755.646:114): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.WET2X6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.161098][ T3302] veth0_macvtap: entered promiscuous mode [ 27.182403][ T29] audit: type=1400 audit(1738089755.646:115): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.WET2X6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.198775][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.216200][ T29] audit: type=1400 audit(1738089755.646:116): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.218507][ T29] audit: type=1400 audit(1738089755.756:117): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.227564][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.231345][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.247556][ T29] audit: type=1400 audit(1738089755.756:118): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="gadgetfs" ino=3641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.315920][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.317247][ T3310] veth1_macvtap: entered promiscuous mode [ 27.345736][ T3297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.354999][ T3297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.364402][ T3297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.373636][ T3297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.384739][ T3302] veth1_macvtap: entered promiscuous mode [ 27.408957][ T29] audit: type=1400 audit(1738089756.036:119): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.437775][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.449689][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.460199][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.472150][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.493107][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.501311][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.512685][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.523261][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.534432][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.545102][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.555816][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.567815][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.593405][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.604879][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.616080][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.627491][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.639190][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.648600][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.657631][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.666629][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.675542][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.687504][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.698617][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.708824][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.719331][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.729430][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.739938][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.750773][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.778518][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.787871][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.796944][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.805752][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.834603][ T3445] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 27.866450][ T3304] veth0_vlan: entered promiscuous mode [ 27.882356][ T3304] veth1_vlan: entered promiscuous mode [ 27.947445][ T3455] loop2: detected capacity change from 0 to 512 [ 27.956691][ T3455] ======================================================= [ 27.956691][ T3455] WARNING: The mand mount option has been deprecated and [ 27.956691][ T3455] and is ignored by this kernel. Remove the mand [ 27.956691][ T3455] option from the mount to silence this warning. [ 27.956691][ T3455] ======================================================= [ 27.993602][ T3304] veth0_macvtap: entered promiscuous mode [ 28.014999][ T3304] veth1_macvtap: entered promiscuous mode [ 28.043686][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.054642][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.064745][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.075328][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.085264][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.096345][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.106911][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.117468][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.137129][ T3453] loop3: detected capacity change from 0 to 8192 [ 28.150777][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.159250][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.170278][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.180243][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.191652][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.201793][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.205710][ T3455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.212407][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.212486][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.227358][ T3455] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.235117][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.295862][ T3455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 28.329727][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.593991][ T3476] FAULT_INJECTION: forcing a failure. [ 28.593991][ T3476] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 28.600243][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.607453][ T3476] CPU: 0 UID: 0 PID: 3476 Comm: syz.3.14 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 28.607472][ T3476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 28.607563][ T3476] Call Trace: [ 28.607569][ T3476] [ 28.607575][ T3476] dump_stack_lvl+0xf2/0x150 [ 28.607604][ T3476] dump_stack+0x15/0x1a [ 28.607622][ T3476] should_fail_ex+0x24a/0x260 [ 28.607684][ T3476] should_fail+0xb/0x10 [ 28.607708][ T3476] should_fail_usercopy+0x1a/0x20 [ 28.607725][ T3476] _copy_to_user+0x20/0xa0 [ 28.607783][ T3476] simple_read_from_buffer+0xa0/0x110 [ 28.607804][ T3476] proc_fail_nth_read+0xf9/0x140 [ 28.607825][ T3476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 28.607866][ T3476] vfs_read+0x19b/0x6f0 [ 28.607882][ T3476] ? __rcu_read_unlock+0x4e/0x70 [ 28.607968][ T3476] ? __fget_files+0x17c/0x1c0 [ 28.608025][ T3476] ksys_read+0xe8/0x1b0 [ 28.608043][ T3476] __x64_sys_read+0x42/0x50 [ 28.608061][ T3476] x64_sys_call+0x2874/0x2dc0 [ 28.608175][ T3476] do_syscall_64+0xc9/0x1c0 [ 28.608201][ T3476] ? clear_bhb_loop+0x55/0xb0 [ 28.608224][ T3476] ? clear_bhb_loop+0x55/0xb0 [ 28.608247][ T3476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.608316][ T3476] RIP: 0033:0x7f333054b7bc [ 28.608375][ T3476] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 28.608391][ T3476] RSP: 002b:00007f332ebb1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 28.608408][ T3476] RAX: ffffffffffffffda RBX: 00007f3330765fa0 RCX: 00007f333054b7bc [ 28.608419][ T3476] RDX: 000000000000000f RSI: 00007f332ebb10a0 RDI: 0000000000000004 [ 28.608484][ T3476] RBP: 00007f332ebb1090 R08: 0000000000000000 R09: 0000000000000000 [ 28.608494][ T3476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 28.608505][ T3476] R13: 0000000000000000 R14: 00007f3330765fa0 R15: 00007fff38dba808 [ 28.608519][ T3476] [ 28.849448][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.858418][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.867308][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.876234][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.949730][ T3484] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.008516][ T3489] loop1: detected capacity change from 0 to 2048 [ 29.016554][ T3489] EXT4-fs: Ignoring removed nobh option [ 29.032176][ T3489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.059140][ T3491] dccp_invalid_packet: P.Data Offset(0) too small [ 29.080096][ T3489] netlink: 'syz.1.17': attribute type 4 has an invalid length. [ 29.087768][ T3489] netlink: 17 bytes leftover after parsing attributes in process `syz.1.17'. [ 29.142428][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.343330][ T3505] ref_ctr_offset mismatch. inode: 0x3e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 29.396857][ T3506] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 29.403615][ T3506] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 29.411367][ T3506] vhci_hcd vhci_hcd.0: Device attached [ 29.470202][ T3511] FAULT_INJECTION: forcing a failure. [ 29.470202][ T3511] name failslab, interval 1, probability 0, space 0, times 1 [ 29.483401][ T3511] CPU: 1 UID: 0 PID: 3511 Comm: syz.2.25 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 29.483421][ T3511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 29.483431][ T3511] Call Trace: [ 29.483435][ T3511] [ 29.483442][ T3511] dump_stack_lvl+0xf2/0x150 [ 29.483533][ T3511] dump_stack+0x15/0x1a [ 29.483548][ T3511] should_fail_ex+0x24a/0x260 [ 29.483573][ T3511] should_failslab+0x8f/0xb0 [ 29.483596][ T3511] __kmalloc_cache_node_noprof+0x56/0x320 [ 29.483707][ T3511] ? __get_vm_area_node+0xfb/0x1c0 [ 29.483729][ T3511] __get_vm_area_node+0xfb/0x1c0 [ 29.483811][ T3511] __vmalloc_node_range_noprof+0x280/0xe70 [ 29.483832][ T3511] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 29.483866][ T3511] ? mntput_no_expire+0x70/0x3d0 [ 29.483884][ T3511] ? avc_has_perm_noaudit+0x1cc/0x210 [ 29.483909][ T3511] ? selinux_capable+0x1f2/0x260 [ 29.483942][ T3511] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 29.484032][ T3511] __vmalloc_noprof+0x5e/0x70 [ 29.484049][ T3511] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 29.484080][ T3511] bpf_prog_alloc_no_stats+0x49/0x380 [ 29.484099][ T3511] ? bpf_prog_alloc+0x28/0x150 [ 29.484137][ T3511] bpf_prog_alloc+0x3a/0x150 [ 29.484205][ T3511] bpf_prog_load+0x4d0/0x1070 [ 29.484225][ T3511] ? __rcu_read_unlock+0x4e/0x70 [ 29.484327][ T3511] __sys_bpf+0x463/0x7a0 [ 29.484364][ T3511] __x64_sys_bpf+0x43/0x50 [ 29.484380][ T3511] x64_sys_call+0x2914/0x2dc0 [ 29.484475][ T3511] do_syscall_64+0xc9/0x1c0 [ 29.484497][ T3511] ? clear_bhb_loop+0x55/0xb0 [ 29.484516][ T3511] ? clear_bhb_loop+0x55/0xb0 [ 29.484535][ T3511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.484628][ T3511] RIP: 0033:0x7f43747acda9 [ 29.484640][ T3511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.484726][ T3511] RSP: 002b:00007f4372df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 29.484741][ T3511] RAX: ffffffffffffffda RBX: 00007f43749c6080 RCX: 00007f43747acda9 [ 29.484756][ T3511] RDX: 0000000000000094 RSI: 00000000200005c0 RDI: 0000000000000005 [ 29.484765][ T3511] RBP: 00007f4372df0090 R08: 0000000000000000 R09: 0000000000000000 [ 29.484775][ T3511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.484787][ T3511] R13: 0000000000000000 R14: 00007f43749c6080 R15: 00007ffc8f97e708 [ 29.484800][ T3511] [ 29.485114][ T3511] syz.2.25: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 29.636298][ T3373] vhci_hcd: vhci_device speed not set [ 29.640959][ T3511] ,cpuset= [ 29.708572][ T3373] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 29.716535][ T3511] /,mems_allowed=0 [ 29.716560][ T3511] CPU: 1 UID: 0 PID: 3511 Comm: syz.2.25 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 29.716580][ T3511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 29.716591][ T3511] Call Trace: [ 29.716597][ T3511] [ 29.716604][ T3511] dump_stack_lvl+0xf2/0x150 [ 29.716677][ T3511] dump_stack+0x15/0x1a [ 29.716726][ T3511] warn_alloc+0x145/0x1b0 [ 29.716795][ T3511] __vmalloc_node_range_noprof+0x2a5/0xe70 [ 29.716819][ T3511] ? mntput_no_expire+0x70/0x3d0 [ 29.716837][ T3511] ? avc_has_perm_noaudit+0x1cc/0x210 [ 29.716922][ T3511] ? selinux_capable+0x1f2/0x260 [ 29.716983][ T3511] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 29.717077][ T3511] __vmalloc_noprof+0x5e/0x70 [ 29.717165][ T3511] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 29.717190][ T3511] bpf_prog_alloc_no_stats+0x49/0x380 [ 29.717292][ T3511] ? bpf_prog_alloc+0x28/0x150 [ 29.717315][ T3511] bpf_prog_alloc+0x3a/0x150 [ 29.717337][ T3511] bpf_prog_load+0x4d0/0x1070 [ 29.717422][ T3511] ? __rcu_read_unlock+0x4e/0x70 [ 29.717449][ T3511] __sys_bpf+0x463/0x7a0 [ 29.717476][ T3511] __x64_sys_bpf+0x43/0x50 [ 29.717573][ T3511] x64_sys_call+0x2914/0x2dc0 [ 29.717596][ T3511] do_syscall_64+0xc9/0x1c0 [ 29.717621][ T3511] ? clear_bhb_loop+0x55/0xb0 [ 29.717717][ T3511] ? clear_bhb_loop+0x55/0xb0 [ 29.717735][ T3511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.717753][ T3511] RIP: 0033:0x7f43747acda9 [ 29.717766][ T3511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.717779][ T3511] RSP: 002b:00007f4372df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 29.717802][ T3511] RAX: ffffffffffffffda RBX: 00007f43749c6080 RCX: 00007f43747acda9 [ 29.717812][ T3511] RDX: 0000000000000094 RSI: 00000000200005c0 RDI: 0000000000000005 [ 29.717823][ T3511] RBP: 00007f4372df0090 R08: 0000000000000000 R09: 0000000000000000 [ 29.717834][ T3511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.717844][ T3511] R13: 0000000000000000 R14: 00007f43749c6080 R15: 00007ffc8f97e708 [ 29.717860][ T3511] [ 29.717866][ T3511] Mem-Info: [ 29.842585][ T3513] loop4: detected capacity change from 0 to 128 [ 29.843760][ T3511] active_anon:4160 inactive_anon:18 isolated_anon:0 [ 29.843760][ T3511] active_file:4271 inactive_file:2029 isolated_file:0 [ 29.843760][ T3511] unevictable:0 dirty:0 writeback:24 [ 29.843760][ T3511] slab_reclaimable:2649 slab_unreclaimable:12996 [ 29.843760][ T3511] mapped:28236 shmem:235 pagetables:874 [ 29.843760][ T3511] sec_pagetables:0 bounce:0 [ 29.843760][ T3511] kernel_misc_reclaimable:0 [ 29.843760][ T3511] free:1806874 free_pcp:50977 free_cma:0 [ 29.977253][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 29.981828][ T3511] Node 0 active_anon:16640kB inactive_anon:72kB active_file:17084kB inactive_file:8116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112828kB dirty:0kB writeback:96kB shmem:940kB writeback_tmp:0kB kernel_stack:2800kB pagetables:3728kB sec_pagetables:0kB all_unreclaimable? no [ 30.063381][ T3511] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 30.090230][ T3511] lowmem_reserve[]: 0 2885 7863 0 [ 30.095404][ T3511] Node 0 DMA32 free:2950844kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954476kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 30.124593][ T3511] lowmem_reserve[]: 0 0 4978 0 [ 30.129430][ T3511] Node 0 Normal free:4372420kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:16640kB inactive_anon:72kB active_file:17084kB inactive_file:8116kB unevictable:0kB writepending:36kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:193244kB local_pcp:90360kB free_cma:0kB [ 30.159775][ T3511] lowmem_reserve[]: 0 0 0 0 [ 30.164315][ T3511] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 30.177195][ T3511] Node 0 DMA32: 3*4kB (M) 0*8kB 3*16kB (M) 4*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950844kB [ 30.193346][ T3511] Node 0 Normal: 95*4kB (U) 61*8kB (UME) 43*16kB (UM) 19*32kB (UM) 35*64kB (UME) 24*128kB (UE) 27*256kB (UE) 28*512kB (U) 29*1024kB (UME) 17*2048kB (UM) 1051*4096kB (UM) = 4398132kB [ 30.212031][ T3511] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 30.221495][ T3511] 6582 total pagecache pages [ 30.226097][ T3511] 18 pages in swap cache [ 30.230334][ T3511] Free swap = 124740kB [ 30.234526][ T3511] Total swap = 124996kB [ 30.238711][ T3511] 2097051 pages RAM [ 30.242627][ T3511] 0 pages HighMem/MovableOnly [ 30.247333][ T3511] 80040 pages reserved [ 30.254562][ T3507] vhci_hcd: connection reset by peer [ 30.295832][ T288] vhci_hcd: stop threads [ 30.300158][ T288] vhci_hcd: release socket [ 30.304605][ T288] vhci_hcd: disconnect device [ 30.377365][ T3526] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 30.405171][ T3500] syz.0.22 (3500) used greatest stack depth: 7320 bytes left [ 30.494883][ T3532] mmap: syz.0.33 (3532) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.936035][ T3536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.34'. [ 30.998418][ T3538] dccp_invalid_packet: P.Data Offset(0) too small [ 31.142516][ T3542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.36'. [ 31.179709][ T3544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 31.189276][ T3544] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.221942][ T3547] loop3: detected capacity change from 0 to 128 [ 31.230890][ T3548] dccp_invalid_packet: P.Data Offset(0) too small [ 31.278321][ T3550] netlink: 44 bytes leftover after parsing attributes in process `syz.3.39'. [ 31.558182][ T3571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.49'. [ 31.573060][ T3573] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 32.013459][ T3582] loop2: detected capacity change from 0 to 128 [ 32.228201][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 32.228213][ T29] audit: type=1326 audit(1738089760.866:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3586 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 32.305249][ T29] audit: type=1326 audit(1738089760.866:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3586 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 32.330629][ T29] audit: type=1326 audit(1738089760.866:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3586 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 32.355140][ T29] audit: type=1326 audit(1738089760.866:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3586 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 32.378591][ T29] audit: type=1326 audit(1738089760.866:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3586 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 32.402390][ T29] audit: type=1326 audit(1738089760.896:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3586 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 32.425841][ T29] audit: type=1326 audit(1738089760.896:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3586 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 32.449232][ T29] audit: type=1326 audit(1738089760.896:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3586 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 32.534921][ T3595] netlink: 44 bytes leftover after parsing attributes in process `syz.0.58'. [ 32.641286][ T3606] loop4: detected capacity change from 0 to 128 [ 32.651483][ T3607] dccp_invalid_packet: P.Data Offset(0) too small [ 32.659507][ T29] audit: type=1326 audit(1738089761.296:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333054cda9 code=0x7ffc0000 [ 32.685043][ T3608] dccp_invalid_packet: P.Data Offset(0) too small [ 32.696008][ T29] audit: type=1326 audit(1738089761.296:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3596 comm="syz.3.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f333054cda9 code=0x7ffc0000 [ 33.453003][ T3637] __nla_validate_parse: 3 callbacks suppressed [ 33.453019][ T3637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'. [ 33.491703][ T3639] loop2: detected capacity change from 0 to 128 [ 33.796643][ T3657] netlink: 132 bytes leftover after parsing attributes in process `syz.3.84'. [ 33.832550][ T3659] loop2: detected capacity change from 0 to 128 [ 33.873829][ T3661] netlink: 132 bytes leftover after parsing attributes in process `syz.4.83'. [ 33.890718][ T3663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 33.907268][ T3664] dccp_invalid_packet: P.Data Offset(0) too small [ 33.961617][ T3669] dccp_invalid_packet: P.Data Offset(0) too small [ 34.021459][ T3677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 34.736780][ T3692] loop4: detected capacity change from 0 to 128 [ 34.747880][ T3373] usb 3-1: enqueue for inactive port 0 [ 34.757019][ T3373] usb 3-1: enqueue for inactive port 0 [ 34.806655][ T3694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 34.835666][ T3373] vhci_hcd: vhci_device speed not set [ 35.039089][ T3718] netlink: 132 bytes leftover after parsing attributes in process `syz.0.108'. [ 35.082588][ T3722] netlink: 132 bytes leftover after parsing attributes in process `syz.1.106'. [ 35.130406][ T3723] dccp_invalid_packet: P.Data Offset(0) too small [ 35.142227][ T3725] loop2: detected capacity change from 0 to 128 [ 35.152118][ T3726] dccp_invalid_packet: P.Data Offset(0) too small [ 35.214150][ T3728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 35.612257][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 35.619059][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 35.625890][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 35.633208][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 35.641109][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 35.648253][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 35.654714][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 35.661195][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 35.958074][ T3753] Zero length message leads to an empty skb [ 36.008124][ T3757] loop1: detected capacity change from 0 to 128 [ 36.016811][ T3758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 36.729833][ T3785] loop4: detected capacity change from 0 to 128 [ 37.105594][ T3806] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 37.145864][ T3810] loop2: detected capacity change from 0 to 128 [ 37.267302][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 37.267326][ T29] audit: type=1326 audit(1738089765.906:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 37.359244][ T29] audit: type=1326 audit(1738089765.906:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 37.382638][ T29] audit: type=1326 audit(1738089765.936:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 37.407857][ T29] audit: type=1326 audit(1738089765.936:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 37.431699][ T29] audit: type=1326 audit(1738089765.936:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 37.455433][ T29] audit: type=1326 audit(1738089765.936:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 37.479323][ T29] audit: type=1326 audit(1738089765.936:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 37.504779][ T29] audit: type=1326 audit(1738089765.976:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3827 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 37.531771][ T29] audit: type=1326 audit(1738089765.976:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3827 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 37.557421][ T29] audit: type=1326 audit(1738089765.976:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3827 comm="syz.0.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 37.967464][ T3843] loop4: detected capacity change from 0 to 128 [ 38.463655][ T3874] loop0: detected capacity change from 0 to 128 [ 38.478862][ T3876] __nla_validate_parse: 8 callbacks suppressed [ 38.478875][ T3876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 38.796276][ T3894] netlink: 132 bytes leftover after parsing attributes in process `syz.0.179'. [ 38.836392][ T3896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.180'. [ 39.071030][ T3900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 39.104718][ T3902] loop3: detected capacity change from 0 to 128 [ 39.201195][ T3909] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 39.263411][ T3922] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 39.301310][ T3924] loop4: detected capacity change from 0 to 128 [ 39.409843][ T3933] netlink: 36 bytes leftover after parsing attributes in process `syz.2.194'. [ 39.644050][ T3953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.204'. [ 39.681922][ T3957] loop1: detected capacity change from 0 to 128 [ 39.685253][ T3955] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 39.749560][ T3963] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 39.842975][ T3973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.214'. [ 39.899873][ T3977] netlink: 132 bytes leftover after parsing attributes in process `syz.4.216'. [ 39.955417][ T3982] loop1: detected capacity change from 0 to 128 [ 40.196228][ T3993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.222'. [ 40.288638][ T3999] netlink: 'syz.2.226': attribute type 1 has an invalid length. [ 40.335549][ T4005] xt_hashlimit: max too large, truncated to 1048576 [ 40.383878][ T4005] Cannot find set identified by id 0 to match [ 40.423350][ T4005] sit0 speed is unknown, defaulting to 1000 [ 40.460232][ T4005] sit0 speed is unknown, defaulting to 1000 [ 40.486762][ T4005] sit0 speed is unknown, defaulting to 1000 [ 40.581469][ T4005] infiniband syz2: set active [ 40.586640][ T4005] infiniband syz2: added sit0 [ 40.591635][ T3371] sit0 speed is unknown, defaulting to 1000 [ 40.638978][ T4005] RDS/IB: syz2: added [ 40.644963][ T4005] smc: adding ib device syz2 with port count 1 [ 40.659727][ T4026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.235'. [ 40.700504][ T4005] smc: ib device syz2 port 1 has pnetid [ 40.707924][ T3371] sit0 speed is unknown, defaulting to 1000 [ 40.733754][ T4005] sit0 speed is unknown, defaulting to 1000 [ 40.812331][ T4005] sit0 speed is unknown, defaulting to 1000 [ 40.880645][ T4005] sit0 speed is unknown, defaulting to 1000 [ 41.189528][ T4005] sit0 speed is unknown, defaulting to 1000 [ 41.287846][ T4005] sit0 speed is unknown, defaulting to 1000 [ 41.471231][ T4033] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 41.724221][ T4061] loop0: detected capacity change from 0 to 128 [ 41.735510][ T4063] net_ratelimit: 96 callbacks suppressed [ 41.735523][ T4063] dccp_invalid_packet: P.Data Offset(0) too small [ 41.748841][ T4062] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 41.766271][ T4058] xt_hashlimit: max too large, truncated to 1048576 [ 41.774262][ T4058] Cannot find set identified by id 0 to match [ 41.782750][ T4058] rdma_rxe: rxe_newlink: failed to add sit0 [ 41.999230][ T4090] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 42.021251][ T4094] xt_hashlimit: max too large, truncated to 1048576 [ 42.029076][ T4094] Cannot find set identified by id 0 to match [ 42.046749][ T4094] rdma_rxe: rxe_newlink: failed to add sit0 [ 42.047456][ T4097] loop1: detected capacity change from 0 to 128 [ 42.192445][ T4116] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 42.261941][ T4128] loop1: detected capacity change from 0 to 128 [ 42.315725][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 42.315739][ T29] audit: type=1400 audit(1738089770.956:663): avc: denied { read } for pid=4134 comm="syz.4.287" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.333019][ T4133] sit0 speed is unknown, defaulting to 1000 [ 42.369953][ T29] audit: type=1400 audit(1738089770.986:664): avc: denied { open } for pid=4134 comm="syz.4.287" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.397645][ T29] audit: type=1400 audit(1738089770.986:665): avc: denied { ioctl } for pid=4134 comm="syz.4.287" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.517167][ T29] audit: type=1326 audit(1738089771.146:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 42.541597][ T29] audit: type=1326 audit(1738089771.146:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 42.565171][ T29] audit: type=1326 audit(1738089771.146:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 42.579167][ T4153] loop4: detected capacity change from 0 to 128 [ 42.589040][ T29] audit: type=1326 audit(1738089771.146:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 42.589068][ T29] audit: type=1326 audit(1738089771.146:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 42.607758][ T29] audit: type=1326 audit(1738089771.236:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4155 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 42.685826][ T29] audit: type=1326 audit(1738089771.276:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4155 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 42.852297][ T4177] dccp_invalid_packet: P.Data Offset(0) too small [ 42.863459][ T4179] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 42.907859][ T4183] xt_hashlimit: max too large, truncated to 1048576 [ 42.920777][ T4183] Cannot find set identified by id 0 to match [ 42.927255][ T4185] loop2: detected capacity change from 0 to 128 [ 42.931456][ T4186] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 42.938847][ T4183] rdma_rxe: rxe_newlink: failed to add sit0 [ 42.992350][ T4188] netlink: 'syz.4.312': attribute type 1 has an invalid length. [ 43.101569][ T4198] dccp_invalid_packet: P.Data Offset(0) too small [ 43.226861][ T4211] loop0: detected capacity change from 0 to 128 [ 43.231751][ T4209] xt_hashlimit: max too large, truncated to 1048576 [ 43.241918][ T4209] Cannot find set identified by id 0 to match [ 43.255406][ T4209] rdma_rxe: rxe_newlink: failed to add sit0 [ 43.289595][ T4213] xt_hashlimit: max too large, truncated to 1048576 [ 43.299193][ T4213] Cannot find set identified by id 0 to match [ 43.308035][ T4213] rdma_rxe: rxe_newlink: failed to add sit0 [ 43.451185][ T4235] loop0: detected capacity change from 0 to 128 [ 43.492973][ T4239] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 43.540491][ T4243] __nla_validate_parse: 20 callbacks suppressed [ 43.540505][ T4243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 43.560522][ T4245] xt_hashlimit: max too large, truncated to 1048576 [ 43.569840][ T4245] Cannot find set identified by id 0 to match [ 43.578423][ T4245] rdma_rxe: rxe_newlink: failed to add sit0 [ 43.676976][ T4259] loop0: detected capacity change from 0 to 128 [ 43.745953][ T4264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.349'. [ 43.798038][ T4268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.351'. [ 43.835154][ T4273] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 43.850809][ T4277] netlink: 132 bytes leftover after parsing attributes in process `syz.0.356'. [ 43.912284][ T4282] loop3: detected capacity change from 0 to 128 [ 43.933039][ T4283] dccp_invalid_packet: P.Data Offset(0) too small [ 44.144214][ T4290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 44.183009][ T4298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 44.213521][ T4290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.361'. [ 44.243193][ T4304] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 44.277781][ T4308] netlink: 132 bytes leftover after parsing attributes in process `syz.4.367'. [ 44.335472][ T4312] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.347699][ T4314] dccp_invalid_packet: P.Data Offset(0) too small [ 44.554435][ T4324] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.834865][ T4345] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.876451][ T4347] xt_hashlimit: max too large, truncated to 1048576 [ 44.894128][ T4347] Cannot find set identified by id 0 to match [ 44.906153][ T4347] rdma_rxe: rxe_newlink: failed to add sit0 [ 45.018637][ T4353] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 45.074836][ T4359] netlink: 132 bytes leftover after parsing attributes in process `syz.3.393'. [ 45.143539][ T4361] xt_hashlimit: max too large, truncated to 1048576 [ 45.150974][ T4361] Cannot find set identified by id 0 to match [ 45.159131][ T4361] rdma_rxe: rxe_newlink: failed to add sit0 [ 45.160155][ T4364] dccp_invalid_packet: P.Data Offset(0) too small [ 45.377575][ T4379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 45.700103][ T4393] xt_hashlimit: max too large, truncated to 1048576 [ 45.708892][ T4393] Cannot find set identified by id 0 to match [ 45.718191][ T4393] rdma_rxe: rxe_newlink: failed to add sit0 [ 46.280802][ T4432] sit0 speed is unknown, defaulting to 1000 [ 46.443569][ T4447] dccp_invalid_packet: P.Data Offset(0) too small [ 46.553674][ T4456] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 46.614269][ T4459] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 47.049876][ T4484] xt_hashlimit: max too large, truncated to 1048576 [ 47.058441][ T4484] Cannot find set identified by id 0 to match [ 47.069495][ T4484] rdma_rxe: rxe_newlink: failed to add sit0 [ 47.109215][ T4488] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 47.471604][ T4506] sit0 speed is unknown, defaulting to 1000 [ 47.554282][ T4512] xt_hashlimit: max too large, truncated to 1048576 [ 47.562030][ T4512] Cannot find set identified by id 0 to match [ 47.570111][ T4512] rdma_rxe: rxe_newlink: failed to add sit0 [ 47.584801][ T4517] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 47.608181][ T4518] dccp_invalid_packet: P.Data Offset(0) too small [ 47.631518][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 47.631533][ T29] audit: type=1326 audit(1738089776.266:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 47.668345][ T29] audit: type=1326 audit(1738089776.266:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 47.699605][ T29] audit: type=1326 audit(1738089776.266:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 47.725203][ T29] audit: type=1326 audit(1738089776.266:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 47.750651][ T29] audit: type=1326 audit(1738089776.266:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 47.778483][ T29] audit: type=1326 audit(1738089776.266:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 47.802293][ T29] audit: type=1326 audit(1738089776.266:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 47.826187][ T29] audit: type=1326 audit(1738089776.266:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 47.849899][ T29] audit: type=1326 audit(1738089776.266:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 47.873341][ T29] audit: type=1326 audit(1738089776.266:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.1.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 48.354412][ T4581] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 48.601009][ T4608] __nla_validate_parse: 15 callbacks suppressed [ 48.601025][ T4608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.500'. [ 48.671103][ T4613] dccp_invalid_packet: P.Data Offset(0) too small [ 48.775886][ T4623] xt_hashlimit: max too large, truncated to 1048576 [ 48.784129][ T4623] Cannot find set identified by id 0 to match [ 48.792977][ T4623] rdma_rxe: rxe_newlink: failed to add sit0 [ 48.905314][ T4635] loop3: detected capacity change from 0 to 512 [ 48.922918][ T4635] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.512: casefold flag without casefold feature [ 48.938018][ T4635] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.512: couldn't read orphan inode 15 (err -117) [ 48.951251][ T4635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.010585][ T4651] xt_hashlimit: max too large, truncated to 1048576 [ 49.018691][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.019258][ T4651] Cannot find set identified by id 0 to match [ 49.040811][ T4651] rdma_rxe: rxe_newlink: failed to add sit0 [ 49.162104][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 49.181259][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 49.278964][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 49.293039][ T4684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 49.375550][ T4689] xt_hashlimit: max too large, truncated to 1048576 [ 49.384087][ T4689] Cannot find set identified by id 0 to match [ 49.392572][ T4689] rdma_rxe: rxe_newlink: failed to add sit0 [ 49.552491][ T4701] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 49.635417][ T4710] netlink: 132 bytes leftover after parsing attributes in process `syz.4.546'. [ 49.665127][ T4715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.548'. [ 49.677627][ T4713] xt_hashlimit: max too large, truncated to 1048576 [ 49.685338][ T4713] Cannot find set identified by id 0 to match [ 49.693024][ T4713] rdma_rxe: rxe_newlink: failed to add sit0 [ 49.700119][ T4716] dccp_invalid_packet: P.Data Offset(0) too small [ 49.733201][ T4719] dccp_invalid_packet: P.Data Offset(0) too small [ 49.981699][ T4731] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 50.127450][ T4744] xt_hashlimit: max too large, truncated to 1048576 [ 50.138723][ T4744] Cannot find set identified by id 0 to match [ 50.147483][ T4744] rdma_rxe: rxe_newlink: failed to add sit0 [ 50.238325][ T4749] loop0: detected capacity change from 0 to 2048 [ 50.303545][ T4749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.520020][ T4757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 50.563885][ T4757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'. [ 50.574998][ T4758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 50.748417][ T4766] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 50.996363][ T4782] dccp_invalid_packet: P.Data Offset(0) too small [ 51.012656][ T4783] dccp_invalid_packet: P.Data Offset(0) too small [ 51.020328][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.135872][ T4791] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 51.409198][ T4798] sit0 speed is unknown, defaulting to 1000 [ 51.453624][ T4808] loop4: detected capacity change from 0 to 512 [ 51.475965][ T4808] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 51.505869][ T4808] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.544671][ T4815] FAULT_INJECTION: forcing a failure. [ 51.544671][ T4815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.558383][ T4815] CPU: 0 UID: 0 PID: 4815 Comm: syz.4.587 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 51.558412][ T4815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 51.558437][ T4815] Call Trace: [ 51.558442][ T4815] [ 51.558449][ T4815] dump_stack_lvl+0xf2/0x150 [ 51.558474][ T4815] dump_stack+0x15/0x1a [ 51.558493][ T4815] should_fail_ex+0x24a/0x260 [ 51.558568][ T4815] should_fail+0xb/0x10 [ 51.558594][ T4815] should_fail_usercopy+0x1a/0x20 [ 51.558611][ T4815] _copy_from_user+0x1c/0xa0 [ 51.558706][ T4815] move_addr_to_kernel+0x82/0x120 [ 51.558730][ T4815] copy_msghdr_from_user+0x271/0x2a0 [ 51.558756][ T4815] __sys_sendmmsg+0x1e8/0x4b0 [ 51.558790][ T4815] __x64_sys_sendmmsg+0x57/0x70 [ 51.558881][ T4815] x64_sys_call+0x29aa/0x2dc0 [ 51.558905][ T4815] do_syscall_64+0xc9/0x1c0 [ 51.558931][ T4815] ? clear_bhb_loop+0x55/0xb0 [ 51.559011][ T4815] ? clear_bhb_loop+0x55/0xb0 [ 51.559034][ T4815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.559063][ T4815] RIP: 0033:0x7ff2b48ccda9 [ 51.559078][ T4815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.559129][ T4815] RSP: 002b:00007ff2b2f31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 51.559196][ T4815] RAX: ffffffffffffffda RBX: 00007ff2b4ae5fa0 RCX: 00007ff2b48ccda9 [ 51.559208][ T4815] RDX: 0000000000000001 RSI: 00000000200007c0 RDI: 0000000000000003 [ 51.559220][ T4815] RBP: 00007ff2b2f31090 R08: 0000000000000000 R09: 0000000000000000 [ 51.559293][ T4815] R10: 000000002c000011 R11: 0000000000000246 R12: 0000000000000001 [ 51.559304][ T4815] R13: 0000000000000000 R14: 00007ff2b4ae5fa0 R15: 00007ffdd6656768 [ 51.559321][ T4815] [ 52.053673][ T4843] TCP: tcp_parse_options: Illegal window scaling value 175 > 14 received [ 52.159036][ T4852] dccp_invalid_packet: P.Data Offset(0) too small [ 52.163396][ T4853] dccp_invalid_packet: P.Data Offset(0) too small [ 52.400841][ T4877] xt_hashlimit: max too large, truncated to 1048576 [ 52.408532][ T4877] Cannot find set identified by id 0 to match [ 52.417005][ T4877] rdma_rxe: rxe_newlink: failed to add sit0 [ 52.515004][ T4889] capability: warning: `syz.0.621' uses deprecated v2 capabilities in a way that may be insecure [ 52.580067][ T4875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.590097][ T4875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.590820][ T4890] sit0 speed is unknown, defaulting to 1000 [ 52.980705][ T4904] xt_hashlimit: max too large, truncated to 1048576 [ 52.988142][ T4904] Cannot find set identified by id 0 to match [ 52.996866][ T4904] rdma_rxe: rxe_newlink: failed to add sit0 [ 53.055683][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 53.055696][ T29] audit: type=1326 audit(1738089781.686:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 53.085421][ T29] audit: type=1326 audit(1738089781.686:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 53.109601][ T29] audit: type=1326 audit(1738089781.686:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 53.134596][ T29] audit: type=1326 audit(1738089781.686:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 53.160934][ T29] audit: type=1326 audit(1738089781.686:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 53.186145][ T29] audit: type=1326 audit(1738089781.686:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 53.283394][ T29] audit: type=1326 audit(1738089781.916:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 53.308873][ T29] audit: type=1326 audit(1738089781.916:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 53.336249][ T29] audit: type=1326 audit(1738089781.916:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 53.364258][ T29] audit: type=1326 audit(1738089781.916:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.1.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 53.468137][ T4926] dccp_invalid_packet: P.Data Offset(0) too small [ 53.489760][ T4928] dccp_invalid_packet: P.Data Offset(0) too small [ 53.547114][ T4933] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 53.621728][ T4939] __nla_validate_parse: 11 callbacks suppressed [ 53.621742][ T4939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 53.891712][ T4957] sit0 speed is unknown, defaulting to 1000 [ 53.900751][ T4966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 54.473176][ T5002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.672'. [ 54.511819][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 54.521203][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 54.541412][ T5006] dccp_invalid_packet: P.Data Offset(0) too small [ 55.033114][ T5033] sit0 speed is unknown, defaulting to 1000 [ 55.569745][ T5070] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 55.670487][ T5080] netlink: 132 bytes leftover after parsing attributes in process `syz.2.706'. [ 55.738782][ T5087] dccp_invalid_packet: P.Data Offset(0) too small [ 55.787741][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'. [ 55.797372][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'. [ 55.875687][ T5101] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 56.701959][ T5189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.757'. [ 56.771234][ T5198] binfmt_misc: register: failed to install interpreter file ./file0 [ 56.781372][ T5199] dccp_invalid_packet: P.Data Offset(0) too small [ 56.895513][ T5211] netlink: 'syz.3.767': attribute type 1 has an invalid length. [ 56.903458][ T5211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.767'. [ 57.041727][ T5233] FAULT_INJECTION: forcing a failure. [ 57.041727][ T5233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.054891][ T5233] CPU: 0 UID: 0 PID: 5233 Comm: syz.4.777 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 57.054977][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 57.054986][ T5233] Call Trace: [ 57.054992][ T5233] [ 57.054999][ T5233] dump_stack_lvl+0xf2/0x150 [ 57.055075][ T5233] dump_stack+0x15/0x1a [ 57.055166][ T5233] should_fail_ex+0x24a/0x260 [ 57.055195][ T5233] should_fail+0xb/0x10 [ 57.055285][ T5233] should_fail_usercopy+0x1a/0x20 [ 57.055299][ T5233] strncpy_from_user+0x25/0x210 [ 57.055321][ T5233] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 57.055350][ T5233] ? getname_flags+0x81/0x3b0 [ 57.055480][ T5233] getname_flags+0xb0/0x3b0 [ 57.055505][ T5233] getname+0x17/0x20 [ 57.055570][ T5233] do_sys_openat2+0x67/0x120 [ 57.055598][ T5233] __x64_sys_openat+0xf3/0x120 [ 57.055628][ T5233] x64_sys_call+0x2b30/0x2dc0 [ 57.055650][ T5233] do_syscall_64+0xc9/0x1c0 [ 57.055708][ T5233] ? clear_bhb_loop+0x55/0xb0 [ 57.055728][ T5233] ? clear_bhb_loop+0x55/0xb0 [ 57.055746][ T5233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.055766][ T5233] RIP: 0033:0x7ff2b48cb710 [ 57.055785][ T5233] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 57.055870][ T5233] RSP: 002b:00007ff2b2f30b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 57.055887][ T5233] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff2b48cb710 [ 57.055897][ T5233] RDX: 0000000000000000 RSI: 00007ff2b2f30c10 RDI: 00000000ffffff9c [ 57.055906][ T5233] RBP: 00007ff2b2f30c10 R08: 0000000000000000 R09: 0000000000000000 [ 57.055915][ T5233] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 57.055975][ T5233] R13: 0000000000000000 R14: 00007ff2b4ae5fa0 R15: 00007ffdd6656768 [ 57.055993][ T5233] [ 57.241224][ T5232] FAULT_INJECTION: forcing a failure. [ 57.241224][ T5232] name failslab, interval 1, probability 0, space 0, times 0 [ 57.254528][ T5232] CPU: 1 UID: 0 PID: 5232 Comm: syz.1.778 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 57.254616][ T5232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 57.254625][ T5232] Call Trace: [ 57.254630][ T5232] [ 57.254635][ T5232] dump_stack_lvl+0xf2/0x150 [ 57.254730][ T5232] dump_stack+0x15/0x1a [ 57.254745][ T5232] should_fail_ex+0x24a/0x260 [ 57.254769][ T5232] should_failslab+0x8f/0xb0 [ 57.254788][ T5232] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 57.254827][ T5232] ? __d_alloc+0x3d/0x340 [ 57.254856][ T5232] __d_alloc+0x3d/0x340 [ 57.254878][ T5232] d_alloc_parallel+0x54/0xc80 [ 57.254893][ T5232] ? selinux_inode_permission+0x341/0x410 [ 57.254996][ T5232] ? lockref_get_not_dead+0x117/0x1b0 [ 57.255022][ T5232] ? down_read+0x171/0x4b0 [ 57.255043][ T5232] __lookup_slow+0x8d/0x250 [ 57.255069][ T5232] lookup_slow+0x3c/0x60 [ 57.255277][ T5232] walk_component+0x1f5/0x230 [ 57.255353][ T5232] ? path_lookupat+0xfd/0x2b0 [ 57.255386][ T5232] path_lookupat+0x10a/0x2b0 [ 57.255450][ T5232] filename_lookup+0x150/0x340 [ 57.255480][ T5232] kern_path+0x39/0x120 [ 57.255502][ T5232] create_local_trace_uprobe+0x55/0x2d0 [ 57.255603][ T5232] perf_uprobe_init+0xc2/0x140 [ 57.255684][ T5232] perf_uprobe_event_init+0xe2/0x140 [ 57.255706][ T5232] perf_try_init_event+0xcb/0x4f0 [ 57.255727][ T5232] ? perf_event_alloc+0xac6/0x12e0 [ 57.255831][ T5232] perf_event_alloc+0xad1/0x12e0 [ 57.255874][ T5232] __se_sys_perf_event_open+0x5ac/0x2230 [ 57.255898][ T5232] ? proc_fail_nth_write+0x12a/0x150 [ 57.255921][ T5232] ? vfs_write+0x611/0x920 [ 57.255963][ T5232] __x64_sys_perf_event_open+0x67/0x80 [ 57.255988][ T5232] x64_sys_call+0x1deb/0x2dc0 [ 57.256019][ T5232] do_syscall_64+0xc9/0x1c0 [ 57.256082][ T5232] ? clear_bhb_loop+0x55/0xb0 [ 57.256102][ T5232] ? clear_bhb_loop+0x55/0xb0 [ 57.256123][ T5232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.256173][ T5232] RIP: 0033:0x7f0d143ecda9 [ 57.256186][ T5232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.256249][ T5232] RSP: 002b:00007f0d12a57038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 57.256266][ T5232] RAX: ffffffffffffffda RBX: 00007f0d14605fa0 RCX: 00007f0d143ecda9 [ 57.256326][ T5232] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000000 [ 57.256335][ T5232] RBP: 00007f0d12a57090 R08: 0000000000000001 R09: 0000000000000000 [ 57.256345][ T5232] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 57.256358][ T5232] R13: 0000000000000000 R14: 00007f0d14605fa0 R15: 00007ffc1d371708 [ 57.256382][ T5232] [ 57.755017][ T5261] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 57.775945][ T5255] sit0 speed is unknown, defaulting to 1000 [ 57.783991][ T5262] dccp_invalid_packet: P.Data Offset(0) too small [ 58.041145][ T5267] x_tables: duplicate underflow at hook 1 [ 58.169509][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 58.169522][ T29] audit: type=1326 audit(1738089786.806:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 58.208293][ T29] audit: type=1326 audit(1738089786.836:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 58.232136][ T29] audit: type=1326 audit(1738089786.836:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 58.257081][ T29] audit: type=1326 audit(1738089786.836:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5273 comm="syz.0.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 58.351842][ T29] audit: type=1326 audit(1738089786.986:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5280 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 58.375407][ T29] audit: type=1326 audit(1738089786.986:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5280 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 58.399836][ T29] audit: type=1326 audit(1738089786.986:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5280 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 58.423477][ T29] audit: type=1326 audit(1738089786.986:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5280 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 58.447495][ T29] audit: type=1326 audit(1738089786.986:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5280 comm="syz.0.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4e2ccda9 code=0x7ffc0000 [ 58.535241][ T5287] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 58.592440][ T29] audit: type=1400 audit(1738089787.206:1383): avc: denied { create } for pid=5290 comm="syz.3.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.361443][ T5308] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.441084][ T5317] __nla_validate_parse: 2 callbacks suppressed [ 59.441097][ T5317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.813'. [ 59.488001][ T5323] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.511885][ T5327] dccp_invalid_packet: P.Data Offset(0) too small [ 59.533240][ T5324] sit0 speed is unknown, defaulting to 1000 [ 59.974460][ T5345] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 60.077748][ T5355] netlink: 132 bytes leftover after parsing attributes in process `syz.1.829'. [ 60.151187][ T5359] dccp_invalid_packet: P.Data Offset(0) too small [ 60.307381][ T5361] netlink: 132 bytes leftover after parsing attributes in process `syz.4.831'. [ 60.379474][ T5366] dccp_invalid_packet: P.Data Offset(0) too small [ 60.415240][ T5367] sit0 speed is unknown, defaulting to 1000 [ 61.166427][ T5392] netlink: 132 bytes leftover after parsing attributes in process `syz.4.844'. [ 61.249803][ T5400] loop0: detected capacity change from 0 to 1024 [ 61.258804][ T5401] dccp_invalid_packet: P.Data Offset(0) too small [ 61.271313][ T5396] xt_hashlimit: max too large, truncated to 1048576 [ 61.282423][ T5400] EXT4-fs: Ignoring removed orlov option [ 61.288329][ T5400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.297865][ T5396] Cannot find set identified by id 0 to match [ 61.305655][ T5396] rdma_rxe: rxe_newlink: failed to add sit0 [ 61.331172][ T5400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.354113][ T5408] ref_ctr_offset mismatch. inode: 0x290 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 61.357575][ T5410] netlink: 132 bytes leftover after parsing attributes in process `syz.1.850'. [ 61.383558][ T5408] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 61.390233][ T5408] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 61.397907][ T5408] vhci_hcd vhci_hcd.0: Device attached [ 61.408014][ T5411] vhci_hcd: connection closed [ 61.408148][ T40] vhci_hcd: stop threads [ 61.417385][ T40] vhci_hcd: release socket [ 61.421819][ T40] vhci_hcd: disconnect device [ 61.427764][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.453738][ T5414] dccp_invalid_packet: P.Data Offset(0) too small [ 61.773327][ T5430] sit0 speed is unknown, defaulting to 1000 [ 62.060667][ T5437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.860'. [ 62.153557][ T5444] xt_hashlimit: max too large, truncated to 1048576 [ 62.161398][ T5444] Cannot find set identified by id 0 to match [ 62.169292][ T5444] syz2: rxe_newlink: already configured on sit0 [ 62.234645][ T5455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.869'. [ 62.314537][ T5466] dccp_invalid_packet: P.Data Offset(0) too small [ 62.342598][ T5467] ref_ctr_offset mismatch. inode: 0x42b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 62.357751][ T5467] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 62.364374][ T5467] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.372147][ T5467] vhci_hcd vhci_hcd.0: Device attached [ 62.384752][ T5471] vhci_hcd: connection closed [ 62.385126][ T28] vhci_hcd: stop threads [ 62.394210][ T28] vhci_hcd: release socket [ 62.398679][ T28] vhci_hcd: disconnect device [ 62.443352][ T5481] xt_hashlimit: max too large, truncated to 1048576 [ 62.452471][ T5481] Cannot find set identified by id 0 to match [ 62.460095][ T5481] syz2: rxe_newlink: already configured on sit0 [ 62.538656][ T5494] netlink: 132 bytes leftover after parsing attributes in process `syz.3.887'. [ 62.600804][ T5495] dccp_invalid_packet: P.Data Offset(0) too small [ 63.024903][ T5505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.891'. [ 63.210221][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 63.210236][ T29] audit: type=1326 audit(1738089791.846:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 63.254432][ T29] audit: type=1326 audit(1738089791.846:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 63.277952][ T29] audit: type=1326 audit(1738089791.846:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 63.301558][ T29] audit: type=1326 audit(1738089791.846:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.2.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43747acda9 code=0x7ffc0000 [ 63.327748][ T5530] ref_ctr_offset mismatch. inode: 0x367 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 63.361418][ T5527] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 63.368084][ T5527] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.375943][ T5527] vhci_hcd vhci_hcd.0: Device attached [ 63.409258][ T5532] vhci_hcd: connection closed [ 63.409546][ T40] vhci_hcd: stop threads [ 63.418581][ T40] vhci_hcd: release socket [ 63.423000][ T40] vhci_hcd: disconnect device [ 63.444457][ T29] audit: type=1326 audit(1738089792.076:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 63.468226][ T29] audit: type=1326 audit(1738089792.076:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 63.493712][ T5540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 63.504281][ T29] audit: type=1326 audit(1738089792.076:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d143ecda9 code=0x7ffc0000 [ 63.557070][ T29] audit: type=1326 audit(1738089792.196:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333054cda9 code=0x7ffc0000 [ 63.580720][ T29] audit: type=1326 audit(1738089792.196:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333054cda9 code=0x7ffc0000 [ 63.617766][ T29] audit: type=1326 audit(1738089792.246:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.3.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333054cda9 code=0x7ffc0000 [ 63.851402][ T5557] loop3: detected capacity change from 0 to 1024 [ 63.860941][ T5557] EXT4-fs: Ignoring removed orlov option [ 63.866822][ T5557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.876287][ T5558] dccp_invalid_packet: P.Data Offset(0) too small [ 63.910606][ T5557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.998611][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.140564][ T5587] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.210001][ T5592] xt_hashlimit: max too large, truncated to 1048576 [ 64.224015][ T5592] Cannot find set identified by id 0 to match [ 64.238188][ T5592] rdma_rxe: rxe_newlink: failed to add sit0 [ 64.474319][ T5614] __nla_validate_parse: 4 callbacks suppressed [ 64.474334][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 64.491877][ T5616] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.563424][ T5620] xt_hashlimit: max too large, truncated to 1048576 [ 64.591074][ T5620] Cannot find set identified by id 0 to match [ 64.604293][ T5620] rdma_rxe: rxe_newlink: failed to add sit0 [ 64.627378][ T5625] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.765573][ T5637] xt_hashlimit: max too large, truncated to 1048576 [ 64.773653][ T5637] Cannot find set identified by id 0 to match [ 64.783335][ T5637] rdma_rxe: rxe_newlink: failed to add sit0 [ 64.810038][ T5645] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.889386][ T5650] xt_hashlimit: max too large, truncated to 1048576 [ 64.898317][ T5650] Cannot find set identified by id 0 to match [ 64.908582][ T5650] rdma_rxe: rxe_newlink: failed to add sit0 [ 64.932386][ T5652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 64.977740][ T5657] xt_hashlimit: max too large, truncated to 1048576 [ 64.985381][ T5657] Cannot find set identified by id 0 to match [ 64.994501][ T5657] rdma_rxe: rxe_newlink: failed to add sit0 [ 65.135443][ T5668] loop2: detected capacity change from 0 to 1024 [ 65.142353][ T5662] loop1: detected capacity change from 0 to 8192 [ 65.183367][ T5670] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 65.226006][ T5668] EXT4-fs: Ignoring removed orlov option [ 65.232001][ T5668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.273721][ T5672] netlink: 'syz.3.960': attribute type 1 has an invalid length. [ 65.281439][ T5672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.960'. [ 65.355634][ T5668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.422228][ T5668] FAULT_INJECTION: forcing a failure. [ 65.422228][ T5668] name failslab, interval 1, probability 0, space 0, times 0 [ 65.435024][ T5668] CPU: 0 UID: 0 PID: 5668 Comm: syz.2.958 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 65.435114][ T5668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.435125][ T5668] Call Trace: [ 65.435131][ T5668] [ 65.435139][ T5668] dump_stack_lvl+0xf2/0x150 [ 65.435165][ T5668] dump_stack+0x15/0x1a [ 65.435184][ T5668] should_fail_ex+0x24a/0x260 [ 65.435284][ T5668] should_failslab+0x8f/0xb0 [ 65.435307][ T5668] __kmalloc_noprof+0xab/0x3f0 [ 65.435394][ T5668] ? ext4_find_extent+0x172/0x7c0 [ 65.435467][ T5668] ext4_find_extent+0x172/0x7c0 [ 65.435495][ T5668] ? strncpy_from_user+0x17e/0x210 [ 65.435572][ T5668] ? search_extable+0x54/0x80 [ 65.435590][ T5668] ? strncpy_from_user+0x17e/0x210 [ 65.435617][ T5668] ext4_ext_map_blocks+0x11f/0x35c0 [ 65.435635][ T5668] ? perf_swevent_event+0x261/0x4a0 [ 65.435672][ T5668] ? invalidate_inode_pages2_range+0x3b6/0x3f0 [ 65.435746][ T5668] ? perf_tp_event+0x9c5/0xa00 [ 65.435770][ T5668] ? perf_swevent_event+0x261/0x4a0 [ 65.435797][ T5668] ? down_read+0x171/0x4b0 [ 65.435822][ T5668] ext4_map_query_blocks+0x71/0x180 [ 65.435840][ T5668] ext4_map_blocks+0x23c/0xd20 [ 65.435938][ T5668] ? __ext4_journal_start_sb+0x130/0x340 [ 65.435965][ T5668] ext4_iomap_begin+0x4a9/0x5d0 [ 65.436079][ T5668] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 65.436099][ T5668] iomap_iter+0x3f1/0x830 [ 65.436123][ T5668] __iomap_dio_rw+0x6e9/0x1110 [ 65.436168][ T5668] iomap_dio_rw+0x40/0x90 [ 65.436187][ T5668] ext4_file_write_iter+0xb71/0xf20 [ 65.436212][ T5668] do_iter_readv_writev+0x403/0x4b0 [ 65.436236][ T5668] vfs_writev+0x2d9/0x880 [ 65.436265][ T5668] ? proc_fail_nth_write+0x12a/0x150 [ 65.436293][ T5668] __se_sys_pwritev2+0x100/0x1c0 [ 65.436314][ T5668] __x64_sys_pwritev2+0x78/0x90 [ 65.436333][ T5668] x64_sys_call+0x2afe/0x2dc0 [ 65.436398][ T5668] do_syscall_64+0xc9/0x1c0 [ 65.436519][ T5668] ? clear_bhb_loop+0x55/0xb0 [ 65.436615][ T5668] ? clear_bhb_loop+0x55/0xb0 [ 65.436639][ T5668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.436660][ T5668] RIP: 0033:0x7f43747acda9 [ 65.436673][ T5668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.436688][ T5668] RSP: 002b:00007f4372e11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 65.436706][ T5668] RAX: ffffffffffffffda RBX: 00007f43749c5fa0 RCX: 00007f43747acda9 [ 65.436717][ T5668] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000005 [ 65.436741][ T5668] RBP: 00007f4372e11090 R08: 0000000000000000 R09: 0000000000000003 [ 65.436752][ T5668] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001 [ 65.436761][ T5668] R13: 0000000000000000 R14: 00007f43749c5fa0 R15: 00007ffc8f97e708 [ 65.436774][ T5668] [ 65.473321][ T5682] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 65.591147][ T5684] xt_hashlimit: max too large, truncated to 1048576 [ 65.720033][ T5688] rdma_rxe: rxe_newlink: failed to add sit0 [ 65.743182][ T5684] Cannot find set identified by id 0 to match [ 65.788511][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.865820][ T5692] xt_hashlimit: max too large, truncated to 1048576 [ 65.881184][ T5692] Cannot find set identified by id 0 to match [ 65.907024][ T5692] rdma_rxe: rxe_newlink: failed to add sit0 [ 65.988583][ T5698] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 66.083542][ T5705] sit0 speed is unknown, defaulting to 1000 [ 66.111594][ T5712] netlink: 132 bytes leftover after parsing attributes in process `syz.1.976'. [ 66.146330][ T5709] rdma_rxe: rxe_newlink: failed to add sit0 [ 66.184721][ T5713] dccp_invalid_packet: P.Data Offset(0) too small [ 66.211771][ T5716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.977'. [ 66.333933][ T5723] hashlimit_mt_check_common: 1 callbacks suppressed [ 66.333960][ T5723] xt_hashlimit: max too large, truncated to 1048576 [ 66.348495][ T5723] set_match_v0_checkentry: 1 callbacks suppressed [ 66.348510][ T5723] Cannot find set identified by id 0 to match [ 66.364542][ T5723] syz2: rxe_newlink: already configured on sit0 [ 66.399053][ T5726] xt_hashlimit: max too large, truncated to 1048576 [ 66.406766][ T5726] Cannot find set identified by id 0 to match [ 66.417110][ T5726] syz2: rxe_newlink: already configured on sit0 [ 66.436163][ T5728] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 66.510875][ T5734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.987'. [ 66.561292][ T5738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.988'. [ 66.609846][ T5744] loop4: detected capacity change from 0 to 512 [ 66.631857][ T5747] dccp_invalid_packet: P.Data Offset(0) too small [ 66.645129][ T5744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.657799][ T5744] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.677575][ T5751] netlink: 36 bytes leftover after parsing attributes in process `syz.0.993'. [ 66.688264][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.710120][ T5753] xt_hashlimit: max too large, truncated to 1048576 [ 66.718479][ T5753] Cannot find set identified by id 0 to match [ 66.726327][ T5753] rdma_rxe: rxe_newlink: failed to add sit0 [ 66.782571][ T5763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.999'. [ 66.862902][ T5761] loop0: detected capacity change from 0 to 8192 [ 67.246986][ T5761] ================================================================== [ 67.255716][ T5761] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 67.264226][ T5761] [ 67.266622][ T5761] write to 0xffff888116984058 of 8 bytes by task 5776 on cpu 0: [ 67.274474][ T5761] sync_mapping_buffers+0x159/0x7c0 [ 67.279706][ T5761] fat_file_fsync+0xa7/0x100 [ 67.284323][ T5761] vfs_fsync_range+0x116/0x130 [ 67.289108][ T5761] generic_file_write_iter+0x1c3/0x310 [ 67.294638][ T5761] iter_file_splice_write+0x5f1/0x980 [ 67.300020][ T5761] direct_splice_actor+0x160/0x2c0 [ 67.305156][ T5761] splice_direct_to_actor+0x302/0x670 [ 67.310609][ T5761] do_splice_direct+0xd7/0x150 [ 67.315383][ T5761] do_sendfile+0x398/0x660 [ 67.319903][ T5761] __x64_sys_sendfile64+0x110/0x150 [ 67.325390][ T5761] x64_sys_call+0xfbd/0x2dc0 [ 67.330078][ T5761] do_syscall_64+0xc9/0x1c0 [ 67.334688][ T5761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.340607][ T5761] [ 67.342945][ T5761] read to 0xffff888116984058 of 8 bytes by task 5761 on cpu 1: [ 67.350677][ T5761] mark_buffer_dirty_inode+0x96/0x1c0 [ 67.356103][ T5761] fat_mirror_bhs+0x241/0x330 [ 67.360794][ T5761] fat_ent_write+0xcc/0xe0 [ 67.365236][ T5761] fat_chain_add+0x15f/0x400 [ 67.370041][ T5761] fat_get_block+0x46b/0x5e0 [ 67.374759][ T5761] __block_write_begin_int+0x417/0xfa0 [ 67.380602][ T5761] cont_write_begin+0x546/0x860 [ 67.385690][ T5761] fat_write_begin+0x51/0xe0 [ 67.390572][ T5761] cont_write_begin+0x18b/0x860 [ 67.395476][ T5761] fat_write_begin+0x51/0xe0 [ 67.400180][ T5761] generic_cont_expand_simple+0xaa/0x150 [ 67.405952][ T5761] fat_cont_expand+0x3a/0x160 [ 67.410640][ T5761] fat_fallocate+0x17c/0x1d0 [ 67.415326][ T5761] vfs_fallocate+0x368/0x3b0 [ 67.420268][ T5761] __x64_sys_fallocate+0x78/0xc0 [ 67.425309][ T5761] x64_sys_call+0x43c/0x2dc0 [ 67.429919][ T5761] do_syscall_64+0xc9/0x1c0 [ 67.434442][ T5761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.440795][ T5761] [ 67.443731][ T5761] value changed: 0xffff888106579408 -> 0x0000000000000000 [ 67.451197][ T5761] [ 67.453798][ T5761] Reported by Kernel Concurrency Sanitizer on: [ 67.460243][ T5761] CPU: 1 UID: 0 PID: 5761 Comm: syz.0.998 Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0 [ 67.470506][ T5761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 67.481093][ T5761] ==================================================================