last executing test programs: 31.576386648s ago: executing program 1 (id=87): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000018c0), 0x0, 0x0, 0x3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ff, 0x2}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x54}}, 0x404c004) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xe1b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x2, 0x1d, 0x8a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x20, 0x8, 0x200}}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x18, 0x3, 0x7f, 0x3, 0x1000, r10, 0x2, '\x00', r11, r12, 0x4, 0x1, 0x5}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r13) 31.38094716s ago: executing program 1 (id=89): ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000000)={0x80}) syz_open_dev$evdev(&(0x7f0000000200), 0xffffffffffff8a3e, 0x80002) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="080000000091c100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r2, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x4c67f84eea96e6c7, 0x5, 0x8, 0x6ed8, 0x50, r6, 0x4, '\x00', 0x0, r6, 0x0, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x1d, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, [@ldst={0x2, 0x3, 0x3, 0x3, 0x0, 0x30, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}, @alu={0x4, 0x1, 0x8, 0x2, 0xa, 0x6, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, @fallback=0x36, r6, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x7, &(0x7f0000000740)=[r5, r0, r2, r0, 0xffffffffffffffff, r0, r7, r5, r8, r0], &(0x7f0000000780)=[{0x1, 0x2, 0x7, 0xa}, {0x2, 0x5, 0x8, 0xc}, {0x5, 0x3, 0xb, 0x7}, {0x0, 0x3, 0xa, 0x6}, {0x3, 0x5, 0x2, 0x4}, {0x1, 0x2, 0x0, 0x4}, {0x0, 0x4, 0x8, 0x2}], 0x10, 0x2}, 0x94) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r9, &(0x7f0000000c40)=ANY=[@ANYBLOB="a80106a355cb"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r4, 0x0, 0x7f, 0xe) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r12, 0x2004, 0x0) 30.810809034s ago: executing program 1 (id=95): ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000000)={0x80}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="080000000091c100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r2, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x4c67f84eea96e6c7, 0x5, 0x8, 0x6ed8, 0x50, r6, 0x4, '\x00', 0x0, r6, 0x0, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x1d, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, [@ldst={0x2, 0x3, 0x3, 0x3, 0x0, 0x30, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}, @alu={0x4, 0x1, 0x8, 0x2, 0xa, 0x6, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, @fallback=0x36, r6, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x7, &(0x7f0000000740)=[r5, r0, r2, r0, 0xffffffffffffffff, r0, r7, r5, r8, r0], &(0x7f0000000780)=[{0x1, 0x2, 0x7, 0xa}, {0x2, 0x5, 0x8, 0xc}, {0x5, 0x3, 0xb, 0x7}, {0x0, 0x3, 0xa, 0x6}, {0x3, 0x5, 0x2, 0x4}, {0x1, 0x2, 0x0, 0x4}, {0x0, 0x4, 0x8, 0x2}], 0x10, 0x2}, 0x94) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r9, &(0x7f0000000c40)=ANY=[@ANYBLOB="a80106a355cb"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r4, 0x0, 0x7f, 0xe) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r12, 0x2004, 0x0) 30.022888359s ago: executing program 1 (id=99): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x504, &(0x7f0000019940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000540)=ANY=[], 0x9a, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mq_open(&(0x7f0000000480)='eth\x00', 0x1, 0x5, &(0x7f0000000900)={0xfffffffffffffff9, 0x0, 0xffff, 0xec3e}) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003904299375a7fea0e534e557c6bd", @ANYRES32=r6, @ANYBLOB="01980000000000001800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x8080) sendto$packet(r3, &(0x7f0000000640)="e8", 0x1, 0x40, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r8, @ANYBLOB="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"], 0x2ac}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000e80)=ANY=[@ANYBLOB="64020000", @ANYRES16=r8, @ANYBLOB="00012cbd7000ffdbdf2505000000240003800800010007000000080003000100000008000200ffffffff0800010004000000d00006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000a967ba7d19262f1989463766aa64095211a919df4500040067636d28616573290000000000000000000000000000000000000000000000001d000000a4a084798c7e9cf31fc352309133e65f7ab2d1aec77539d2eba7b57ae80000004700040067636d28616573290000000000000000000000000000000000000000000000001f000000d3a73d005178347b947a34ccdb6eb16cae695140dd2a3252bba20bd6ea7d3600e80005802c000280080002004400000008000400010000000800020006000000080001001300000008000400000000000800010075647000080001006574680007000100696200004400028008000300fd0000000800040001000000080004000200000008000300feffffff0800030003000000080003000100000008000400ff01000008000300ac06000008000100657468004c000280080002000b000000080001001e00000008000200000000000800020008000000080002000600000008000100140000000800010013000000080002000000000008000200020000000700010069620000740004803c0007800800040007000000080001001d0000000800030001000000080003000700000008000100160000000800010001000000080003000008000034000780080001000a00000008000400a307000008000300030000000800040002000000080001001a0000000800040005000000463933e0f997178d7b17db5b81912f6bc1dd5133679fb746cc43d7fbaf297cfa48e0d4fef1874b51b7dbb335d52acbcea158dd8bb11ffdc98e0f010efac28a076a48fb06f55b636542e7f5f0a8c0144bd10bb784a3ec30423b13f3ae13e242d27d40e071468dd508eccc7a6a49becc45bf3b171dc4a59e247fce7fb19b8e39379a5d0019e626c1"], 0x264}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r9, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0xfffffffffffffdac, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[], 0xa8}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) 28.957412146s ago: executing program 1 (id=109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) 28.775167268s ago: executing program 1 (id=115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2514000000080008007f000000080009000900000008000f006b0f00004ffd1400080000000800060003000000080010000000000008001500280b00000800030001000000fed9e688463558ca386cd94d74727ade75278e51af87fd0940323efd0f2956575a8c6c2ad9f23d833599fe6b49c180f75619e47f21401a0913d6db6f33d02833f70c272393cab1f53dda3c4af3b5f6ec56867db991d0ca7554e92eb522a7ec31eacc2ec7489c62eb0a21869e18153207bb6b6e50647e0eab800b72277ef1e739b2ba26e3b01336645edad7ea"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000005) creat(&(0x7f00000000c0)='./file0\x00', 0x1f) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES16=r5], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESHEX=r2, @ANYBLOB="00000000000080f3270012800a4976786c616e"], 0x50}}, 0x4000010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) pipe2(&(0x7f00000000c0), 0x80000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000100003043b90b568cc1a157a00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r9, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 28.749884788s ago: executing program 32 (id=115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2514000000080008007f000000080009000900000008000f006b0f00004ffd1400080000000800060003000000080010000000000008001500280b00000800030001000000fed9e688463558ca386cd94d74727ade75278e51af87fd0940323efd0f2956575a8c6c2ad9f23d833599fe6b49c180f75619e47f21401a0913d6db6f33d02833f70c272393cab1f53dda3c4af3b5f6ec56867db991d0ca7554e92eb522a7ec31eacc2ec7489c62eb0a21869e18153207bb6b6e50647e0eab800b72277ef1e739b2ba26e3b01336645edad7ea"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000005) creat(&(0x7f00000000c0)='./file0\x00', 0x1f) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES16=r5], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESHEX=r2, @ANYBLOB="00000000000080f3270012800a4976786c616e"], 0x50}}, 0x4000010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) pipe2(&(0x7f00000000c0), 0x80000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000100003043b90b568cc1a157a00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r9, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 4.488978009s ago: executing program 0 (id=505): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 4.401736619s ago: executing program 0 (id=507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) 4.378784969s ago: executing program 0 (id=508): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x0, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x403f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x5, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0xfffffffe, 0x5, 0x27e, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff5, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x3, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0xffe, 0xffffffff, 0x6, 0x3, 0xffffff01, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x5, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffeff, 0x89c3, 0x20000001, 0x3, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) (fail_nth: 8) 4.038901802s ago: executing program 0 (id=509): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b405000000000000611034000000000063012000000000009500000000000000f4c32bf3df05a034da1b7fdcf645f3580fe49be316bdb665f1b42ff7ef474df46c0f44ef6fb5e031f7cfef720e05af49fad256a74dbc05ae220102a88002814a88e2fac93f6bba2d4d44db49d45e449d31fa52c326486bc1c908dd9b372f7a455c9566ed5ee0a65f3909cfe1219a0a38b416dc55927f32ab452e0ccaf193c27af10a12c42ef8a3199d0fad0a9521094cc7acdcdff80231586f968fab531515e8aaaa1d4a225592ebf062bba60775d0b7daa8ba68c0cd0642ce3efca015362a7b63f629629e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x2, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r5 = gettid() tkill(r5, 0x1) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x1}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) readv(r0, &(0x7f0000000580)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)}, {0x0}], 0x7) 3.709793244s ago: executing program 0 (id=518): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x100, 0x4, 0x20}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0xfffffffffffffd87, './file0'}}, 0xfffffdab) 3.297839977s ago: executing program 0 (id=528): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b405000000000000611034000000000063012000000000009500000000000000f4c32bf3df05a034da1b7fdcf645f3580fe49be316bdb665f1b42ff7ef474df46c0f44ef6fb5e031f7cfef720e05af49fad256a74dbc05ae220102a88002814a88e2fac93f6bba2d4d44db49d45e449d31fa52c326486bc1c908dd9b372f7a455c9566ed5ee0a65f3909cfe1219a0a38b416dc55927f32ab452e0ccaf193c27af10a12c42ef8a3199d0fad0a9521094cc7acdcdff80231586f968fab531515e8aaaa1d4a225592ebf062bba60775d0b7daa8ba68c0cd0642ce3efca015362a7b63f629629e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x2, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r5 = gettid() tkill(r5, 0x1) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x1}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) readv(r0, &(0x7f0000000580)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)}, {0x0}], 0x7) 1.218970781s ago: executing program 4 (id=565): r0 = socket$tipc(0x1e, 0x5, 0x0) clock_gettime(0xfffffffffffffffc, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xf243beb744643be7}, 0x4008001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) statx(0xffffffffffffffff, 0x0, 0x400, 0x40, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x380, 0x3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x3}) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c1}, 0x4040880) mkdir(0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc0000419) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') bpf$PROG_LOAD(0x5, 0x0, 0x40) socket$kcm(0x2d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1.111225102s ago: executing program 2 (id=567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='cachefiles_ondemand_open\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRESOCT=r1, @ANYBLOB="d630a15bda2c1bdb204485f45c78724ca1f3fe2397a40c973fe034122111ad7bb868ad19ca6bcebc0baceb2392286904977d42494e11e8f952754142b09affbb273122c8b543c0a1cb709a65c54eefe2e10e60e6d219d67a42c32f848e5e12f9c496bf9c334938e92d3fa83617591dc48abbe51d57fb5da70d69466705d2d727", @ANYRESOCT=r3, @ANYRES32=r5, @ANYRESHEX=r2], 0x48) setrlimit(0x8, &(0x7f00000001c0)={0x5, 0x332}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x3c}}, 0x24008080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='ext4_request_inode\x00', r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073114100000000008510000002000000850000005600000095000810000000009500000500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) memfd_secret(0x80000) socket$inet_tcp(0x2, 0x1, 0x0) 1.048663973s ago: executing program 4 (id=569): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$eJzs3c9vVNUeAPDvnf6kfe9NIS/viQtpYgwkSksLGGJMhD0h+GPnqtJCkEIJrdEiiSXBjYlx48LElQvxv1ASt/4DLty4MiTEGBZiiIy5M3PL7XSmP6admTLz+SRXz7mXOefcyXz7vXPm3JkAetZ4+p9CxMGIuJ5EFHPH+qN6cLzy7x7+cetCuiVRKr39exK3PklW8m0l1f+PVh/8dzGSdOeBvvX9Li7fvDIzPz93o1qfXLp6fXJx+ebRy1dnLs1dmrs2/er0qZMnTp6aOraj8yvkymfvvP9h8bNz73779eNk6rtfziVxOp5Ux5aeV+1jh3bUc/qcjUep4lF+f/q8ntph23vFn8XsdfJUUrsj0y0n3UUuVl+PAxHx/yhGX+5VX4xP3+zo4ICWKiWrObIE9JqkqcAf3v2BAG2WXQdk7+3rvQ9er9DKSxKgTR6cqUwAVGJ/ICKy+O+vzA3GcHluYORhsmaeJ4mInc3MVaR9/PTjuTvpFg3m4YDWWLmdzffV5v+kHJtjMVyujTwsrIn/Qm5L97/VZP+VvzFP5xzFP7TPyu2IeK6a/wdjW/E/nov/9+q2vvknaOM1dfEPAAAAAAAAzbt3JiJeqbf+r7C6/mewzvqf0Yg4vQv9b/75X+F+tZDsQndAzoMzEa/XXf+7usZ3rK9a+3d5PcBAcvHy/NyxiPhPRByJgaG0PlXTbn6F8NHPD3zVqP/8+r90S/vP1gJWW7rfX7OMYHZmaWan5w1EPLgd8Xx5/e+h6p6163/S/J/Uyf9pfF/fYh8HXrp7vtGxzeMfaJXSNxGH6+b/p5fbycbfzzFZvh6YzK4K1nvh4y++b9S/+IfOSfP/yMbxP5Tkv69ncXvtD0bE8eX+UqPjzV7/Dybv9GXtpz6aWVq6MRUxmJxdv396e2OGbpXFQxYvafwfeXHj+b/V6/9cHO6LiJUt9vm/J6O/Njom/0PnpPE/u3H+H1ub/7dfmL479kOj/s9vKf+fKOf0I9U95v8gb/33cWw1QDsyXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4xhUi4l+RFCZWy4XCxETEaET8N0YK8wuLSy9fXPjg2mx6rPz7/4Xsl36LlXqS/f7/WK4+XVM/HhH7I+LLvn3l+sSFhfnZTp88AAAAAAAAAAAAAAAAAAAA7BGj5Xv+S0O19/+nfuvr9OiAVkpjPvqrFfEOvae/6UeWhnZ1IEDbNR//wLOucfzXpveBlo8FaK/G8f/ocamsrcMB2sj1P/SuJuPfxwXQBeR/6FVbnNMbbvU4gE6Q/wEAAAAAoKvsP3Tv5yQiVl7bV95Sg9VjFvtDdyt0egBAx1jDC72rf6HTIwA6xXt8IFkt/VX3Zv/Gq/+T1gwIAAAAAAAAAAAAAFjn8EH3/0Ov2vj+f2v7oZttcP9/veD3dQHQRRr/9IfcD93Oe3zoaaXiFrK9+/8BAAAAAAAAAAAAYA8YvnllZn5+7sbi8rNXeGPXW85uh27h4Fdm9sJTt7uFJ61peSAi9sYJtrsw2PrX4WaFDv5NAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1vgnAAD//48wHak=") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x144936a431e9d122}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x5, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x2, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x9, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x20000, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x1000, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0x7, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x8001, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x0, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0xd0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0xc, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000000240)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x2, '\x00', r4, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x10000}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x1170, 0x1398, 0x238, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x0, 0xd, 0x5}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x3ff}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'veth1_vlan\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xad84, 0x4, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) setresuid(0x0, 0xee00, 0x0) unshare(0x2a060400) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000180)={0x32, @rand_addr=0x64010100, 0x4e21, 0x0, 'lc\x00', 0x4, 0x3, 0x18}, 0x2c) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) bind$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000f60000000000000000000000000073ff2e40ced9144f5edfda4136de59a933b3cd1b5f4a1cf53f72eacf7df9d2ad1bb1f6db3358d6dfb9ca0e959bef0b1dd036728ed631f54eebe11cd8006949aa6c6e618d75b86c7819a64bc102687dfc5eae4e95b15d612b04fc2ef41f0c2195b9249dc858b9e6455f123d3db619461fc9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000160000000000000000000000850000002000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080002000000850000008200"/66], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc53c06d2626cc3f0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r13, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 971.079393ms ago: executing program 4 (id=571): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000140)=0x1, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) read(r0, &(0x7f0000002340)=""/232, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local, @in6=@private0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3e6432650d9b1f69) readlink(&(0x7f0000000480)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) 969.915513ms ago: executing program 5 (id=572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x4, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x8000004, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x8000, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x7fd3, 0x1, 0x0, 0x10, 0x0, 0x3, 0x7, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffff7, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x6, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0xffffffff, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x19, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x5, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x0, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x2, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0x5, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x10001, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0x11, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r8, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)={0x7c, r8, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x50, 0xa8, @random="402c88af5bb1887baea44801ab0b343687e9dd8833a6a9c6e49de28b3f10944dd546b0059af0a0c258a7b25989a7f89c6d2e0fb47f82957f0dfc48020605abc626197235c2ceeb742a065525"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000dc}, 0x4000) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=ANY=[@ANYBLOB="1c000000c0585f543f7f7ca1c376aaf7aa91d2ff5ed0fda9a6defd879b24182a0f756ad037072203402ad1d859b48a9bd0e8562e71d6edd6dd76df863fcebf7f02dde5226ec4626ab6e79a253b67faa1f8f95a49c9aaca48e0e5013b", @ANYRES16=r9, @ANYBLOB="2b0826bd7000fedbdf25030000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wpan4\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r12) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="01002bbd7000fddbdf230800000008000300", @ANYRES32=r15], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000016c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="bc020000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r15, @ANYBLOB="0c0006000000000000000000"], 0x2bc}}, 0x20000800) r16 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r17 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r17, 0x5456, &(0x7f00000000c0)={0x800, 0x7, 0x7, 0x9ec, 0x3, "7cb33ba36de945dd953a569f4627e9d2774aef"}) ioctl$SG_SET_RESERVED_SIZE(r16, 0x2275, &(0x7f0000000040)) 940.848444ms ago: executing program 3 (id=574): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x11, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x8, 0x50, &(0x7f00000006c0)=""/80, 0x41100, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000800)=[{0x1, 0x2, 0x9, 0x3}, {0x0, 0x4, 0x2, 0x4}, {0x0, 0x3, 0x4, 0x2}, {0x3, 0x2, 0x4, 0x7}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xef5600, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000140)='GPL\x00', 0x80, 0xc6, &(0x7f0000000180)=""/198, 0x41000, 0x4c, '\x00', r1, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0xa, &(0x7f00000009c0)=[r3], &(0x7f0000000a00)=[{0x4, 0x4, 0x1, 0xe}, {0x2, 0x5, 0x6, 0x5}, {0x3, 0x1, 0x8, 0x9}, {0x5, 0x3, 0x8, 0xa}, {0x0, 0x4, 0x7, 0x8}, {0x2, 0x2, 0x4, 0x6}, {0x1, 0x3, 0x8, 0x5}, {0x1, 0x29, 0xe, 0x6}, {0x4, 0x5, 0x0, 0x4}, {0x5, 0x1, 0xe, 0x9}], 0x10, 0x29f}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000bc0)={0x1, 'nicvf0\x00', {}, 0x400}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000001f40)={&(0x7f0000000c00)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000000c40)="a91d361303fc71d15046a11f961e2c03884231a8b0c962b57b54dd468092a00df5f05faba15d", 0x26}, {&(0x7f0000000c80)="cde747f8fc63b5012b752a46b127cf6cf02a90317caca7622d5b821b6eb57e7e8851b17c022cae5fac263df68348a078cae591879c0335e29e5ce0e12e944e276da6cd963193617037c2c5a847f3f97fab7eee93beafb33a8f596d4b2ed4c14434a8a5e251fa0069642ce6658dd7ff5efcb9994336c3202f44c09bad11ecc4", 0x7f}, {&(0x7f0000000d00)="e467b1c39f312540b6e1b3601928e6840a0a304788ec65da677ce658f36e8bceef04c624", 0x24}, {&(0x7f0000000d40)="7f99d6ca7d8094b3d4e8ae351bd522288157147dfe642dc5a4b882bb4f1ac3636a08a595add34e9c8dfca6651d2219796921560f722d293b1c913c4e6db2a20e364d595e786ccf35f0edcf527a4416ce9421e440fa7b6ce9f41f631e9282c94037de1b46119b13967e706b3607", 0x6d}, {&(0x7f0000000dc0)="48d41493414cd3f030ebda58ad75ce9cc5ab5a924e1cdcf96fb58a1ef3b6e36a30a0c17f1ef001942c1bf5a79dab575fa144b20373a90b85fcf24f86dfa7e2575088a85f6a8210509a9e9751b94da332ffaf56641ae926d58df96270aede2ff7b8d9305db74e3a489801e07068aba04f6773e74c8a59bec10dfcf41971", 0x7d}, {&(0x7f0000000e40)="3da3cb62598b9330100b978637beebf42b600334ed6c9ad701587c0f6a9d3c658bee50cf7534373a730c38183f45cd4e2a9b7ba957a56676d73eb1ab4f83d4f4423ced8ad47a52c6deb0eedd058342ed9c5ffb107dab60635914d2ed2c5d1a2ee1ae673e7f4b6e14f30a213b6ee4b436b7fbf812bd033a43b4810be7fa4af709130a59be5de896080d52882c95fd2a2d03ede773b1ae27094e53d9197e569305afc8a7cb649f627e1905d3b7227bf91512e06a23359a45dfdaacae96b4939cb70a43a1182ef276f2cdf4eeb23ce1d257829739cf2fd7723ae0cb1a43f91b7bfeb41b1e0be29971788609fb8f1e0d8a5534ae5c78fe2f1920d91f9ee3a54b4afc3049a27c9bb1c6648ea42d887ae2d54fa2e6ebbf5bd937121ea4c9463a724e4462768fd7f532a1437ce3a97610d301684cf07c28ced330f0d4b743fc386e8a8ee9d8ad676e35788b5a3ef0744b80a915ab23f04da3fc61d7d0e8e03665f2e91d5519455304eb372e535edbf672daca99c8b878e4be13fe42fda1403c10910c368ecb78f676ebc8defb373d5b01bead6111b9a00692ac842304b3b7a54fae77944f5afc59a0dbe9439b8aa146cb2165c9520927203833d4526be8574efb38498d37f721659fa18439fe3ecb40187dd3d3952689b2b34288f563382bf5d7085f1b2c962a7b1b02c7a326bb23c8b9c7b840aa0fad6c27bf92e02e1028ee450278bbf6f62e7b6900c4453bcfc63b8ffdaaeb40e34c1525a637c356dd2b0d2f5d3a26d74b4655426b29d1b0b6f58294dda44df4b8dba9c11c072e3cdf5458553fcbba417c4e3377091cc9f2b428aca7d8bdf101d12437c12cf686874f586212d75ee7b877864ad9372d72e2676f18f451e6147e584e33bf9ec33887cf6d4594ae4056881988ee19f54e724f36b97f81dde037d20975d09cdd619f1dade28dded5b3f09eff437481e57263d3f390bc29929b13f34a6a7a05003f43586d78cea4e6504777ba47a76ca648c75d8d23c632b06f00882f0adf68d9e438bb0a25c68a0f86e7deeee4e79a494a9647eb65c0f202366208130adc29430c15f7ffd4a21e4dcc670952da120c8a3dabe602c84a6a3e178b9c60196315aedf9ff2ea657acf2bb4b52fe2fb7b089b9904b8449067ee02b4bcbd111b752db4a60a9ccbf9ef9e10dc586912c4bd4232958e38376e7265e095ff689ef54d63902af6e89198cdf8f2d5ee3aa34dc0e88890842ab5d7d245e72601cda437e12410494b16abaea98a4296498b0d2f436561e1401c30467d1996168d47044156c24ae6222a9332f2ed0c6bca0f7f71e3051468bcde0d212e0d87eb5e148f4ce771e2bc434cb429f6af13b0f02d399d6f663d2f92a13464eaa96e7f19fff09f05ba6ae945689ec933583fe7fdcc002680ca30b8e070f9652684387098a17ef576941f6d4e49fe91b56e699785bc056daab71387a7a09946a0c384161f7131721345e0dca9943e50c483b4cc4e82bdc5b90499e8deddbe2a7df7a2ff4adbb994aebe9190fc3de33a686f4e1ee053e88c3777f458cdc6c093b3b756518668167fec7dd513c39f6126b475de9b8bf5971a5e4d27d665c5afcc27cba2de16d187b97266204be66256c3072f7f0dfe4c13f9794d4de1fa020c2e43872e908b0166b6f0606d901e1f70899bbde45058099638b860de13d9d6523fdacbabfd6d9b34b6320ffb9bf00b367034056b6ea4d69ad9251f9e559eaabbcc1e4795282e487b6c5d0e2976b6620f79f899e9c5083287deb8fb08dd387b221d4b113877b90741d0c25d2bd0d58d538644fc37280f97e5f3765b07824042dabbba470a7d8acf278073abf656df151967ea8613cb8ed9b8d8deba8ea83a36b8058374f2b4547e8c9c2d93e9d2a3e90284b58d7e89dd38c0a12ff80927d8e8a2a42d6aa6b026f45dc4b67a830a50cd9a62b20083be5bd843298b76bb81fac567ab90f38c6937ec0ffa2f0c2cc7c9502b2a9c5380580df8cc03c10e0024032bf3beb209e43bca0f6888272ef4587ec6fbfccc536387f99ec524f823f5fbc8568ee3ee7b52e4b9f7fee39b498ad5fc6b6e2037cca19a3811e9f49fba9f80c6a5e309b51c2c6c3c480d7cfd3669e96b4a58655760dedfb33b78bfd2bef06992e7a88d928fb0760c0d74dea002e22a07cbae140b577d0387387924d6d7c6e8afe3af8193cce7963d9ee4cc6459184acef46bd06acef7faabc46d97e6b1db88f81479041159062dcb7f78be9349a3d411d900ec5dc25bf08155a40d665e4bc9439c4f2909edfd172b5c2d36354e665870d679581297012b6d2c62077bc9012babe9143a263617a22f8c4b566f6c53641539162b2e45bfdbebf4b2c9ffc9f50ba4877aa9223e52ca33c68d7bc1539ffd61e7655b2d0027c58eb39c9f001b86c21e3e59afb322a4eaef101db1a1ce37b89a297c4358cd16deda50115d30c320f09bab3896ebdaaab86bc0cb5b5bbf0686e31c68ea39342a2bb9504186ca4b1864ec78789cec85f069e01af16920404f0e890370444a77df0880a2452c3f7f15bc015a0b88e0b755eb9ebcefab34d272b6f4e653e487ff3a8b6cd77709ec02aeb6f58ac1891800f625432631cba50f2791eb078d729dfa1e0e5f535d31ba9c27dc5033f64bfd963a14f8c226676a922f20579623932541160cae1050a4923dd1a69a4b92349f1d148cfa95acd5b2721fe140c451fec13a02a67ce7652a10fd148e9bcd3e99a021fa13597891df5ce89c98f4a70c3036a0c83003f367bc74ca7a77e5048b92c6d4b04eb9eb77521a8426d78fb9a00caf36e0ffc23239a9285c4f317e02d50d36e5364ecbea4a416a5d8be940c6d5d4e96b32b7b037c38c695ce309b1d7da1af41d70f43b21d968b4bea4962ae77445ef4f0de907a63eea8d153b176418e65fbf9d5b98007f85e176c9541127707a435481518dfd87b18e66d453395cd7ef0900b36b77d37954754055ec1a014eef18eaf6dfa961bce6048a9679ba79939420014d712a1bd432fe349dc72fa8fe4802a27b99c14d71e7fc3f317bde040617b65f0dd753ab92ddb4fdaa88a09b061bfc029717bf51672d93868dfb17f5bac96258c767cd25f5a6f974b4d125679cb99c5cfc127b69fe85f83ea7b2df3543d0151e34b7f38d312a9d0bda22eb4e5f5c9e29c8ff1e7b1cf3f31b1bafd1c0a3f3c643c6d9108c0e89a8167bc1646a942d0452f5c122437db3490b5f683071bb6ff7123c35667d3eb384df095945f11632081a1be2fea8d7c0d9843b80c2d584972768943afdfa2558e0b8c4ced641e15b3f2cd67c35e811dcb5a596b9efbd5f07661dfe39bd4dc8e30c4e6c5a3655c4c2283e2adf24c715001ec058bad8927aeadb9eda5fc0c353250644d9a403bdead7de97e156f2cd6100717e495ac989b38628b9f766387e3c1c1ccfb2e76fc457ea9eb69a99442b229cc9b7ab617d2a5c8f33fdf8bd5be68233d2a2ae1fe61e832c665d76d6c721832660959b9021585de7b73396110a3e8f66f08b6ec8097558d6f65734416603ddd5bddbdd80bc36e093fcbb3e55f9b428f2a5653afdf09612a2b400456d56f8f1389aa62a095d32a92ece264c091a9ad45d0f32a7f75dd77deba698db6c395ae5fa274f5a803f497ca9f9dccb6a9cea1f29da5eab12107b7591465e4994fd3033cf803d08f64dd817ef92256225471f335347133080fab69233f1d150b5eaf511544d6832750b0d2fdfb646ae1f1a45a07eb4dd64efe4c007bfda2bacc46766023db31c80f1091ca449977cf37956715242773ad25b823904f6daaa0b8564c02fca83f022eb4347b461eb5221116cbe7f97dd1fa3c563cb1a757a2adca21e17cd87bd681c689979b3a32eb4cfa1f19b53815afe5cca3820a15f8a33cd585e7b268ca521064ccc108d0f36042f88ecf9e091d268637d1cc251dc9693d3fea661e1bb79336052f2aa5f74fa7c6813924b9eeaad4e784f70f9ec468aca38c8731920cc9bb7e4862da0a89309da50cef96a858206017245ce9ea61bd2c1dbeae5b9dd1344f60e7dd3b46f3cd40d3859200bb9dce5fbfe6c60e1061c4187e68468c4d37c5ea67b60f1b5268a462d07b63328a8963456c27767224038fad128adc7f1067a03f05e27c468572f276e65a9be8cbee3f677eb5732ea78e4766ef82962684e08e70ef4c219e2406a14d9e4c8d32ca33c18ef4a58400809dd9f153246d982be9d5835d97b58ddb6f51354899c66713dd4cb960d20258351923b100bc16e529cc4ffa4582554eca6ca19829a05d69a98425b5709751124fa2cc5d09d73b30e95aa487ecae1a8795285da8f512ee42994b45e2753467176d7c6d271522f341572ff8048df9aa8cee0a37921db4206027f11570a7fedfc86779fea3e1bb6d2d63f425de3822f7cae32a2d71017d59f0eab83787ff3fe14e556243d1a7a8e51124454820f055b9f0a0fd4428e91011f3c21e3af059ed8386ea0cc22219940111823cfe58fd601c1e4cb3a14c63cc597e71ae1d8af026ea33af99d8d700263d9f25b3e20fe6d382f4ad90a09d9933f4995bb951b188eee79ac15313c648fcfbde481f1a44a65566670e8bf234e344c8c7901737abd24be3c5f9d9021bf19f10369aff0f04c87173ccacde90e2f896233c09513fed200da5f58e380742408fec605651b327d434dbdc685e67ee7e20a3133a672caec442dadc2eeccafb6317046b2b0511d7b8fecc02419067ba21244ca8897cdfddd1318ba4a2e6bd6467a3abe2c8f24335d564cfd8995ada419c607afb36812abc1619ff2cd8bc936aa0ebd3781c924b6d9d2e6a9745a51a0a62e0ddaeffdf1a3fa5f76558b509a9f7a56041a4009bd9a938ccb79e102aaa672f093ab969b2ad158d5a59f67ff9efcf0b0217e75fa5fd7e72cd6221277ceabc6c9236e93ce413a1e6bce1a36661b92f05efb041c12193c97797fa39f365c5f441bc2f8667ab64767c2cc79a7a9e2914cfbfc3d93f40463d9e4e927938ec4fe8769d87ec14ca668dca3ba02b4ae44570658ecca82c97d21f29519bca0c2f75959eddb2a6a417e0b7cd68455c6a325fbb12ebb8cf0d1ffa8a3689c0b63b80221395398e183867ce82b9bb57012b6551686648196674c977256026704601447ed704c50d4576eeb7c3cd36870f8b65b7e418d7a16455db19076a209184453655887d8f3e7cc35284c0a20435c813a2dc2f2d562234def7d3a82940844352fc9bb7bbd5d079a5160c71a818951f181ece8c229c26aead9f80d53875153d209d6af13c650302af873dfcbe640bc7936b4e826541b35b3e85150407a0bd9290ba8aa24f17e382500c11fda6fb2ee446c597ef9852cdb1b3560451e6883b045e2bda8cd1193e35874ccb36647872320311c3501ea43cbda006ca5d614d304dcbfb71deb45a2818618e495afe10ec6d2d2ff5ce828aac0ab5be6c970d33df43d85c67330fdbb358d634cbccd61a4fba8f3d9c23b2b5601917477c86f42d87f3dfbc584a0e898422c7a4b6a723162bfe8e1896cf56e12563a73a168bf89912ef6de3543604bbfaebdb8279dd4a34fcb0711031c8af71fa6971e53a3dbf6e1687687b5cfd536a0ebba1aec5b4d9b4e5273a1061035b57c8996be84be1e677e12e79f2506aecad975d2fd84b96ff2791edf9b4081bed0fdd1fa4eaf4cb1b18fb416cad65a16332f0b33a58b4bb0b6cf9729c4aa2300280cbe41e39a54aca6e994f0ee13cc6e8c30c3774607b91ac407ebb0e3deae59ef9008ddb84bb4e03c6a9a9aefdce2ff2459d7991b3b8b11a52e0a6bf752a77ce74abe94", 0x1000}], 0x6, &(0x7f0000001ec0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2f23fbf7}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xd5, 0x0, 0x3, [0x1, 0x9, 0x9, 0xfffffffc, 0x6, 0x4]}]}}}], 0x48}, 0x800) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000001f80)={0x9, 0x8}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001fc0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002000)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000002040)={r7, 0x2244f121}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)=@mpls_newroute={0x30, 0x18, 0x100, 0x70bd29, 0x25dfdbfb, {0x1c, 0x10, 0x0, 0x3, 0x2, 0x2, 0xfe, 0x6}, [@RTA_MULTIPATH={0xc, 0x9, {0x5, 0x1a, 0x2, r1}}, @RTA_DST={0x8, 0x1, {0x6}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$inet_sctp(r6, &(0x7f00000035c0)={&(0x7f0000002180)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000003500)=[{&(0x7f00000021c0)="f03f4c1f0f52c1d5813c230b049144d87f81eff07d391cdd978f0ae32d516612cb792d2ca96d58a75dcc6f67c6236a17a5dc75", 0x33}, {&(0x7f0000002200)="a4efe4503e24cb99f98282bdff74c07488", 0x11}, {&(0x7f0000002240)}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000003280)="9b5cbcb60b1add2f8581a8fc9053dd084c69f88f9edad401560e598870362429d6d060ee73d3cdd9059e68711b74e30019ab6eb4495566233b562d12caee67cd9307c9c661539db178ad77ebe65f75392f4413b0f15fdd0ca5f2f645419c699b394150c551c6", 0x66}, {&(0x7f0000003300)="7435e5afb439ca6bf60cfee318e01946ef77f1fbee328a9b6a28e9a6a144520e9ce9a743fb2ff0f1245386090303dfe24f7f4c66822cd4dfd8a9f2f3d1e2ad0d857fbcaa5fc37d1fd75a54ccacb34ef9d361ebb6ce4e878c40cf87e850ac47617fb8f17462cfdc22f8fac6e83d0433b21bae957c7677f93dd5b1f3bc", 0x7c}, {&(0x7f0000003380)="ac08b56e7c3d79529640ca63e73a0031dba50d705a96ef062c969da0bdfea5573f00bcb7822e3977e50979df2891f2e19899ef8dd7c8e54c8ed78a7d56e9d002be702a6b4cc378b54933a4a587c58e9a66df4257da0c2b53088606f72b365f6b0bbaf0f09ddfacdc8977740c646db6ad7954986c72777ec24f3d3917c6123f46bbd888769fc05baa7ba76864f45f61f9b763791531745acdacd408a845e87de237b6ae5fb211d78cb3b7bf2276c8242c697841776b22728c73207644d02de473c6632e3980a05ea0feed9ae907fca468ca99be24ccbaccaf933d3931809a349c503e9dae40", 0xe5}, {&(0x7f0000003480)="d40262a466b669218d818962530c61822af3ae55f99bfbca7198458bd2b1494a8d5c58086db8ec5ea360de0ed79d8a7159a13ae8479660c20abb627577bb64a72ddfdf732cdf9a8fdcbdd4a568eef813f7603126575d73397f71a834fc237400c70fb4", 0x63}], 0x8, &(0x7f0000003580)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}], 0x40, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x1) socketpair(0x3, 0x5, 0x3, &(0x7f0000003740)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket(0xf, 0x4, 0x7688) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x20, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4040040) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000003880)={0x6, 0x1, 0x4, 0x81, r7}, &(0x7f00000038c0)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000003900), &(0x7f0000003940)=0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000003980), r3) setsockopt$sock_void(r11, 0x1, 0x1b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r12, 0x84, 0x17, &(0x7f00000039c0)={r8, 0x9, 0xa1, "c55d9f45da78aea1b6687ef97f13b3885d17177329556659f9f568e20889e28e2dc1f2f1724dd69f54a2abdf0a9e977ae3f5f562ed3248303195b83f4ab3a84b11a56e845615b0e232d2310cae488105c743eb313a26e2aa73ff03438e1e62d06ad772f0ffee94efd00f6f731dc249e53d6f4141492a664c6c9f8316bd2055487eb73093a247e8423b4aaee782e577a0ca9735993419e7de342917f349a0cd7e2d"}, 0xa9) setsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000003a80)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x8) read(r6, &(0x7f0000003ac0)=""/244, 0xf4) setsockopt$inet_buf(r5, 0x0, 0x2f, &(0x7f0000003bc0)="743f08a851c17001048b81d97cb38453a3a77f53ac4c66a6631e5798ba9ab30017ab51bc30d278192ea7f3fc7396047502269c1656cc178b4c8714d1a7f3ca915e49c37209fc9f402eaf1088b1242b69f014439b0e261f1fcdf4ade290328d7a4a0ac3e6df0d1a631094d626ea6a84783e8f59eaa0c558a64c4c9400462d12807b50fbb473fc89df9380c0af94774a07b1535427c5744a72dff6448566f820c7d5feebb90050880381d2c9a8d001ffa09430121020eec772f04e229f2fd8544523fcc9cdb65a2ec0", 0xc8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 879.613434ms ago: executing program 5 (id=575): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x4000006, 0x2, 0x40}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) io_getevents(0x0, 0x4, 0x3, &(0x7f00000001c0)=[{}, {}, {}], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 879.055884ms ago: executing program 3 (id=576): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 815.717184ms ago: executing program 5 (id=577): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 767.822385ms ago: executing program 3 (id=578): ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000000)={0x80}) syz_open_dev$evdev(&(0x7f0000000200), 0xffffffffffff8a3e, 0x80002) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="080000000091c100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r2, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x4c67f84eea96e6c7, 0x5, 0x8, 0x6ed8, 0x50, r6, 0x4, '\x00', 0x0, r6, 0x0, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x1d, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, [@ldst={0x2, 0x3, 0x3, 0x3, 0x0, 0x30, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}, @alu={0x4, 0x1, 0x8, 0x2, 0xa, 0x6, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, @fallback=0x36, r6, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x7, &(0x7f0000000740)=[r5, r0, r2, r0, 0xffffffffffffffff, r0, r7, r5, r8, r0], &(0x7f0000000780)=[{0x1, 0x2, 0x7, 0xa}, {0x2, 0x5, 0x8, 0xc}, {0x5, 0x3, 0xb, 0x7}, {0x0, 0x3, 0xa, 0x6}, {0x3, 0x5, 0x2, 0x4}, {0x1, 0x2, 0x0, 0x4}, {0x0, 0x4, 0x8, 0x2}], 0x10, 0x2}, 0x94) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r9, &(0x7f0000000c40)=ANY=[@ANYBLOB="a80106a355cb"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r4, 0x0, 0x7f, 0xe) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r12, 0x2004, 0x0) 741.790515ms ago: executing program 5 (id=579): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) 657.765246ms ago: executing program 5 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r6, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x1800, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x4c, r8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 455.608757ms ago: executing program 5 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2514000000080008007f000000080009000900000008000f006b0f00004ffd1400080000000800060003000000080010000000000008001500280b00000800030001000000fed9e688463558ca386cd94d74727ade75278e51af87fd0940323efd0f2956575a8c6c2ad9f23d833599fe6b49c180f75619e47f21401a0913d6db6f33d02833f70c272393cab1f53dda3c4af3b5f6ec56867db991d0ca7554e92eb522a7ec31eacc2ec7489c62eb0a21869e18153207bb6b6e50647e0eab800b72277ef1e739b2ba26e3b01336645edad7ea"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000005) creat(&(0x7f00000000c0)='./file0\x00', 0x1f) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES16=r5], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESHEX=r2, @ANYBLOB="00000000000080f3270012800a4976786c616e000000180000"], 0x50}}, 0x4000010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000100003043b90b568cc1a157a00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r9, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 209.843169ms ago: executing program 2 (id=582): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES8=0x0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000000000800800000", @ANYBLOB="95af733451a9cc903af55706b88070740ae01b0fe6bf2b1a1757742ba47ca99753cc258fbdb5d9890014d0f54c4d50f0dd2c1399d398e3d7db7a47374cb5be8f6ff809fdcfdb3e3fdab92a25fa771465fc554b459b9b8fdf98ef7bedda6a075ebdf72a404c", @ANYRESDEC=r0], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 188.638309ms ago: executing program 3 (id=583): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close(r0) 178.029689ms ago: executing program 2 (id=584): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (fail_nth: 1) 126.433839ms ago: executing program 2 (id=585): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu==-!|!') 125.567279ms ago: executing program 4 (id=586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r7}, 0xc) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f00000002c0)=0xd, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0x1000000000000}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8000, 0x81}) close_range(r10, 0xffffffffffffffff, 0x0) fcntl$notify(r2, 0x402, 0x21) write$binfmt_elf64(r10, &(0x7f0000000500)=ANY=[], 0x40) 120.022309ms ago: executing program 3 (id=587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu==-!|!') 78.82941ms ago: executing program 2 (id=588): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 46.86305ms ago: executing program 2 (id=589): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5d2, &(0x7f00000005c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1e}, 0x94) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000000)=@sg0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x44) 12.42871ms ago: executing program 4 (id=590): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11.72118ms ago: executing program 3 (id=591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000640)='console\x00', r4}, 0x18) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x40000003}, 0x1c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(r7, &(0x7f0000000380)="7d00d33e2c07c98c10f925d8ba72114b216e9b752386324d8c2ac55d04ff89e753f4bbd9558b9733b6bf088d8996b09f8c7ce60432fb106d20efb4f64571a0cabfcb8a656efbf6d26a0e0a3ac4123f9dde237c288cec84fa9235", 0x5a, 0x4, &(0x7f0000000300)={0xa, 0x4e23, 0x3, @local, 0x1}, 0x1c) syz_emit_ethernet(0x34, &(0x7f00000004c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@arp={0x806, @generic={0x100, 0x6004, 0x6, 0x7, 0x8, @empty, "a3493fe438ec20", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, "4a4ec42de06db4a52e91f4"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000610025484008851a670000000000000000009500000000000000c7d6eba58d285d94f2f2b99ba87c90b05b8e864eea586d19521fe55692cda05fda49617076fd97b31eee1f79701bcb47246f78ec1c4baf60188193c810d922c6bffd59f57aff"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) lsm_list_modules(0x0, 0x0, 0x0) 0s ago: executing program 4 (id=592): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x8000000) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.415979][ T3313] team0: Port device team_slave_0 added [ 33.432746][ T3318] team0: Port device team_slave_1 added [ 33.439570][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.449352][ T3313] team0: Port device team_slave_1 added [ 33.461796][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.473259][ T3314] hsr_slave_0: entered promiscuous mode [ 33.479344][ T3314] hsr_slave_1: entered promiscuous mode [ 33.506131][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.520466][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.527445][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.553543][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.565051][ T3324] team0: Port device team_slave_0 added [ 33.580591][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.587730][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.613691][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.625232][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.632265][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.658198][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.669468][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.676434][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.702380][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.713804][ T3324] team0: Port device team_slave_1 added [ 33.745686][ T3325] team0: Port device team_slave_0 added [ 33.752596][ T3325] team0: Port device team_slave_1 added [ 33.779741][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.786799][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.812756][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.826063][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.833075][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.859060][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.880259][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.887226][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.913376][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.929582][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.936562][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.962502][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.987562][ T3318] hsr_slave_0: entered promiscuous mode [ 33.993651][ T3318] hsr_slave_1: entered promiscuous mode [ 33.999588][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 34.005356][ T3318] Cannot create hsr debugfs directory [ 34.022963][ T3313] hsr_slave_0: entered promiscuous mode [ 34.028979][ T3313] hsr_slave_1: entered promiscuous mode [ 34.034866][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 34.040888][ T3313] Cannot create hsr debugfs directory [ 34.062161][ T3325] hsr_slave_0: entered promiscuous mode [ 34.068623][ T3325] hsr_slave_1: entered promiscuous mode [ 34.074438][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 34.080227][ T3325] Cannot create hsr debugfs directory [ 34.133682][ T3324] hsr_slave_0: entered promiscuous mode [ 34.139797][ T3324] hsr_slave_1: entered promiscuous mode [ 34.145561][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 34.151466][ T3324] Cannot create hsr debugfs directory [ 34.286312][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.306802][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.318060][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.331554][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.355438][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.368353][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.381200][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.392811][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.420297][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.430009][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.438935][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.448815][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.499421][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.506396][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.520620][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.537076][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.546066][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.555096][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.568604][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.580947][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.589803][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.606683][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.630381][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.637556][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.646560][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.653670][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.673506][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.725964][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.750196][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.771770][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.778911][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.792565][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.799768][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.810346][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.824683][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.836460][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.852648][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.863080][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.875484][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.885775][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.899675][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.906746][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.931892][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.939015][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.948189][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.955271][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.965193][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.972401][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.988509][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.034408][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.041602][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.064377][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.071629][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.104381][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.124793][ T3325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.135262][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.151464][ T3314] veth0_vlan: entered promiscuous mode [ 35.170556][ T3314] veth1_vlan: entered promiscuous mode [ 35.195623][ T3314] veth0_macvtap: entered promiscuous mode [ 35.222803][ T3314] veth1_macvtap: entered promiscuous mode [ 35.232856][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.267184][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.284426][ T3318] veth0_vlan: entered promiscuous mode [ 35.299815][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.325249][ T364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.334447][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 35.334461][ T29] audit: type=1400 audit(1761717209.604:81): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.DQmuGn/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.348608][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.373820][ T29] audit: type=1400 audit(1761717209.634:82): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.396073][ T29] audit: type=1400 audit(1761717209.634:83): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.DQmuGn/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.406306][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.421429][ T29] audit: type=1400 audit(1761717209.634:84): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.431496][ T3318] veth1_vlan: entered promiscuous mode [ 35.450154][ T29] audit: type=1400 audit(1761717209.634:85): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.DQmuGn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.467647][ T3318] veth0_macvtap: entered promiscuous mode [ 35.482231][ T29] audit: type=1400 audit(1761717209.634:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.DQmuGn/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 35.490170][ T3318] veth1_macvtap: entered promiscuous mode [ 35.515209][ T29] audit: type=1400 audit(1761717209.644:87): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.523147][ T342] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.542986][ T29] audit: type=1400 audit(1761717209.644:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.571993][ T29] audit: type=1400 audit(1761717209.644:89): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=3959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 35.600871][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.618517][ T342] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.619814][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.627415][ T342] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.664001][ T29] audit: type=1400 audit(1761717209.934:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.691960][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.714187][ T319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.723956][ T319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.751698][ T342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.769794][ T342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.824788][ T3324] veth0_vlan: entered promiscuous mode [ 35.854915][ T3325] veth0_vlan: entered promiscuous mode [ 35.862894][ T3324] veth1_vlan: entered promiscuous mode [ 35.871112][ T3313] veth0_vlan: entered promiscuous mode [ 35.879261][ T3325] veth1_vlan: entered promiscuous mode [ 35.902958][ T3313] veth1_vlan: entered promiscuous mode [ 35.925881][ T3473] loop1: detected capacity change from 0 to 4096 [ 35.947152][ T3325] veth0_macvtap: entered promiscuous mode [ 35.955295][ T3473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.957777][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 36.002179][ T3324] veth0_macvtap: entered promiscuous mode [ 36.010374][ T3325] veth1_macvtap: entered promiscuous mode [ 36.024274][ T3324] veth1_macvtap: entered promiscuous mode [ 36.049349][ T3313] veth0_macvtap: entered promiscuous mode [ 36.056906][ T3313] veth1_macvtap: entered promiscuous mode [ 36.078866][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.094581][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.106384][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.124458][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.137960][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.146337][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.162693][ T319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.186947][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.201246][ T319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.245088][ T319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.279148][ T319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.318176][ T319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.349321][ T319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.371867][ T3490] loop1: detected capacity change from 0 to 8192 [ 36.379452][ T319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.391257][ T3490] ======================================================= [ 36.391257][ T3490] WARNING: The mand mount option has been deprecated and [ 36.391257][ T3490] and is ignored by this kernel. Remove the mand [ 36.391257][ T3490] option from the mount to silence this warning. [ 36.391257][ T3490] ======================================================= [ 36.415377][ T3495] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3'. [ 36.438281][ T319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.447035][ T319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.473954][ T319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.490437][ T319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.500765][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.524011][ T3502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3502 comm=syz.4.7 [ 36.578006][ T3502] loop4: detected capacity change from 0 to 8192 [ 36.650360][ T3511] netlink: 'syz.0.9': attribute type 13 has an invalid length. [ 36.658176][ T3511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 36.750990][ T3508] loop2: detected capacity change from 0 to 4096 [ 36.859410][ T3508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.217318][ T3522] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.343613][ T3528] loop1: detected capacity change from 0 to 164 [ 37.393453][ T3528] ISOFS: unable to read i-node block [ 37.418357][ T3528] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 37.550132][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.665312][ T3545] vhci_hcd: invalid port number 96 [ 37.670624][ T3545] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 37.686653][ T3545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.954954][ T3553] netlink: 48 bytes leftover after parsing attributes in process `syz.1.22'. [ 39.030199][ T3560] netlink: 666 bytes leftover after parsing attributes in process `syz.4.24'. [ 39.045638][ T3558] netlink: 830 bytes leftover after parsing attributes in process `syz.0.23'. [ 39.057256][ T3563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 39.103512][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 39.150857][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 39.178567][ T3567] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 39.208785][ T3566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3566 comm=syz.0.26 [ 39.249612][ T3567] SELinux: failed to load policy [ 39.282206][ T3570] netlink: 'syz.2.27': attribute type 13 has an invalid length. [ 39.289966][ T3570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 39.475488][ T3574] loop0: detected capacity change from 0 to 256 [ 39.487648][ T3574] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.700249][ T3584] loop0: detected capacity change from 0 to 4096 [ 39.727569][ T3587] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure [ 39.750100][ T3522] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.769098][ T3584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.881510][ T3522] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.927120][ T3587] loop2: detected capacity change from 0 to 512 [ 39.934514][ T3587] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.947818][ T3587] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.971073][ T3587] EXT4-fs (loop2): 1 truncate cleaned up [ 39.991777][ T3522] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.022968][ T3587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.089874][ T3587] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.2.33: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 40.157000][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.165610][ T3587] EXT4-fs error (device loop2) in ext4_delete_entry:2739: Corrupt filesystem [ 40.180975][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.194964][ T3587] EXT4-fs warning (device loop2): ext4_rename_delete:3731: inode #2: comm syz.2.33: Deleting old file: nlink 4, error=-117 [ 40.209598][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.236711][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.285472][ T3593] unsupported nla_type 7440 [ 40.308778][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.323993][ T3595] loop4: detected capacity change from 0 to 512 [ 40.359358][ T3595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.387633][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 40.387651][ T29] audit: type=1400 audit(1761717724.647:372): avc: denied { ioctl } for pid=3597 comm="syz.2.36" path="socket:[5470]" dev="sockfs" ino=5470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.418764][ T3595] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.441868][ T29] audit: type=1400 audit(1761717724.707:373): avc: denied { create } for pid=3599 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 40.473531][ T3598] loop2: detected capacity change from 0 to 512 [ 40.482315][ T3600] loop3: detected capacity change from 0 to 4096 [ 40.489996][ T3600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.507468][ T3598] ------------[ cut here ]------------ [ 40.509928][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.513285][ T3598] EA inode 11 i_nlink=2 [ 40.522385][ T3598] WARNING: CPU: 1 PID: 3598 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 40.536798][ T3598] Modules linked in: [ 40.540781][ T3598] CPU: 1 UID: 0 PID: 3598 Comm: syz.2.36 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.550646][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 40.561030][ T3598] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 40.567666][ T3598] Code: 90 49 8d 7e 40 e8 76 fd b8 ff 4d 8b 6e 40 4c 89 e7 e8 8a f8 b8 ff 41 8b 56 48 48 c7 c7 a5 c8 55 86 4c 89 ee e8 87 fb 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 c9 b5 03 0f 1f 84 00 00 00 00 00 [ 40.573496][ T3600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.587412][ T3598] RSP: 0000:ffffc9000ebcb5a0 EFLAGS: 00010246 [ 40.587433][ T3598] RAX: 07d6dd4ad5df8700 RBX: ffff88810b5de8c0 RCX: 0000000000080000 [ 40.587446][ T3598] RDX: ffffc90003025000 RSI: 000000000001e6d6 RDI: 000000000001e6d7 [ 40.622365][ T3598] RBP: 0000000000000002 R08: 0001c9000ebcb427 R09: 0000000000000000 [ 40.630377][ T3598] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88810b5de870 [ 40.638872][ T3598] R13: 000000000000000b R14: ffff88810b5de828 R15: 0000000000000001 [ 40.646947][ T3598] FS: 00007fddf73d76c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 40.646975][ T3598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.646993][ T3598] CR2: 00007f3c34a2d300 CR3: 000000011b5ba000 CR4: 00000000003506f0 [ 40.647014][ T3598] Call Trace: [ 40.647022][ T3598] [ 40.647034][ T3598] ext4_xattr_set_entry+0x77f/0x1020 [ 40.647155][ T3598] ext4_xattr_ibody_set+0x184/0x3c0 [ 40.647199][ T3598] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 40.647290][ T3598] __ext4_expand_extra_isize+0x246/0x280 [ 40.647359][ T3598] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 40.647512][ T3598] ext4_evict_inode+0x80e/0xd90 [ 40.647552][ T3598] ? __pfx_ext4_evict_inode+0x10/0x10 [ 40.647588][ T3598] evict+0x2e3/0x550 [ 40.647609][ T3598] ? __dquot_initialize+0x146/0x7c0 [ 40.647729][ T3598] iput+0x4ed/0x650 [ 40.647812][ T3598] ext4_process_orphan+0x1a9/0x1c0 [ 40.647845][ T3598] ext4_orphan_cleanup+0x6a8/0xa00 [ 40.647880][ T3598] ext4_fill_super+0x3483/0x3810 [ 40.647925][ T3598] ? snprintf+0x86/0xb0 [ 40.648574][ T3598] ? set_blocksize+0x1a8/0x310 [ 40.648656][ T3598] ? sb_set_blocksize+0xe3/0x100 [ 40.648681][ T3598] ? setup_bdev_super+0x30e/0x370 [ 40.648713][ T3598] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.648798][ T3598] get_tree_bdev_flags+0x291/0x300 [ 40.648876][ T3598] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.648899][ T3598] get_tree_bdev+0x1f/0x30 [ 40.648933][ T3598] ext4_get_tree+0x1c/0x30 [ 40.649011][ T3598] vfs_get_tree+0x57/0x1d0 [ 40.649042][ T3598] do_new_mount+0x24d/0x660 [ 40.649074][ T3598] path_mount+0x4a5/0xb70 [ 40.649100][ T3598] ? user_path_at+0x109/0x130 [ 40.649120][ T3598] __se_sys_mount+0x28c/0x2e0 [ 40.649205][ T3598] __x64_sys_mount+0x67/0x80 [ 40.649235][ T3598] x64_sys_call+0x2b51/0x3000 [ 40.649267][ T3598] do_syscall_64+0xd2/0x200 [ 40.649364][ T3598] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.649471][ T3598] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.649510][ T3598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.649540][ T3598] RIP: 0033:0x7fddf897076a [ 40.649560][ T3598] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.649642][ T3598] RSP: 002b:00007fddf73d6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.649665][ T3598] RAX: ffffffffffffffda RBX: 00007fddf73d6ef0 RCX: 00007fddf897076a [ 40.649680][ T3598] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fddf73d6eb0 [ 40.649695][ T3598] RBP: 0000200000000180 R08: 00007fddf73d6ef0 R09: 0000000000800700 [ 40.649706][ T3598] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 40.649736][ T3598] R13: 00007fddf73d6eb0 R14: 000000000000046f R15: 00002000000007c0 [ 40.649754][ T3598] [ 40.649761][ T3598] ---[ end trace 0000000000000000 ]--- [ 40.669798][ T3598] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.36: iget: bad extra_isize 90 (inode size 256) [ 40.678011][ T3598] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.36: error while reading EA inode 18 err=-117 [ 40.681526][ T3598] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.36: iget: bad extra_isize 90 (inode size 256) [ 40.686949][ T3598] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.36: error while reading EA inode 18 err=-117 [ 40.692337][ T3600] geneve2: entered promiscuous mode [ 40.692356][ T3600] geneve2: entered allmulticast mode [ 40.694301][ T29] audit: type=1400 audit(1761717724.947:374): avc: denied { name_bind } for pid=3599 comm="syz.3.37" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 40.694543][ T3598] EXT4-fs (loop2): 1 orphan inode deleted [ 40.694987][ T3598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.698149][ T29] audit: type=1400 audit(1761717724.967:375): avc: denied { create } for pid=3594 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 40.698781][ T29] audit: type=1400 audit(1761717724.967:376): avc: denied { mounton } for pid=3594 comm="syz.4.35" path="/6/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.698957][ T3604] 9pnet_fd: Insufficient options for proto=fd [ 40.701348][ T29] audit: type=1400 audit(1761717724.967:377): avc: denied { create } for pid=3594 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.710334][ T29] audit: type=1400 audit(1761717724.977:378): avc: denied { mount } for pid=3603 comm="syz.0.38" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 40.713320][ T29] audit: type=1400 audit(1761717724.977:379): avc: denied { ioctl } for pid=3603 comm="syz.0.38" path="socket:[4810]" dev="sockfs" ino=4810 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.713633][ T3598] syz.2.36 (3598) used greatest stack depth: 10680 bytes left [ 40.744015][ T29] audit: type=1326 audit(1761717725.017:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3599 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7479efc9 code=0x7ffc0000 [ 40.851037][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.853095][ T29] audit: type=1400 audit(1761717725.027:381): avc: denied { mounton } for pid=3603 comm="syz.0.38" path="/9/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 40.904591][ T3610] loop1: detected capacity change from 0 to 4096 [ 41.268367][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.278638][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.299216][ T3610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.312074][ T3620] loop0: detected capacity change from 0 to 4096 [ 41.319116][ T3617] __nla_validate_parse: 6 callbacks suppressed [ 41.319166][ T3617] netlink: 48 bytes leftover after parsing attributes in process `syz.2.43'. [ 41.322162][ T3620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.343343][ T3620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.359996][ T3620] netlink: 32 bytes leftover after parsing attributes in process `syz.0.45'. [ 41.374551][ T3620] geneve2: entered promiscuous mode [ 41.379845][ T3620] geneve2: entered allmulticast mode [ 41.385555][ T3617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 41.458224][ T3631] loop4: detected capacity change from 0 to 4096 [ 41.465068][ T3631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.480520][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.502829][ T3631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.519117][ T3631] netlink: 32 bytes leftover after parsing attributes in process `syz.4.47'. [ 41.548044][ T3631] geneve2: entered promiscuous mode [ 41.553441][ T3631] geneve2: entered allmulticast mode [ 41.633502][ T3635] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 41.662714][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.707497][ T3638] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.50'. [ 41.730061][ T3638] netlink: zone id is out of range [ 41.735228][ T3638] netlink: zone id is out of range [ 41.744966][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.753726][ T3638] netlink: zone id is out of range [ 41.773791][ T3638] netlink: zone id is out of range [ 41.787351][ T3638] netlink: zone id is out of range [ 41.792597][ T3638] netlink: zone id is out of range [ 41.797809][ T3638] netlink: zone id is out of range [ 41.803090][ T3638] netlink: zone id is out of range [ 41.803265][ T3642] loop4: detected capacity change from 0 to 128 [ 41.808231][ T3638] netlink: zone id is out of range [ 41.808240][ T3638] netlink: zone id is out of range [ 41.851930][ T3642] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.872378][ T3642] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.899243][ T3646] loop0: detected capacity change from 0 to 512 [ 41.913183][ T3646] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.932733][ T3646] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 42.000363][ T3646] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 42.018144][ T3646] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 42.038184][ T3646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.52'. [ 42.060054][ T3646] geneve2: entered promiscuous mode [ 42.077757][ T3646] loop0: detected capacity change from 0 to 256 [ 42.110084][ T3646] vfat: Unknown parameter 'þˆ' [ 42.263723][ T3654] loop0: detected capacity change from 0 to 512 [ 42.276892][ T3656] loop3: detected capacity change from 0 to 164 [ 42.283679][ T3656] iso9660: Bad value for 'mode' [ 42.407579][ T3658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 42.540444][ T3654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.804396][ T3654] syz.0.55 (3654) used greatest stack depth: 10064 bytes left [ 42.814263][ T3648] netlink: 774 bytes leftover after parsing attributes in process `syz.4.53'. [ 42.840274][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.915726][ T3673] netlink: 76 bytes leftover after parsing attributes in process `syz.1.62'. [ 42.967095][ T3682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 42.975965][ T3682] bridge_slave_1: left allmulticast mode [ 42.981700][ T3682] bridge_slave_1: left promiscuous mode [ 42.987530][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.022226][ T3686] loop4: detected capacity change from 0 to 512 [ 43.045115][ T3682] bridge_slave_0: left allmulticast mode [ 43.050946][ T3682] bridge_slave_0: left promiscuous mode [ 43.056956][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.120061][ T3686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.267687][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.390033][ T3716] netlink: 'syz.2.69': attribute type 13 has an invalid length. [ 44.083148][ T3731] loop4: detected capacity change from 0 to 1024 [ 44.097800][ T3731] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.141787][ T3731] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #11: comm syz.4.66: iget: bogus i_mode (1) [ 44.238084][ T3731] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.66: couldn't read orphan inode 11 (err -117) [ 44.302376][ T3731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.415992][ T3741] loop1: detected capacity change from 0 to 512 [ 44.443545][ T3741] EXT4-fs: Ignoring removed i_version option [ 44.449668][ T3741] EXT4-fs: Ignoring removed bh option [ 44.523393][ T3746] loop2: detected capacity change from 0 to 1024 [ 44.528835][ T3741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.569523][ T3746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.635446][ T3746] EXT4-fs error (device loop2): ext4_xattr_set_entry:1665: inode #15: comm syz.2.76: corrupted xattr entries [ 44.691171][ T3717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.715860][ T3746] EXT4-fs error (device loop2): ext4_xattr_block_set:2215: inode #15: comm syz.2.76: bad block 113 [ 45.035948][ T3746] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.76: Allocating blocks 497-513 which overlap fs metadata [ 45.064398][ T3758] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.76: Allocating blocks 497-513 which overlap fs metadata [ 45.102505][ T3746] IPv6: NLM_F_CREATE should be specified when creating new route [ 45.186498][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.198689][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.253449][ T3760] loop1: detected capacity change from 0 to 128 [ 45.280531][ T3760] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.314094][ T3760] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.371918][ T3763] netlink: 'syz.1.79': attribute type 13 has an invalid length. [ 45.458073][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 45.458092][ T29] audit: type=1400 audit(130.928:628): avc: denied { create } for pid=3762 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.482835][ T29] audit: type=1400 audit(130.928:629): avc: denied { setopt } for pid=3762 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.540889][ T3765] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 45.757572][ T29] audit: type=1400 audit(131.018:630): avc: denied { create } for pid=3761 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.777050][ T29] audit: type=1400 audit(131.018:631): avc: denied { setopt } for pid=3761 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.796427][ T29] audit: type=1400 audit(131.058:632): avc: denied { tracepoint } for pid=3764 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.815409][ T29] audit: type=1400 audit(131.058:633): avc: denied { read } for pid=3764 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.833805][ T29] audit: type=1326 audit(131.118:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 45.856356][ T29] audit: type=1326 audit(131.118:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 45.856779][ T3713] syz.4.66 (3713) used greatest stack depth: 7048 bytes left [ 45.879029][ T29] audit: type=1326 audit(131.118:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 45.879063][ T29] audit: type=1326 audit(131.128:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 46.037153][ T3780] loop4: detected capacity change from 0 to 512 [ 46.070947][ T3780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.108183][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.194455][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.211240][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.362313][ T3778] __nla_validate_parse: 4 callbacks suppressed [ 46.362329][ T3778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 46.427441][ T3806] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.442468][ T3806] loop4: detected capacity change from 0 to 512 [ 46.470050][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.479333][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.503309][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.512602][ T3806] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.528400][ T3806] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.546659][ T3806] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.83: Failed to acquire dquot type 1 [ 46.570372][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.596478][ T3806] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.83: bg 0: block 40: padding at end of block bitmap is not set [ 46.626000][ T3806] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 46.638594][ T3813] mmap: syz.1.87 (3813) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.639339][ T3806] EXT4-fs (loop4): 1 truncate cleaned up [ 46.663669][ T3809] loop0: detected capacity change from 0 to 4096 [ 46.669471][ T3806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.711967][ T3809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.798533][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.052067][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.107810][ T3833] loop0: detected capacity change from 0 to 512 [ 47.161354][ T3833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.244585][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.342798][ T3842] netlink: 48 bytes leftover after parsing attributes in process `syz.2.94'. [ 47.438636][ T3842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 47.571662][ T3850] loop3: detected capacity change from 0 to 4096 [ 47.606846][ T3850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.631289][ T3850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.758416][ T3850] netlink: 32 bytes leftover after parsing attributes in process `syz.3.96'. [ 47.772832][ T3850] geneve2: entered promiscuous mode [ 47.778246][ T3850] geneve2: entered allmulticast mode [ 47.789996][ T3841] netlink: 14 bytes leftover after parsing attributes in process `syz.0.93'. [ 47.861824][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.997197][ T3857] netlink: 48 bytes leftover after parsing attributes in process `syz.4.98'. [ 48.050611][ T3857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.98'. [ 48.076747][ T3859] loop3: detected capacity change from 0 to 512 [ 48.100177][ T3859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.184200][ T3863] loop1: detected capacity change from 0 to 512 [ 48.199241][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.201888][ T3865] loop0: detected capacity change from 0 to 1024 [ 48.215225][ T3865] EXT4-fs: Ignoring removed orlov option [ 48.228622][ T3865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.408477][ T3873] netlink: 48 bytes leftover after parsing attributes in process `syz.2.102'. [ 48.494019][ T3863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.536335][ T3871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 48.550512][ T3863] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.99: corrupted inode contents [ 48.586174][ T3863] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #4: comm syz.1.99: mark_inode_dirty error [ 48.628457][ T3863] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.99: corrupted inode contents [ 48.670389][ T3863] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.99: mark_inode_dirty error [ 48.712122][ T3863] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.99: Failed to acquire dquot type 1 [ 48.751110][ T3876] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.99: corrupted inode contents [ 48.806184][ T3876] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #4: comm syz.1.99: mark_inode_dirty error [ 48.812646][ T3863] netlink: 44 bytes leftover after parsing attributes in process `syz.1.99'. [ 48.830064][ T3876] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #4: comm syz.1.99: corrupted inode contents [ 48.841986][ T3876] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.99: mark_inode_dirty error [ 48.884172][ T3876] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.99: Failed to acquire dquot type 1 [ 48.906682][ T3885] netlink: 'syz.3.103': attribute type 13 has an invalid length. [ 48.915542][ T3863] lo speed is unknown, defaulting to 1000 [ 48.921499][ T3863] lo speed is unknown, defaulting to 1000 [ 48.970004][ T3863] lo speed is unknown, defaulting to 1000 [ 48.988565][ T3863] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 49.016386][ T3863] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 49.056873][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.077028][ T3863] lo speed is unknown, defaulting to 1000 [ 49.083239][ T3863] lo speed is unknown, defaulting to 1000 [ 49.089469][ T3863] lo speed is unknown, defaulting to 1000 [ 49.098475][ T3863] lo speed is unknown, defaulting to 1000 [ 49.106560][ T3863] lo speed is unknown, defaulting to 1000 [ 49.205005][ T3891] loop0: detected capacity change from 0 to 4096 [ 49.232716][ T3891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.279966][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.335356][ T3903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3903 comm=syz.2.113 [ 49.351252][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.366719][ T3905] netlink: 'syz.0.112': attribute type 8 has an invalid length. [ 49.955563][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.997430][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.023122][ T31] bond0 (unregistering): Released all slaves [ 50.154233][ T31] hsr_slave_0: left promiscuous mode [ 50.170606][ T31] hsr_slave_1: left promiscuous mode [ 50.196718][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.225718][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.238427][ T3919] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 50.336233][ T31] team0 (unregistering): Port device team_slave_1 removed [ 50.358325][ T31] team0 (unregistering): Port device team_slave_0 removed [ 50.471718][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 50.471736][ T29] audit: type=1400 audit(135.938:761): avc: denied { kexec_image_load } for pid=3926 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 50.826360][ T3914] chnl_net:caif_netlink_parms(): no params data found [ 50.845863][ T29] audit: type=1326 audit(136.328:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 50.900471][ T3942] loop4: detected capacity change from 0 to 4096 [ 50.915316][ T3942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.993461][ T3914] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.000632][ T3914] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.022513][ T29] audit: type=1326 audit(136.488:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 51.045974][ T29] audit: type=1326 audit(136.488:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 51.068874][ T29] audit: type=1326 audit(136.498:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 51.091565][ T29] audit: type=1326 audit(136.498:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 51.114235][ T29] audit: type=1326 audit(136.498:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 51.138374][ T3914] bridge_slave_0: entered allmulticast mode [ 51.144963][ T3914] bridge_slave_0: entered promiscuous mode [ 51.152005][ T3914] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.159171][ T3914] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.167154][ T3914] bridge_slave_1: entered allmulticast mode [ 51.173967][ T3914] bridge_slave_1: entered promiscuous mode [ 51.187214][ T29] audit: type=1326 audit(136.598:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 51.209934][ T29] audit: type=1326 audit(136.598:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 51.232802][ T29] audit: type=1326 audit(136.598:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 51.249615][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.267046][ T3914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.303331][ T3914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.316390][ T3949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3949 comm=syz.3.125 [ 51.419370][ T3914] team0: Port device team_slave_0 added [ 51.444262][ T3914] team0: Port device team_slave_1 added [ 51.559306][ T3914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.566326][ T3914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.592386][ T3914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.655392][ T3914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.662479][ T3914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.688315][ T3956] loop2: detected capacity change from 0 to 1024 [ 51.688543][ T3914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.706681][ T3960] __nla_validate_parse: 6 callbacks suppressed [ 51.706699][ T3960] netlink: 48 bytes leftover after parsing attributes in process `syz.4.128'. [ 51.785410][ T3914] hsr_slave_0: entered promiscuous mode [ 51.961045][ T3914] hsr_slave_1: entered promiscuous mode [ 52.019521][ T3956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.228666][ T3956] EXT4-fs error (device loop2): ext4_xattr_set_entry:1665: inode #15: comm syz.2.127: corrupted xattr entries [ 52.243798][ T3966] netlink: 774 bytes leftover after parsing attributes in process `syz.3.129'. [ 52.268209][ T3956] EXT4-fs error (device loop2): ext4_xattr_block_set:2215: inode #15: comm syz.2.127: bad block 113 [ 52.381875][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.435395][ T3914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.445519][ T3914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.454718][ T3914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.470247][ T3914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.539916][ T3914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.555636][ T3914] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.565902][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.573092][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.595008][ T3914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.605463][ T3914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.618990][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.626116][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.690625][ T3914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.719096][ T3992] loop4: detected capacity change from 0 to 1024 [ 52.756236][ T3992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.805650][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.852511][ T3914] veth0_vlan: entered promiscuous mode [ 52.862463][ T3914] veth1_vlan: entered promiscuous mode [ 52.884660][ T3914] veth0_macvtap: entered promiscuous mode [ 52.892908][ T3914] veth1_macvtap: entered promiscuous mode [ 52.905298][ T3914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.918066][ T3914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.928269][ T4006] loop4: detected capacity change from 0 to 4096 [ 52.930374][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.945355][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.960142][ T4006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.975260][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.999751][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.075125][ T4014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.137'. [ 53.105689][ T4015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.135'. [ 53.122118][ T4014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.137'. [ 53.132818][ T4015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 53.162818][ T4017] loop5: detected capacity change from 0 to 1024 [ 53.169740][ T4017] EXT4-fs: Ignoring removed orlov option [ 53.202307][ T4017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.217168][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.260466][ T4020] netlink: 774 bytes leftover after parsing attributes in process `syz.3.140'. [ 53.491170][ T4029] netlink: 48 bytes leftover after parsing attributes in process `syz.2.142'. [ 53.945378][ T4043] loop3: detected capacity change from 0 to 1024 [ 53.969946][ T4043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.011489][ T3914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.200186][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.301911][ T4050] loop0: detected capacity change from 0 to 4096 [ 54.318842][ T4059] netlink: 774 bytes leftover after parsing attributes in process `syz.2.152'. [ 54.339793][ T4050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.355896][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.148'. [ 54.596434][ T4080] loop2: detected capacity change from 0 to 1024 [ 54.613294][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.625062][ T4082] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 54.632376][ T4080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.644517][ T4082] FAULT_INJECTION: forcing a failure. [ 54.644517][ T4082] name failslab, interval 1, probability 0, space 0, times 0 [ 54.657367][ T4082] CPU: 1 UID: 0 PID: 4082 Comm: syz.3.161 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.657441][ T4082] Tainted: [W]=WARN [ 54.657447][ T4082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.657460][ T4082] Call Trace: [ 54.657468][ T4082] [ 54.657477][ T4082] __dump_stack+0x1d/0x30 [ 54.657504][ T4082] dump_stack_lvl+0xe8/0x140 [ 54.657527][ T4082] dump_stack+0x15/0x1b [ 54.657543][ T4082] should_fail_ex+0x265/0x280 [ 54.657619][ T4082] should_failslab+0x8c/0xb0 [ 54.657656][ T4082] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 54.657686][ T4082] ? __alloc_skb+0x101/0x320 [ 54.657739][ T4082] __alloc_skb+0x101/0x320 [ 54.657775][ T4082] alloc_uevent_skb+0x5c/0x120 [ 54.657877][ T4082] kobject_uevent_net_broadcast+0xfb/0x410 [ 54.657921][ T4082] kobject_uevent_env+0x43d/0x570 [ 54.657950][ T4082] kobject_rename+0x2d6/0x350 [ 54.658106][ T4082] ? sysfs_rename_link_ns+0x106/0x120 [ 54.658140][ T4082] device_rename+0x11f/0x180 [ 54.658162][ T4082] netif_change_name+0x1eb/0x6b0 [ 54.658190][ T4082] ? nla_strscpy+0xec/0x120 [ 54.658246][ T4082] do_setlink+0x80b/0x2810 [ 54.658281][ T4082] ? selinux_capable+0x31/0x40 [ 54.658310][ T4082] ? security_capable+0x83/0x90 [ 54.658394][ T4082] ? ns_capable+0x7d/0xb0 [ 54.658496][ T4082] ? netlink_ns_capable+0x86/0xa0 [ 54.658534][ T4082] rtnl_setlink+0x311/0x420 [ 54.658579][ T4082] ? selinux_capable+0x31/0x40 [ 54.658603][ T4082] ? security_capable+0x83/0x90 [ 54.658699][ T4082] ? ns_capable+0x7d/0xb0 [ 54.658727][ T4082] ? __pfx_rtnl_setlink+0x10/0x10 [ 54.658755][ T4082] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 54.658843][ T4082] netlink_rcv_skb+0x123/0x220 [ 54.658903][ T4082] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 54.659016][ T4082] rtnetlink_rcv+0x1c/0x30 [ 54.659035][ T4082] netlink_unicast+0x5c0/0x690 [ 54.659085][ T4082] netlink_sendmsg+0x58b/0x6b0 [ 54.659105][ T4082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.659124][ T4082] __sock_sendmsg+0x145/0x180 [ 54.659147][ T4082] sock_write_iter+0x1a7/0x1f0 [ 54.659242][ T4082] do_iter_readv_writev+0x4a1/0x540 [ 54.659283][ T4082] vfs_writev+0x2df/0x8b0 [ 54.659333][ T4082] do_writev+0xe7/0x210 [ 54.659375][ T4082] __x64_sys_writev+0x45/0x50 [ 54.659402][ T4082] x64_sys_call+0x1e9a/0x3000 [ 54.659429][ T4082] do_syscall_64+0xd2/0x200 [ 54.659453][ T4082] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.659528][ T4082] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 54.659561][ T4082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.659659][ T4082] RIP: 0033:0x7fcd7479efc9 [ 54.659676][ T4082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.659693][ T4082] RSP: 002b:00007fcd73207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 54.659711][ T4082] RAX: ffffffffffffffda RBX: 00007fcd749f5fa0 RCX: 00007fcd7479efc9 [ 54.659726][ T4082] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000005 [ 54.659741][ T4082] RBP: 00007fcd73207090 R08: 0000000000000000 R09: 0000000000000000 [ 54.659791][ T4082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.659803][ T4082] R13: 00007fcd749f6038 R14: 00007fcd749f5fa0 R15: 00007ffdb858e0e8 [ 54.659821][ T4082] [ 54.984382][ T4082] 0ªî{X¹¦: entered allmulticast mode [ 54.990606][ T4082] net_ratelimit: 11 callbacks suppressed [ 54.990622][ T4082] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 55.059056][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.220331][ T4104] loop2: detected capacity change from 0 to 512 [ 55.241976][ T4104] loop2: detected capacity change from 0 to 512 [ 55.258978][ T4104] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 55.267072][ T4104] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.279651][ T4104] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.171: corrupted inode contents [ 55.307267][ T4104] EXT4-fs (loop2): Remounting filesystem read-only [ 55.321489][ T4104] EXT4-fs (loop2): 1 truncate cleaned up [ 55.327369][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.338094][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 55.368871][ T4122] loop0: detected capacity change from 0 to 4096 [ 55.375834][ T4122] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.382934][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 55.393832][ T4104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.395806][ T4119] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4119 comm=syz.3.177 [ 55.409067][ T4104] binfmt_misc: register: failed to install interpreter file ./file0 [ 55.445267][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.492989][ T4122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.553602][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 55.553620][ T29] audit: type=1400 audit(141.038:934): avc: denied { write } for pid=4125 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 55.580560][ T4122] geneve3: entered promiscuous mode [ 55.585838][ T4122] geneve3: entered allmulticast mode [ 55.597248][ T29] audit: type=1400 audit(141.068:935): avc: denied { unmount } for pid=4123 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.616385][ T29] audit: type=1326 audit(141.078:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 55.639210][ T29] audit: type=1326 audit(141.078:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 55.661945][ T29] audit: type=1326 audit(141.078:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 55.695163][ T29] audit: type=1326 audit(141.178:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce072ad810 code=0x7ffc0000 [ 55.718057][ T29] audit: type=1326 audit(141.178:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fce072b07f7 code=0x7ffc0000 [ 55.740778][ T29] audit: type=1326 audit(141.178:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 55.763643][ T29] audit: type=1326 audit(141.178:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fce072b07f7 code=0x7ffc0000 [ 55.786727][ T29] audit: type=1326 audit(141.178:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fce072adc2a code=0x7ffc0000 [ 55.835198][ T4136] FAULT_INJECTION: forcing a failure. [ 55.835198][ T4136] name failslab, interval 1, probability 0, space 0, times 0 [ 55.847933][ T4136] CPU: 1 UID: 0 PID: 4136 Comm: syz.5.181 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.847970][ T4136] Tainted: [W]=WARN [ 55.847982][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.847997][ T4136] Call Trace: [ 55.848073][ T4136] [ 55.848082][ T4136] __dump_stack+0x1d/0x30 [ 55.848109][ T4136] dump_stack_lvl+0xe8/0x140 [ 55.848134][ T4136] dump_stack+0x15/0x1b [ 55.848156][ T4136] should_fail_ex+0x265/0x280 [ 55.848176][ T4136] should_failslab+0x8c/0xb0 [ 55.848241][ T4136] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 55.848283][ T4136] ? tcf_bpf_init_from_ops+0xe5/0x1c0 [ 55.848316][ T4136] kmemdup_noprof+0x2b/0x70 [ 55.848388][ T4136] tcf_bpf_init_from_ops+0xe5/0x1c0 [ 55.848415][ T4136] tcf_bpf_init+0x3ae/0x610 [ 55.848446][ T4136] tcf_action_init_1+0x36a/0x4a0 [ 55.848498][ T4136] tcf_action_init+0x267/0x6d0 [ 55.848530][ T4136] ? trace_clock_local+0x3f/0x60 [ 55.848636][ T4136] tc_ctl_action+0x291/0x830 [ 55.848687][ T4136] ? __pfx_tc_ctl_action+0x10/0x10 [ 55.848763][ T4136] rtnetlink_rcv_msg+0x65a/0x6d0 [ 55.848866][ T4136] netlink_rcv_skb+0x123/0x220 [ 55.848939][ T4136] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 55.848967][ T4136] rtnetlink_rcv+0x1c/0x30 [ 55.849035][ T4136] netlink_unicast+0x5c0/0x690 [ 55.849076][ T4136] netlink_sendmsg+0x58b/0x6b0 [ 55.849098][ T4136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.849116][ T4136] __sock_sendmsg+0x145/0x180 [ 55.849139][ T4136] ____sys_sendmsg+0x31e/0x4e0 [ 55.849217][ T4136] ___sys_sendmsg+0x17b/0x1d0 [ 55.849262][ T4136] __x64_sys_sendmsg+0xd4/0x160 [ 55.849304][ T4136] x64_sys_call+0x191e/0x3000 [ 55.849376][ T4136] do_syscall_64+0xd2/0x200 [ 55.849398][ T4136] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.849434][ T4136] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.849474][ T4136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.849623][ T4136] RIP: 0033:0x7f25c2ccefc9 [ 55.849640][ T4136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.849661][ T4136] RSP: 002b:00007f25c1737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.849683][ T4136] RAX: ffffffffffffffda RBX: 00007f25c2f25fa0 RCX: 00007f25c2ccefc9 [ 55.849698][ T4136] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 55.849713][ T4136] RBP: 00007f25c1737090 R08: 0000000000000000 R09: 0000000000000000 [ 55.849726][ T4136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.849801][ T4136] R13: 00007f25c2f26038 R14: 00007f25c2f25fa0 R15: 00007ffdaa841018 [ 55.849825][ T4136] [ 56.163145][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.311319][ T4143] loop0: detected capacity change from 0 to 1024 [ 56.672820][ T4156] FAULT_INJECTION: forcing a failure. [ 56.672820][ T4156] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.685959][ T4156] CPU: 1 UID: 0 PID: 4156 Comm: syz.3.190 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.686038][ T4156] Tainted: [W]=WARN [ 56.686044][ T4156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.686056][ T4156] Call Trace: [ 56.686062][ T4156] [ 56.686070][ T4156] __dump_stack+0x1d/0x30 [ 56.686151][ T4156] dump_stack_lvl+0xe8/0x140 [ 56.686176][ T4156] dump_stack+0x15/0x1b [ 56.686217][ T4156] should_fail_ex+0x265/0x280 [ 56.686236][ T4156] should_fail+0xb/0x20 [ 56.686254][ T4156] should_fail_usercopy+0x1a/0x20 [ 56.686278][ T4156] _copy_from_iter+0xd2/0xe80 [ 56.686358][ T4156] ? rep_movs_alternative+0x4a/0x90 [ 56.686391][ T4156] ? _copy_from_iter+0x170/0xe80 [ 56.686422][ T4156] copy_page_from_iter+0x178/0x2a0 [ 56.686480][ T4156] skb_copy_datagram_from_iter+0x232/0x490 [ 56.686503][ T4156] unix_dgram_sendmsg+0x3ff/0xfd0 [ 56.686538][ T4156] ? avc_has_perm+0xf7/0x180 [ 56.686627][ T4156] ? selinux_socket_sendmsg+0x175/0x1b0 [ 56.686659][ T4156] unix_seqpacket_sendmsg+0xd1/0x110 [ 56.686695][ T4156] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 56.686740][ T4156] __sock_sendmsg+0x145/0x180 [ 56.686768][ T4156] ____sys_sendmsg+0x345/0x4e0 [ 56.686802][ T4156] ___sys_sendmsg+0x17b/0x1d0 [ 56.686880][ T4156] __sys_sendmmsg+0x178/0x300 [ 56.686913][ T4156] __x64_sys_sendmmsg+0x57/0x70 [ 56.686936][ T4156] x64_sys_call+0x1c4a/0x3000 [ 56.687036][ T4156] do_syscall_64+0xd2/0x200 [ 56.687056][ T4156] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.687082][ T4156] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.687118][ T4156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.687216][ T4156] RIP: 0033:0x7fcd7479efc9 [ 56.687233][ T4156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.687250][ T4156] RSP: 002b:00007fcd73207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.687274][ T4156] RAX: ffffffffffffffda RBX: 00007fcd749f5fa0 RCX: 00007fcd7479efc9 [ 56.687289][ T4156] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 56.687305][ T4156] RBP: 00007fcd73207090 R08: 0000000000000000 R09: 0000000000000000 [ 56.687319][ T4156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.687400][ T4156] R13: 00007fcd749f6038 R14: 00007fcd749f5fa0 R15: 00007ffdb858e0e8 [ 56.687424][ T4156] [ 56.977245][ T4166] __nla_validate_parse: 7 callbacks suppressed [ 56.977261][ T4166] netlink: 774 bytes leftover after parsing attributes in process `syz.0.188'. [ 57.166827][ T4171] loop0: detected capacity change from 0 to 4096 [ 57.340349][ T4188] macvtap0: refused to change device tx_queue_len [ 57.351470][ T4190] syz.3.201 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.506149][ T4193] loop3: detected capacity change from 0 to 4096 [ 57.513307][ T4193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.524527][ T4193] netlink: 32 bytes leftover after parsing attributes in process `syz.3.202'. [ 57.541474][ T4193] geneve2: entered promiscuous mode [ 57.546748][ T4193] geneve2: entered allmulticast mode [ 57.604195][ T4197] loop5: detected capacity change from 0 to 128 [ 57.618277][ T4197] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.672320][ T4197] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.690353][ T4199] loop2: detected capacity change from 0 to 1024 [ 57.719046][ T4202] netlink: 774 bytes leftover after parsing attributes in process `syz.5.206'. [ 57.742740][ T4203] loop3: detected capacity change from 0 to 128 [ 57.763420][ T4203] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 57.771969][ T4203] FAT-fs (loop3): Filesystem has been set read-only [ 57.803004][ T4207] loop2: detected capacity change from 0 to 1024 [ 57.892576][ T4215] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 57.932011][ T4222] Zero length message leads to an empty skb [ 57.961671][ T4222] netlink: 80 bytes leftover after parsing attributes in process `syz.2.211'. [ 58.048827][ T4233] loop5: detected capacity change from 0 to 128 [ 58.056576][ T4233] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.072385][ T4233] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.144895][ T4242] netlink: 774 bytes leftover after parsing attributes in process `syz.5.219'. [ 58.194770][ T4244] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 58.214828][ T4246] syz.4.221 uses obsolete (PF_INET,SOCK_PACKET) [ 58.279099][ T4252] loop0: detected capacity change from 0 to 512 [ 58.293032][ T4254] process 'syz.5.222' launched '/dev/fd/4' with NULL argv: empty string added [ 58.310841][ T4252] ext3: Unknown parameter 'appraise_type' [ 58.530578][ T4271] loop2: detected capacity change from 0 to 1024 [ 58.569148][ T4271] FAULT_INJECTION: forcing a failure. [ 58.569148][ T4271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.582449][ T4271] CPU: 1 UID: 0 PID: 4271 Comm: syz.2.228 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 58.582482][ T4271] Tainted: [W]=WARN [ 58.582488][ T4271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.582500][ T4271] Call Trace: [ 58.582506][ T4271] [ 58.582513][ T4271] __dump_stack+0x1d/0x30 [ 58.582541][ T4271] dump_stack_lvl+0xe8/0x140 [ 58.582584][ T4271] dump_stack+0x15/0x1b [ 58.582607][ T4271] should_fail_ex+0x265/0x280 [ 58.582691][ T4271] should_fail+0xb/0x20 [ 58.582724][ T4271] should_fail_usercopy+0x1a/0x20 [ 58.582788][ T4271] strncpy_from_user+0x25/0x230 [ 58.582825][ T4271] path_setxattrat+0xeb/0x310 [ 58.582880][ T4271] __x64_sys_setxattr+0x6e/0x90 [ 58.582914][ T4271] x64_sys_call+0xad2/0x3000 [ 58.582985][ T4271] do_syscall_64+0xd2/0x200 [ 58.583002][ T4271] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.583097][ T4271] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.583224][ T4271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.583319][ T4271] RIP: 0033:0x7fddf896efc9 [ 58.583333][ T4271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.583352][ T4271] RSP: 002b:00007fddf73d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 58.583373][ T4271] RAX: ffffffffffffffda RBX: 00007fddf8bc5fa0 RCX: 00007fddf896efc9 [ 58.583384][ T4271] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000040 [ 58.583398][ T4271] RBP: 00007fddf73d7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.583471][ T4271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.583485][ T4271] R13: 00007fddf8bc6038 R14: 00007fddf8bc5fa0 R15: 00007fff547943b8 [ 58.583507][ T4271] [ 58.774151][ T4277] loop3: detected capacity change from 0 to 128 [ 58.781042][ T4277] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.804920][ T4277] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.822682][ T4281] loop0: detected capacity change from 0 to 1024 [ 58.834111][ T4279] loop5: detected capacity change from 0 to 1024 [ 58.849274][ T4285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.230'. [ 58.877845][ T4281] EXT4-fs error (device loop0): ext4_xattr_set_entry:1665: inode #16: comm syz.0.232: corrupted xattr entries [ 58.889870][ T4281] EXT4-fs (loop0): Remounting filesystem read-only [ 58.901864][ T4294] loop3: detected capacity change from 0 to 512 [ 58.918833][ T4294] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 58.931225][ T4296] loop5: detected capacity change from 0 to 1024 [ 58.937350][ T4300] loop2: detected capacity change from 0 to 512 [ 58.938224][ T4296] EXT4-fs: inline encryption not supported [ 58.944198][ T4294] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.950086][ T4296] EXT4-fs: Ignoring removed nobh option [ 58.961779][ T4296] EXT4-fs: Ignoring removed bh option [ 58.963538][ T4300] EXT4-fs: quotafile must be on filesystem root [ 58.975369][ T4294] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.233: corrupted inode contents [ 58.991476][ T4304] FAULT_INJECTION: forcing a failure. [ 58.991476][ T4304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.991612][ T4300] loop2: detected capacity change from 0 to 512 [ 59.004715][ T4304] CPU: 1 UID: 0 PID: 4304 Comm: syz.0.239 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 59.004753][ T4304] Tainted: [W]=WARN [ 59.004761][ T4304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.004774][ T4304] Call Trace: [ 59.004780][ T4304] [ 59.004788][ T4304] __dump_stack+0x1d/0x30 [ 59.004810][ T4304] dump_stack_lvl+0xe8/0x140 [ 59.004968][ T4304] dump_stack+0x15/0x1b [ 59.004993][ T4304] should_fail_ex+0x265/0x280 [ 59.005020][ T4304] should_fail+0xb/0x20 [ 59.005043][ T4304] should_fail_usercopy+0x1a/0x20 [ 59.005107][ T4304] _copy_from_user+0x1c/0xb0 [ 59.005140][ T4304] __sys_bpf+0x183/0x7c0 [ 59.005176][ T4304] __x64_sys_bpf+0x41/0x50 [ 59.005321][ T4304] x64_sys_call+0x2aee/0x3000 [ 59.005352][ T4304] do_syscall_64+0xd2/0x200 [ 59.005376][ T4304] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.005413][ T4304] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.005460][ T4304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.005564][ T4304] RIP: 0033:0x7fce072aefc9 [ 59.005585][ T4304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.005608][ T4304] RSP: 002b:00007fce05d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.005634][ T4304] RAX: ffffffffffffffda RBX: 00007fce07505fa0 RCX: 00007fce072aefc9 [ 59.005698][ T4304] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 0000000000000000 [ 59.005715][ T4304] RBP: 00007fce05d17090 R08: 0000000000000000 R09: 0000000000000000 [ 59.005732][ T4304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.005747][ T4304] R13: 00007fce07506038 R14: 00007fce07505fa0 R15: 00007ffcb53ff678 [ 59.005826][ T4304] [ 59.008186][ T4294] EXT4-fs (loop3): Remounting filesystem read-only [ 59.073808][ T4296] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.234: Allocating blocks 497-513 which overlap fs metadata [ 59.075193][ T4294] EXT4-fs (loop3): 1 truncate cleaned up [ 59.079403][ T4300] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 59.089580][ T4296] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.234: Allocating blocks 497-513 which overlap fs metadata [ 59.098875][ T319] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.131042][ T4300] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.134671][ T319] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 59.144766][ T4300] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.237: corrupted inode contents [ 59.207156][ T319] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 59.216128][ T4312] 9pnet_fd: Insufficient options for proto=fd [ 59.252784][ T4300] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.237: mark_inode_dirty error [ 59.301487][ T4300] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.237: corrupted inode contents [ 59.324620][ T4300] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.237: mark_inode_dirty error [ 59.337091][ T4300] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.237: corrupted inode contents [ 59.352946][ T4300] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 59.362438][ T4300] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.237: corrupted inode contents [ 59.378061][ T4300] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.237: mark_inode_dirty error [ 59.380117][ T4322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.246'. [ 59.398579][ T4300] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 59.417563][ T4300] EXT4-fs (loop2): 1 truncate cleaned up [ 59.423796][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1 [ 59.457791][ T4332] FAULT_INJECTION: forcing a failure. [ 59.457791][ T4332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.471031][ T4332] CPU: 0 UID: 0 PID: 4332 Comm: syz.0.249 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 59.471127][ T4332] Tainted: [W]=WARN [ 59.471135][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.471152][ T4332] Call Trace: [ 59.471186][ T4332] [ 59.471196][ T4332] __dump_stack+0x1d/0x30 [ 59.471220][ T4332] dump_stack_lvl+0xe8/0x140 [ 59.471244][ T4332] dump_stack+0x15/0x1b [ 59.471307][ T4332] should_fail_ex+0x265/0x280 [ 59.471349][ T4332] should_fail+0xb/0x20 [ 59.471368][ T4332] should_fail_usercopy+0x1a/0x20 [ 59.471399][ T4332] _copy_from_user+0x1c/0xb0 [ 59.471477][ T4332] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 59.471501][ T4332] vlan_ioctl_handler+0x4c/0x4f0 [ 59.471584][ T4332] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 59.471612][ T4332] sock_ioctl+0x4a7/0x610 [ 59.471707][ T4332] ? __pfx_sock_ioctl+0x10/0x10 [ 59.471733][ T4332] __se_sys_ioctl+0xce/0x140 [ 59.471760][ T4332] __x64_sys_ioctl+0x43/0x50 [ 59.471785][ T4332] x64_sys_call+0x1816/0x3000 [ 59.471822][ T4332] do_syscall_64+0xd2/0x200 [ 59.471839][ T4332] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.471870][ T4332] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.471910][ T4332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.471995][ T4332] RIP: 0033:0x7fce072aefc9 [ 59.472009][ T4332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.472030][ T4332] RSP: 002b:00007fce05d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.472091][ T4332] RAX: ffffffffffffffda RBX: 00007fce07505fa0 RCX: 00007fce072aefc9 [ 59.472102][ T4332] RDX: 0000000000000000 RSI: 0000000000008983 RDI: 0000000000000007 [ 59.472114][ T4332] RBP: 00007fce05d17090 R08: 0000000000000000 R09: 0000000000000000 [ 59.472167][ T4332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.472181][ T4332] R13: 00007fce07506038 R14: 00007fce07505fa0 R15: 00007ffcb53ff678 [ 59.472208][ T4332] [ 59.695898][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.251'. [ 59.705148][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.251'. [ 59.734245][ T4341] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.752803][ T4341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'. [ 59.765001][ T4340] loop0: detected capacity change from 0 to 2048 [ 59.792231][ T4349] lo speed is unknown, defaulting to 1000 [ 59.798534][ T4349] lo speed is unknown, defaulting to 1000 [ 59.804536][ T4349] lo speed is unknown, defaulting to 1000 [ 59.826616][ T4349] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 59.844385][ T4349] lo speed is unknown, defaulting to 1000 [ 59.857515][ T4349] lo speed is unknown, defaulting to 1000 [ 59.869226][ T4349] lo speed is unknown, defaulting to 1000 [ 59.885070][ T4349] lo speed is unknown, defaulting to 1000 [ 59.893072][ T4349] lo speed is unknown, defaulting to 1000 [ 60.541790][ T4371] loop0: detected capacity change from 0 to 4096 [ 60.706227][ T4384] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 60.727149][ T4386] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 60.808054][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 60.808072][ T29] audit: type=1326 audit(146.258:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf896efc9 code=0x7ffc0000 [ 60.837091][ T29] audit: type=1326 audit(146.258:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4360 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf896efc9 code=0x7ffc0000 [ 61.005832][ T29] audit: type=1326 audit(146.488:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 61.028639][ T29] audit: type=1326 audit(146.488:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 61.051428][ T29] audit: type=1326 audit(146.488:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 61.074162][ T29] audit: type=1326 audit(146.488:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 61.096947][ T29] audit: type=1326 audit(146.488:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 61.119696][ T29] audit: type=1326 audit(146.488:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 61.142665][ T29] audit: type=1326 audit(146.488:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 61.165420][ T29] audit: type=1326 audit(146.488:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.0.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 61.239662][ T4401] geneve2: entered promiscuous mode [ 61.244933][ T4401] geneve2: entered allmulticast mode [ 61.503661][ T4409] loop3: detected capacity change from 0 to 1024 [ 61.522419][ T4409] EXT4-fs: Ignoring removed orlov option [ 61.718072][ T4420] netlink: '': attribute type 30 has an invalid length. [ 61.772090][ T4392] Set syz1 is full, maxelem 65536 reached [ 62.253323][ T4434] __nla_validate_parse: 14 callbacks suppressed [ 62.253340][ T4434] netlink: 48 bytes leftover after parsing attributes in process `syz.2.285'. [ 62.275087][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 62.291863][ T4436] loop0: detected capacity change from 0 to 4096 [ 62.303531][ T4436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.325047][ T4436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.287'. [ 62.353108][ T4436] geneve3: entered promiscuous mode [ 62.358438][ T4436] geneve3: entered allmulticast mode [ 62.587784][ T4450] loop0: detected capacity change from 0 to 4096 [ 62.597190][ T4455] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.704138][ T4455] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.765546][ T4465] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.790018][ T4455] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.806465][ T4465] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.843547][ T4455] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.883337][ T4470] loop0: detected capacity change from 0 to 1024 [ 62.894216][ T4465] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.930205][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.969363][ T4465] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.005998][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.016450][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.026729][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.053641][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.077928][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.086912][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.095211][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.119415][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.303'. [ 63.135753][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.303'. [ 63.141622][ T4484] loop0: detected capacity change from 0 to 512 [ 63.151367][ T4484] EXT4-fs: Ignoring removed bh option [ 63.164308][ T4484] ext4: Unknown parameter 'óaze' [ 63.243930][ T4491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.302'. [ 63.373746][ T4495] FAULT_INJECTION: forcing a failure. [ 63.373746][ T4495] name failslab, interval 1, probability 0, space 0, times 0 [ 63.386477][ T4495] CPU: 1 UID: 0 PID: 4495 Comm: syz.2.307 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 63.386531][ T4495] Tainted: [W]=WARN [ 63.386539][ T4495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 63.386555][ T4495] Call Trace: [ 63.386563][ T4495] [ 63.386571][ T4495] __dump_stack+0x1d/0x30 [ 63.386597][ T4495] dump_stack_lvl+0xe8/0x140 [ 63.386663][ T4495] dump_stack+0x15/0x1b [ 63.386680][ T4495] should_fail_ex+0x265/0x280 [ 63.386701][ T4495] ? __request_module+0x1c4/0x3e0 [ 63.386734][ T4495] should_failslab+0x8c/0xb0 [ 63.386820][ T4495] ? inet6_create+0x1ed/0x870 [ 63.386847][ T4495] __kmalloc_cache_noprof+0x4c/0x4a0 [ 63.386893][ T4495] ? inet6_create+0x1ed/0x870 [ 63.386932][ T4495] __request_module+0x1c4/0x3e0 [ 63.386987][ T4495] ? should_failslab+0x8c/0xb0 [ 63.387049][ T4495] inet6_create+0x1ed/0x870 [ 63.387081][ T4495] __sock_create+0x2ec/0x5b0 [ 63.387148][ T4495] __sys_socket+0xb0/0x180 [ 63.387181][ T4495] __x64_sys_socket+0x3f/0x50 [ 63.387207][ T4495] x64_sys_call+0x1147/0x3000 [ 63.387228][ T4495] do_syscall_64+0xd2/0x200 [ 63.387246][ T4495] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 63.387353][ T4495] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 63.387477][ T4495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.387505][ T4495] RIP: 0033:0x7fddf896efc9 [ 63.387522][ T4495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.387570][ T4495] RSP: 002b:00007fddf73d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 63.387671][ T4495] RAX: ffffffffffffffda RBX: 00007fddf8bc5fa0 RCX: 00007fddf896efc9 [ 63.387736][ T4495] RDX: 0000000000000006 RSI: 0000000000000005 RDI: 000000000000000a [ 63.387751][ T4495] RBP: 00007fddf73d7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.387832][ T4495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.387846][ T4495] R13: 00007fddf8bc6038 R14: 00007fddf8bc5fa0 R15: 00007fff547943b8 [ 63.387869][ T4495] [ 63.603158][ T4493] loop5: detected capacity change from 0 to 4096 [ 63.618413][ T4493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.638974][ T4499] netlink: 774 bytes leftover after parsing attributes in process `syz.3.309'. [ 63.658786][ T4493] netlink: 32 bytes leftover after parsing attributes in process `syz.5.306'. [ 63.693393][ T4493] geneve2: entered promiscuous mode [ 63.698832][ T4493] geneve2: entered allmulticast mode [ 63.705683][ T4511] loop0: detected capacity change from 0 to 1024 [ 63.728627][ T4515] loop3: detected capacity change from 0 to 164 [ 63.760684][ T4515] ISOFS: unable to read i-node block [ 63.776183][ T4515] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 63.808358][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 63.843908][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 63.893131][ T4531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.900592][ T4531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.918981][ T4531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.926477][ T4531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.136312][ T4565] loop0: detected capacity change from 0 to 4096 [ 64.141725][ T4572] SELinux: Context @ is not valid (left unmapped). [ 64.213445][ T4579] loop5: detected capacity change from 0 to 1024 [ 64.239180][ T4583] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 64.266602][ T4579] EXT4-fs error (device loop5): ext4_xattr_set_entry:1665: inode #15: comm syz.5.339: corrupted xattr entries [ 64.287826][ T4579] EXT4-fs error (device loop5): ext4_xattr_block_set:2215: inode #15: comm syz.5.339: bad block 113 [ 64.389941][ T4603] lo speed is unknown, defaulting to 1000 [ 64.401758][ T4603] lo speed is unknown, defaulting to 1000 [ 64.416844][ T4603] lo speed is unknown, defaulting to 1000 [ 64.527314][ T4603] infiniband sz1: set active [ 64.535690][ T4603] infiniband sz1: added lo [ 64.540513][ T3788] lo speed is unknown, defaulting to 1000 [ 64.558328][ T4603] RDS/IB: sz1: added [ 64.565808][ T4603] smc: adding ib device sz1 with port count 1 [ 64.573501][ T4603] smc: ib device sz1 port 1 has no pnetid [ 64.580024][ T3788] lo speed is unknown, defaulting to 1000 [ 64.586755][ T4603] lo speed is unknown, defaulting to 1000 [ 64.632666][ T4603] lo speed is unknown, defaulting to 1000 [ 64.638683][ T4626] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 64.658275][ T4624] loop0: detected capacity change from 0 to 4096 [ 64.671887][ T4624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.681615][ T4603] lo speed is unknown, defaulting to 1000 [ 64.718804][ T4603] lo speed is unknown, defaulting to 1000 [ 64.747608][ T4624] geneve3: entered promiscuous mode [ 64.753082][ T4624] geneve3: entered allmulticast mode [ 64.780872][ T4603] lo speed is unknown, defaulting to 1000 [ 64.857005][ T4642] loop5: detected capacity change from 0 to 4096 [ 64.931643][ T4653] loop2: detected capacity change from 0 to 164 [ 64.951368][ T4653] iso9660: Bad value for 'mode' [ 64.977165][ T4657] lo speed is unknown, defaulting to 1000 [ 64.984723][ T4657] lo speed is unknown, defaulting to 1000 [ 64.997128][ T4653] lo speed is unknown, defaulting to 1000 [ 65.032801][ T4653] lo speed is unknown, defaulting to 1000 [ 65.148666][ T4671] loop5: detected capacity change from 0 to 1024 [ 65.522137][ T4693] loop2: detected capacity change from 0 to 4096 [ 65.542242][ T4693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.568619][ T4697] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 65.608876][ T4700] netlink: 'syz.3.384': attribute type 13 has an invalid length. [ 65.656764][ T4693] geneve2: entered promiscuous mode [ 65.662088][ T4693] geneve2: entered allmulticast mode [ 65.981867][ T364] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.000350][ T364] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.017152][ T4722] loop2: detected capacity change from 0 to 1024 [ 66.031199][ T364] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.040853][ T4722] EXT4-fs: Ignoring removed orlov option [ 66.048469][ T4724] netlink: 'syz.5.393': attribute type 13 has an invalid length. [ 66.054380][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 66.054399][ T29] audit: type=1400 audit(128.868:1713): avc: denied { read open } for pid=4721 comm="syz.2.392" path="/63/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.063391][ T364] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.096645][ T29] audit: type=1400 audit(128.908:1714): avc: denied { write } for pid=4721 comm="syz.2.392" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.146373][ T4733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4733 comm=syz.5.396 [ 66.253748][ T4733] loop5: detected capacity change from 0 to 8192 [ 66.283914][ T29] audit: type=1400 audit(129.098:1715): avc: denied { mount } for pid=4721 comm="syz.2.392" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.321224][ T29] audit: type=1326 audit(129.098:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf896efc9 code=0x7ffc0000 [ 66.344060][ T29] audit: type=1326 audit(129.098:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf896efc9 code=0x7ffc0000 [ 66.366885][ T29] audit: type=1326 audit(129.098:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fddf896efc9 code=0x7ffc0000 [ 66.390801][ T29] audit: type=1326 audit(129.098:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf896efc9 code=0x7ffc0000 [ 66.414344][ T29] audit: type=1326 audit(129.098:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4721 comm="syz.2.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf896efc9 code=0x7ffc0000 [ 66.497163][ T4756] netlink: 'syz.4.402': attribute type 13 has an invalid length. [ 66.710391][ T4764] netlink: 'syz.4.406': attribute type 13 has an invalid length. [ 66.913666][ T4776] loop3: detected capacity change from 0 to 1024 [ 66.980474][ T4782] rdma_rxe: rxe_newlink: failed to add lo [ 67.018067][ T29] audit: type=1326 audit(129.818:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf896efc9 code=0x7ffc0000 [ 67.041706][ T29] audit: type=1326 audit(129.818:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4781 comm="syz.2.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddf896efc9 code=0x7ffc0000 [ 67.095560][ T4789] loop2: detected capacity change from 0 to 128 [ 67.113265][ T4789] vfat: Unknown parameter 'uzf8' [ 67.197589][ T4793] loop2: detected capacity change from 0 to 512 [ 67.222647][ T4793] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #15: comm syz.2.415: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 67.254712][ T4793] EXT4-fs error (device loop2): ext4_quota_enable:7139: comm syz.2.415: Bad quota inode: 15, type: 2 [ 67.277780][ T4793] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 67.303856][ T4791] loop3: detected capacity change from 0 to 8192 [ 67.358343][ T4793] EXT4-fs (loop2): mount failed [ 67.382553][ T4798] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 67.700344][ T4805] loop5: detected capacity change from 0 to 4096 [ 67.707107][ T4805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.768625][ T4805] __nla_validate_parse: 24 callbacks suppressed [ 67.768646][ T4805] netlink: 32 bytes leftover after parsing attributes in process `syz.5.419'. [ 67.842819][ T4805] geneve2: entered promiscuous mode [ 67.848132][ T4805] geneve2: entered allmulticast mode [ 68.026311][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 68.193696][ T4830] loop2: detected capacity change from 0 to 4096 [ 68.210750][ T4830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.234806][ T4830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.428'. [ 68.290134][ T4830] geneve2: entered promiscuous mode [ 68.295447][ T4830] geneve2: entered allmulticast mode [ 68.394166][ T4844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4844 comm=syz.4.433 [ 68.414922][ T4840] loop3: detected capacity change from 0 to 4096 [ 68.457763][ T4835] loop0: detected capacity change from 0 to 512 [ 68.473646][ T4835] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 68.487292][ T4835] EXT4-fs (loop0): invalid journal inode [ 68.493213][ T4835] EXT4-fs (loop0): can't get journal size [ 68.510282][ T4835] EXT4-fs (loop0): 1 truncate cleaned up [ 68.537527][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 68.622030][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 68.632647][ T4854] loop0: detected capacity change from 0 to 1024 [ 68.920408][ T4880] loop0: detected capacity change from 0 to 4096 [ 69.201845][ T4894] tipc: Enabling of bearer rejected, failed to enable media [ 69.218907][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 69.238033][ T4894] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 69.361487][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 69.390301][ T4898] vlan0: entered allmulticast mode [ 69.395500][ T4898] veth0_vlan: entered allmulticast mode [ 69.485650][ T4901] loop0: detected capacity change from 0 to 1024 [ 69.525422][ T4905] loop5: detected capacity change from 0 to 1024 [ 69.536395][ T4905] EXT4-fs: Ignoring removed orlov option [ 69.643199][ T4910] netlink: 'syz.4.456': attribute type 13 has an invalid length. [ 69.651028][ T4910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 70.013754][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 70.048983][ T4930] netlink: 'syz.0.463': attribute type 13 has an invalid length. [ 70.056802][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 70.112655][ T4937] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 70.205937][ T4942] geneve2: entered promiscuous mode [ 70.211284][ T4942] geneve2: entered allmulticast mode [ 70.384099][ T3914] EXT4-fs unmount: 71 callbacks suppressed [ 70.384118][ T3914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.409782][ T4948] 9pnet_fd: Insufficient options for proto=fd [ 70.597634][ C1] hrtimer: interrupt took 46021 ns [ 70.659795][ T4950] xt_hashlimit: max too large, truncated to 1048576 [ 70.667125][ T4950] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 70.754252][ T4954] lo speed is unknown, defaulting to 1000 [ 70.778588][ T4954] lo speed is unknown, defaulting to 1000 [ 70.829968][ T4968] FAULT_INJECTION: forcing a failure. [ 70.829968][ T4968] name failslab, interval 1, probability 0, space 0, times 0 [ 70.842683][ T4968] CPU: 1 UID: 0 PID: 4968 Comm: syz.5.476 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.842767][ T4968] Tainted: [W]=WARN [ 70.842774][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.842787][ T4968] Call Trace: [ 70.842793][ T4968] [ 70.842799][ T4968] __dump_stack+0x1d/0x30 [ 70.842859][ T4968] dump_stack_lvl+0xe8/0x140 [ 70.842885][ T4968] dump_stack+0x15/0x1b [ 70.842905][ T4968] should_fail_ex+0x265/0x280 [ 70.842928][ T4968] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 70.842960][ T4968] should_failslab+0x8c/0xb0 [ 70.843045][ T4968] __kmalloc_noprof+0xa5/0x570 [ 70.843075][ T4968] ? tracepoint_probe_unregister+0x168/0x650 [ 70.843176][ T4968] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 70.843293][ T4968] tracepoint_probe_unregister+0x168/0x650 [ 70.843323][ T4968] ? __pfx_bpf_link_release+0x10/0x10 [ 70.843346][ T4968] bpf_probe_unregister+0x37/0x50 [ 70.843377][ T4968] bpf_raw_tp_link_release+0x27/0x50 [ 70.843441][ T4968] bpf_link_free+0xae/0x340 [ 70.843464][ T4968] ? __pfx_bpf_link_release+0x10/0x10 [ 70.843488][ T4968] bpf_link_release+0x45/0x60 [ 70.843512][ T4968] __fput+0x29b/0x650 [ 70.843538][ T4968] ____fput+0x1c/0x30 [ 70.843560][ T4968] task_work_run+0x131/0x1a0 [ 70.843600][ T4968] exit_to_user_mode_loop+0xed/0x110 [ 70.843626][ T4968] do_syscall_64+0x1d6/0x200 [ 70.843648][ T4968] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.843683][ T4968] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 70.843789][ T4968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.843817][ T4968] RIP: 0033:0x7f25c2ccefc9 [ 70.843835][ T4968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.843862][ T4968] RSP: 002b:00007f25c1737038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 70.843954][ T4968] RAX: 0000000000000000 RBX: 00007f25c2f25fa0 RCX: 00007f25c2ccefc9 [ 70.843966][ T4968] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 70.843991][ T4968] RBP: 00007f25c1737090 R08: 0000000000000000 R09: 0000000000000000 [ 70.844006][ T4968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.844018][ T4968] R13: 00007f25c2f26038 R14: 00007f25c2f25fa0 R15: 00007ffdaa841018 [ 70.844036][ T4968] [ 71.101775][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 71.101827][ T29] audit: type=1400 audit(133.918:1876): avc: denied { map } for pid=4969 comm="syz.3.477" path="socket:[10828]" dev="sockfs" ino=10828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 71.164322][ T4978] loop0: detected capacity change from 0 to 1024 [ 71.182206][ T4978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.198898][ T4984] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.215312][ T4978] EXT4-fs error (device loop0): ext4_xattr_set_entry:1665: inode #15: comm syz.0.480: corrupted xattr entries [ 71.228438][ T4978] EXT4-fs error (device loop0): ext4_xattr_block_set:2215: inode #15: comm syz.0.480: bad block 113 [ 71.269600][ T4984] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.270641][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.344896][ T29] audit: type=1400 audit(134.158:1877): avc: denied { read } for pid=4997 comm="syz.0.485" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.367260][ T29] audit: type=1400 audit(134.158:1878): avc: denied { open } for pid=4997 comm="syz.0.485" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.367295][ T29] audit: type=1400 audit(134.158:1879): avc: denied { ioctl } for pid=4997 comm="syz.0.485" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.379523][ T4984] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.449053][ T4984] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.513648][ T5004] loop3: detected capacity change from 0 to 8192 [ 71.520279][ T319] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.548069][ T319] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.566458][ T319] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.584812][ T5008] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 71.593659][ T319] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.594361][ T29] audit: type=1400 audit(134.398:1880): avc: denied { cpu } for pid=5007 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.626273][ T5010] loop5: detected capacity change from 0 to 256 [ 71.782183][ T29] audit: type=1400 audit(134.598:1881): avc: denied { mounton } for pid=5009 comm="syz.5.489" path="/71/file1/file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 71.782989][ T3426] kernel write not supported for file bpf-prog (pid: 3426 comm: kworker/1:5) [ 71.898079][ T5018] loop0: detected capacity change from 0 to 4096 [ 71.909446][ T5018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.929367][ T5018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.975564][ T5014] lo speed is unknown, defaulting to 1000 [ 71.983355][ T5022] loop3: detected capacity change from 0 to 1024 [ 71.989839][ T5018] geneve3: entered promiscuous mode [ 71.995089][ T5018] geneve3: entered allmulticast mode [ 71.999950][ T5022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.016361][ T5014] lo speed is unknown, defaulting to 1000 [ 72.018465][ T5022] EXT4-fs error (device loop3): ext4_xattr_set_entry:1665: inode #15: comm syz.3.493: corrupted xattr entries [ 72.034971][ T5022] EXT4-fs error (device loop3): ext4_xattr_block_set:2215: inode #15: comm syz.3.493: bad block 113 [ 72.047306][ T29] audit: type=1326 audit(134.858:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 72.070097][ T29] audit: type=1326 audit(134.858:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 72.093251][ T29] audit: type=1326 audit(134.858:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 72.116023][ T29] audit: type=1326 audit(134.858:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5017 comm="syz.0.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fce072aefc9 code=0x7ffc0000 [ 72.116023][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.164845][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.262127][ T5034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5034 comm=syz.0.497 [ 72.299368][ T5043] loop3: detected capacity change from 0 to 512 [ 72.312967][ T5043] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: comm syz.3.496: inode #196608: comm syz.3.496: iget: illegal inode # [ 72.329103][ T5043] EXT4-fs (loop3): Remounting filesystem read-only [ 72.335671][ T5043] EXT4-fs (loop3): no journal found [ 72.340985][ T5043] EXT4-fs (loop3): can't get journal size [ 72.347905][ T5043] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 72.357632][ T5043] EXT4-fs (loop3): failed to initialize system zone (-22) [ 72.364983][ T5043] EXT4-fs (loop3): mount failed [ 72.494380][ T5034] loop0: detected capacity change from 0 to 8192 [ 73.283995][ T5060] __nla_validate_parse: 4 callbacks suppressed [ 73.284015][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.5.499'. [ 73.492272][ T5067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5067 comm=syz.3.504 [ 73.704116][ T5070] netlink: 'syz.4.506': attribute type 13 has an invalid length. [ 73.712060][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 73.736220][ T5072] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 73.748733][ T5068] loop3: detected capacity change from 0 to 8192 [ 73.799854][ T5076] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 73.811943][ T5076] FAULT_INJECTION: forcing a failure. [ 73.811943][ T5076] name failslab, interval 1, probability 0, space 0, times 0 [ 73.824686][ T5076] CPU: 1 UID: 0 PID: 5076 Comm: syz.0.508 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 73.824726][ T5076] Tainted: [W]=WARN [ 73.824732][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.824747][ T5076] Call Trace: [ 73.824756][ T5076] [ 73.824766][ T5076] __dump_stack+0x1d/0x30 [ 73.824794][ T5076] dump_stack_lvl+0xe8/0x140 [ 73.824872][ T5076] dump_stack+0x15/0x1b [ 73.824951][ T5076] should_fail_ex+0x265/0x280 [ 73.824996][ T5076] should_failslab+0x8c/0xb0 [ 73.825078][ T5076] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 73.825114][ T5076] ? __alloc_skb+0x101/0x320 [ 73.825149][ T5076] ? __rtnl_unlock+0x95/0xb0 [ 73.825267][ T5076] __alloc_skb+0x101/0x320 [ 73.825305][ T5076] netlink_ack+0xfd/0x500 [ 73.825351][ T5076] netlink_rcv_skb+0x192/0x220 [ 73.825390][ T5076] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.825436][ T5076] rtnetlink_rcv+0x1c/0x30 [ 73.825463][ T5076] netlink_unicast+0x5c0/0x690 [ 73.825565][ T5076] netlink_sendmsg+0x58b/0x6b0 [ 73.825586][ T5076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.825680][ T5076] __sock_sendmsg+0x145/0x180 [ 73.825703][ T5076] ____sys_sendmsg+0x31e/0x4e0 [ 73.825796][ T5076] ___sys_sendmsg+0x17b/0x1d0 [ 73.825859][ T5076] __x64_sys_sendmsg+0xd4/0x160 [ 73.825977][ T5076] x64_sys_call+0x191e/0x3000 [ 73.826000][ T5076] do_syscall_64+0xd2/0x200 [ 73.826074][ T5076] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.826108][ T5076] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 73.826163][ T5076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.826191][ T5076] RIP: 0033:0x7fce072aefc9 [ 73.826287][ T5076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.826304][ T5076] RSP: 002b:00007fce05d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.826327][ T5076] RAX: ffffffffffffffda RBX: 00007fce07505fa0 RCX: 00007fce072aefc9 [ 73.826343][ T5076] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 73.826358][ T5076] RBP: 00007fce05d17090 R08: 0000000000000000 R09: 0000000000000000 [ 73.826374][ T5076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.826389][ T5076] R13: 00007fce07506038 R14: 00007fce07505fa0 R15: 00007ffcb53ff678 [ 73.826441][ T5076] [ 74.165229][ T5081] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.241334][ T5081] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.281401][ T5081] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.332255][ T5081] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.400181][ T364] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.422291][ T364] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.431119][ T364] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.439456][ T364] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.514582][ T5104] loop0: detected capacity change from 0 to 4096 [ 74.534345][ T5102] loop3: detected capacity change from 0 to 8192 [ 74.554884][ T5104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.729198][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 74.738870][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 74.889906][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.922281][ T5132] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.922458][ T5134] netlink: 'syz.4.530': attribute type 13 has an invalid length. [ 74.940000][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 74.989073][ T5139] loop3: detected capacity change from 0 to 512 [ 74.997093][ T5139] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.3.532: corrupted xattr block 95: invalid header [ 75.011259][ T5139] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 75.024743][ T5139] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.532: bg 0: block 7: invalid block bitmap [ 75.037540][ T5139] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 75.046484][ T5139] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2967: inode #11: comm syz.3.532: corrupted xattr block 95: invalid header [ 75.060282][ T5139] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 75.069751][ T5139] EXT4-fs (loop3): 1 orphan inode deleted [ 75.076046][ T5139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.099818][ T5132] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.110802][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.128977][ T5144] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 75.139648][ T5132] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.172493][ T5148] loop3: detected capacity change from 0 to 1024 [ 75.189552][ T5148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.206984][ T5148] EXT4-fs error (device loop3): ext4_xattr_set_entry:1665: inode #15: comm syz.3.535: corrupted xattr entries [ 75.219028][ T5148] EXT4-fs error (device loop3): ext4_xattr_block_set:2215: inode #15: comm syz.3.535: bad block 113 [ 75.231623][ T5132] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.258159][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.323513][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 75.332714][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 75.382234][ T5172] netlink: 'syz.4.544': attribute type 13 has an invalid length. [ 75.390216][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 75.686826][ T5178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'. [ 75.705474][ T5180] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 76.123002][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 76.222323][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 76.222340][ T29] audit: type=1326 audit(139.038:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7479efc9 code=0x7ffc0000 [ 76.298417][ T29] audit: type=1326 audit(139.038:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7479efc9 code=0x7ffc0000 [ 76.329507][ T5205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.341555][ T5205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.808216][ T5182] syz.2.548 (5182) used greatest stack depth: 6184 bytes left [ 76.888581][ T29] audit: type=1400 audit(139.698:1986): avc: denied { map } for pid=5220 comm="syz.2.564" path="socket:[10218]" dev="sockfs" ino=10218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.911437][ T29] audit: type=1400 audit(139.698:1987): avc: denied { read } for pid=5220 comm="syz.2.564" path="socket:[10218]" dev="sockfs" ino=10218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.954776][ T29] audit: type=1326 audit(139.768:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526ceefc9 code=0x7ffc0000 [ 76.977824][ T29] audit: type=1326 audit(139.768:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526ceefc9 code=0x7ffc0000 [ 77.000870][ T29] audit: type=1326 audit(139.768:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe526ceefc9 code=0x7ffc0000 [ 77.023635][ T29] audit: type=1326 audit(139.768:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526ceefc9 code=0x7ffc0000 [ 77.046415][ T29] audit: type=1326 audit(139.768:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526ceefc9 code=0x7ffc0000 [ 77.069247][ T29] audit: type=1326 audit(139.768:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe526ceefc9 code=0x7ffc0000 [ 77.134812][ T5232] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 77.318434][ T5255] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 78.112651][ T5284] vcan0: entered allmulticast mode [ 78.121277][ T5279] vcan0: left allmulticast mode [ 78.175832][ T5290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5290 comm=syz.3.591 [ 78.227937][ T5290] loop3: detected capacity change from 0 to 8192 [ 78.355570][ T5295] ================================================================== [ 78.363770][ T5295] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 78.370927][ T5295] [ 78.373293][ T5295] write to 0xffff888121017390 of 2 bytes by task 5290 on cpu 0: [ 78.380951][ T5295] fat16_ent_put+0x28/0x60 [ 78.385398][ T5295] fat_ent_write+0x6c/0xe0 [ 78.389837][ T5295] fat_chain_add+0x15d/0x440 [ 78.394448][ T5295] fat_get_block+0x46c/0x5e0 [ 78.399147][ T5295] __block_write_begin_int+0x400/0xf90 [ 78.404633][ T5295] cont_write_begin+0x5fc/0x970 [ 78.409520][ T5295] fat_write_begin+0x4f/0xe0 [ 78.414148][ T5295] cont_write_begin+0x1b0/0x970 [ 78.419035][ T5295] fat_write_begin+0x4f/0xe0 [ 78.423655][ T5295] generic_cont_expand_simple+0xb0/0x150 [ 78.429330][ T5295] fat_cont_expand+0x3e/0x170 [ 78.434038][ T5295] fat_setattr+0x2a5/0x8a0 [ 78.438484][ T5295] notify_change+0x872/0x8f0 [ 78.443106][ T5295] do_ftruncate+0x34b/0x450 [ 78.447641][ T5295] __x64_sys_ftruncate+0x68/0xc0 [ 78.452614][ T5295] x64_sys_call+0x2d61/0x3000 [ 78.457319][ T5295] do_syscall_64+0xd2/0x200 [ 78.461955][ T5295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.468071][ T5295] [ 78.470412][ T5295] read to 0xffff888121017200 of 512 bytes by task 5295 on cpu 1: [ 78.478159][ T5295] fat_mirror_bhs+0x1df/0x320 [ 78.482864][ T5295] fat_ent_write+0xd0/0xe0 [ 78.487312][ T5295] fat_chain_add+0x15d/0x440 [ 78.492022][ T5295] fat_get_block+0x46c/0x5e0 [ 78.496669][ T5295] __block_write_begin_int+0x400/0xf90 [ 78.502162][ T5295] cont_write_begin+0x5fc/0x970 [ 78.507060][ T5295] fat_write_begin+0x4f/0xe0 [ 78.511682][ T5295] generic_perform_write+0x184/0x490 [ 78.517002][ T5295] __generic_file_write_iter+0x9e/0x120 [ 78.522590][ T5295] generic_file_write_iter+0x8d/0x2f0 [ 78.528044][ T5295] do_iter_readv_writev+0x4a1/0x540 [ 78.533298][ T5295] vfs_writev+0x2df/0x8b0 [ 78.537676][ T5295] __se_sys_pwritev2+0xfc/0x1c0 [ 78.542561][ T5295] __x64_sys_pwritev2+0x67/0x80 [ 78.547449][ T5295] x64_sys_call+0x2c59/0x3000 [ 78.552139][ T5295] do_syscall_64+0xd2/0x200 [ 78.556653][ T5295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.562618][ T5295] [ 78.564964][ T5295] Reported by Kernel Concurrency Sanitizer on: [ 78.571119][ T5295] CPU: 1 UID: 0 PID: 5295 Comm: syz.3.591 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.582332][ T5295] Tainted: [W]=WARN [ 78.586162][ T5295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.596223][ T5295] ================================================================== [ 79.159823][ T5061] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.529492][ T5132] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0