last executing test programs: 3.585774502s ago: executing program 1 (id=184): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00 \x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000300000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f7ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r4, &(0x7f0000000500)=ANY=[@ANYRES16=r1], 0x67) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.718115504s ago: executing program 1 (id=198): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}], 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setpriority(0x3, 0x0, 0x0) 2.050820025s ago: executing program 2 (id=208): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00 \x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000300000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f7ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r4, &(0x7f0000000500)=ANY=[@ANYRES16=r1], 0x67) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.751701936s ago: executing program 0 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000300)={0xfffffffd, 0x2, 'client0\x00', 0x1, "7e7e8a2b0a359995", "3b25d78e50d5db3dcf3ff819bbf0b9d075c6ae974227f2436640bd0c2f5720ee", 0x2, 0xfff}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0xc05c5340, &(0x7f0000000040)) tkill(r4, 0x7) 1.594861307s ago: executing program 4 (id=214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0xbfbfc7ed1b4522eb, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x0, 0x0, 0x2}}, 0x18) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)='#', 0x206c}], 0x1}}], 0x1, 0x0) 1.246040447s ago: executing program 0 (id=219): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x1, 0x0, 0xe0, 0xfa5, 0x0}) 1.202971097s ago: executing program 3 (id=220): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x1, 0x5, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x2f, 0x0, @remote, @rand_addr=0x64010100}}}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120000000000bd6b6e000000000006000000000000000000000000000000ac1e0001000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000fc00000000000000000000ed24000000000000000000000008001900"], 0xe0}}, 0x10044) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1.202584817s ago: executing program 2 (id=221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1.182241227s ago: executing program 2 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000000074d1399ac90f358de0063c12c756bb98001a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, 0x0, 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) r4 = eventfd2(0x7d, 0x80801) read$eventfd(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r5 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x1001f0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x10}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20) fallocate(r5, 0x3, 0x0, 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7ce, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh]}}}}}}}, 0x0) 1.156882717s ago: executing program 0 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="51030107"], 0x4) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x10, 0x4) r6 = fcntl$getown(r5, 0x9) get_robust_list(r6, &(0x7f0000000080)=&(0x7f0000000040), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0xf2, 0x4, 0x9, 0x20021, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket(0x11, 0x800000003, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getchain={0x2c, 0x11, 0x839, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10}, [{0x8, 0xb, 0x4}]}, 0x2c}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x13, 0x8, 0x1, 0x5, 0x20088, r7, 0x8ca, '\x00', r10, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.156426357s ago: executing program 3 (id=224): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0xbfbfc7ed1b4522eb, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x0, 0x0, 0x2}}, 0x18) sendmmsg$inet6(r2, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)='#', 0x206c}], 0x1}}], 0x1, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x3c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x8040004}, 0x20005890) 1.087479437s ago: executing program 2 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000020000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000000040)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.006825357s ago: executing program 1 (id=226): r0 = getpid() setreuid(0xee00, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x39000) setns(r1, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0], 0x1}, 0x58) 808.530898ms ago: executing program 2 (id=227): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000038ffffff00000000000000950000e308000490a8028095af00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcc0984f9ead32b32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = io_uring_setup(0x7975, &(0x7f00000002c0)={0x0, 0x659, 0x40, 0x0, 0x328}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x564a0000) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000400)=[@ioring_restriction_register_op={0x0, 0x10}], 0x1) sched_getattr(r0, &(0x7f0000000180)={0x38}, 0x38, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x8, &(0x7f00000031c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0xffffff59) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_pgetevents(0x0, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 772.742618ms ago: executing program 0 (id=228): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006a096f77b6073729", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = io_uring_setup(0x67ab, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x2, 0x0, 0x10000000}) io_uring_enter(r6, 0x0, 0x0, 0xf, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) listen(r4, 0x0) shutdown(r3, 0x0) connect$unix(r3, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r8 = accept(r4, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000d00)='\x00', 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r2}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fdno=\x00\x00\x00\x00', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',\x00']) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 749.615538ms ago: executing program 1 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004800c000680080004"], 0x34}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x12, r5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x1, 0x8}]}}, 0x0, 0x36, 0x0, 0xa, 0xfffffffd, 0x0, @void, @value}, 0x28) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 748.835998ms ago: executing program 2 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000050000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r4, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc)=0x0) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x40000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r8, 0x0, 0xb) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) splice(r7, 0x0, r10, 0x0, 0x80, 0x4) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r8) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f00000002c0)=""/104, 0x68}], 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r13, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private0, @empty, 0xa, 0x2000}}) ioctl$KDFONTOP_GET(r12, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0xfffffffc, 0x8000000, 0x0}) ioprio_set$pid(0x1, 0x0, 0x0) 703.752688ms ago: executing program 1 (id=231): mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xe, 0x10, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000fc0)=[{{0x0, 0xa4, 0x0, 0x0, 0x0, 0x0, 0xa3d4a46ee6da87a8}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20004000}}], 0x2, 0x40) 612.046528ms ago: executing program 1 (id=232): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00 \x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000300000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f7ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r4, &(0x7f0000000500)=ANY=[@ANYRES16=r1], 0x67) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 611.501908ms ago: executing program 0 (id=233): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 605.778988ms ago: executing program 0 (id=234): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0xb57009c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0x5, 0x8) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = dup(r3) inotify_rm_watch(r5, r4) inotify_rm_watch(r1, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 603.140538ms ago: executing program 4 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000000074d1399ac90f358de0063c12c756bb98001a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, 0x0, 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_generic(0x10, 0x3, 0x10) r4 = eventfd2(0x7d, 0x80801) read$eventfd(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r5 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r5, 0x0, 0x0, 0x1001f0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x10}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20) fallocate(r5, 0x3, 0x0, 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7ce, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh]}}}}}}}, 0x0) 533.771599ms ago: executing program 4 (id=236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (fail_nth: 1) 285.012679ms ago: executing program 4 (id=237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="51030107"], 0x4) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x10, 0x4) r6 = fcntl$getown(r5, 0x9) get_robust_list(r6, &(0x7f0000000080)=&(0x7f0000000040), &(0x7f00000000c0)=0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0xf2, 0x4, 0x9, 0x20021, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket(0x11, 0x800000003, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getchain={0x2c, 0x11, 0x839, 0x0, 0x25dfdbfb, {}, [{0x8, 0xb, 0x4}]}, 0x2c}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x13, 0x8, 0x1, 0x5, 0x20088, r7, 0x8ca, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 284.495269ms ago: executing program 3 (id=238): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="54020000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x254}}, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 248.684069ms ago: executing program 3 (id=239): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000c8010000090a010400000000000000ea0100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000218c0111800b00010074617267657400007c0102800400030008000240000000006b0101"], 0x210}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) unshare(0x22020400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRES8=r5], 0x27) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x5}, 0x10000, 0x4000000000000, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 102.683349ms ago: executing program 3 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000fc2200f0420000000e0001006e6574646576735d65696d00009e160002006e657464657673696d7300000000070083000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000a268c82c0148946a0c64234fcbd84fec7c661554bc020ad3474d24957028c1d071f2a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x411484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) io_setup(0x5ff, &(0x7f0000000040)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x475da801696c7497, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) io_submit(r6, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r5}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r4, 0x0, 0x0, 0x3477}]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r10, 0xffffffffffffffff, 0x20, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32=r11, @ANYRES32=r9, @ANYRES16=r10, @ANYRES32=r10, @ANYRES64, @ANYBLOB="95136d274843e6e9692b44d762d0865713db5dc1ac04c974d69a80eec302bd26487fd743190d221c9ad2bc57f5ac60b1ac00145634c528ab3649f04717503bc07428977b8373b813fe2e2ca3b2dcfa117be56f09a89990630c3de52d20a27adda8d0f732bbfcce7158df921ed6c756cbc48c4476c78114b5331ec8e908defcf522680afb163e1e39ef312397a71ce9cf79825bb46f10297b588b68f3819677168728a65750f54e83c1c532513e1d5cdc414c4396d771a17260aefcd3"], 0x24}, 0x1, 0x0, 0x0, 0x88c4}, 0x896) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kfree\x00', r12}, 0x18) r13 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r13, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x5dc, @local}, 0x18, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x1, 0x0, 0x0, 0x2000}, 0x60) r14 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r14, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_1\x00', 0x10) sendmmsg$inet(r14, &(0x7f0000001a40)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000040)="a905000000007464005cfe9e0574a2000000003552ff7fc164c65ba7e0a4fec85009d239", 0x24}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}], 0x20}}, {{&(0x7f0000000640)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000940)="09371d932cce42f5febcdf946156c650930bd9092a46e3d6e6940d0156472fc72ff25459a71e996a268c608c35e52c90c2181fbee9bb7728c00118e96201703e78c220af2f78ec2743ff063c7d6c0c3c7edcc9846a6f75e7f3603b53d4643429c6ff1a160875f5c2f38ca98d58609c608c69870720a025ca4da9b7b6b0fce72b4acdc4bebff01543fcf4c54355e7e267168f326b1993a0f2262213dbf4ce3e15370bf7", 0xa3}, {&(0x7f0000000700)="909550c208c4052eebb017cd4c1071c98b8cdcda95d690cff810", 0x1a}, {&(0x7f0000000a00)="52b7e5ff3e94e28b4199be0575c61763c5137ea5a8db6adab550daa1d4ef38e2856da3aeae1013b396f8c4f03cc0bc8ddbf2436089b962e8102cef5f4fea6152c72ef59b1efbdc68130087037c5cae728810721c3c501f83f255086539e53457d64bb7d5cf87bf793ff51bb181a342bfb947b3730ceaab542324e82ee5921ca08bb2474741b18505d479c458ad9ffc957318443da34e5960d8f6a5c7b13029ce2bf31301991dc6bc0b9d98cdbe5acb4204b24b6bfffd985d724b7bd885daf3ad01a01dc7713a8a2d927535d02a84cb60c9e79dc374acfbec51d90e457b9f7006cb07df202e96946556d99385a05cf08fb272040364a017b26041c011026c", 0xfe}, {&(0x7f0000000b00)="426cba13df52b31b19b57b8ebc12e297bf66209bb9624e0d64a0796390dcdb8120c534ba2962c82f0a549196fe8d4304cc2f67462e5a36e5920828d3e485816634484413aac24ae264d42c2c425168", 0x4f}, {&(0x7f0000000b80)="dbe1bb6b244a2024a7b37f2d5589ebc0bbc7683d933c451b0b789f29db9074daf32529347795270b10790a3e047f17646a87d726a5cdae99831c3a2bf1eae7b5f042c4d4ba6d92c96762e5bd90c1425a393c5f2eeec22ebdf55abd0a33f871d7eae82e2ac81353cd60fdb0ae24ea234bb5918c5d249258770c9a9efab196bd1845887353739094e57348eca57a8f42d3c40673b3386abde64ac45769f5713a7cc6138ed2e739bb0ebc4c9f7607982867c7f7f049a50b", 0xb6}], 0x5}}, {{&(0x7f0000000cc0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000d00)="641701e1c55c81d0a2", 0x9}, {&(0x7f0000000d40)="1c907ea5a3f446078ff2c248f514c0b75bdd3d3dbdfe486ac9a1f572081e5dc5b808371f3b137eb93fa13195f22fbfd420ee4099dbb15de4cc1340a41f049ff46fc346adbd08259a6dcae2f268079068973242f2e417e6effab182af493423880338ddca6f591848d036981af6c378ed23e9c037d2bc0de96d7d8cf320e082d3ec1f2de8bbf49646c3105745a1345e968a5ce22043ca94f6db8f14e07eaf47a672a8a76abd2e054e04", 0xa9}, {&(0x7f0000000e00)="6b9d97589f3de181487b865c9fb63e8664dd0459f60d7828ed54ec931245821892d37f761360d48b2f0f84977bed2595e8853c16e4d94bdd85d189cc1617e17bb9e39367c48f4dbbf0869962fb9119f45741b7d87293ea297f99e82b6590bc4ab7404b4856187dd0", 0x68}], 0x3, &(0x7f0000000fc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x56}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0xd0}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001900)=[{&(0x7f0000001100)}], 0x1, &(0x7f0000001b80)=[@ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x94, 0x8, "f539724319a9"}, @lsrr={0x83, 0x17, 0xbc, [@multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @local, @multicast1, @multicast1]}, @end, @timestamp={0x44, 0x14, 0xde, 0x0, 0xb, [0x4, 0xffffffff, 0x7, 0x9]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14}}], 0x90}}], 0x5, 0x24040080) r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r15, 0x1000000, 0x0) 74.184069ms ago: executing program 4 (id=241): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0xb, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xfffffffffffffe3f, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x13, &(0x7f0000001140), 0x73, 0x10, &(0x7f0000000fc0), &(0x7f0000000500), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000540)}}, 0xfffffffffffffd51) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) fcntl$setlease(r2, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x0) fcntl$setlease(r2, 0x400, 0x0) 3.150679ms ago: executing program 3 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x15, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x8, 0xe, 0xe, 0x2, 0x9}, @generic={0x86, 0x5, 0x8, 0x7, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x100, 0x8}, 0x10, 0x29f9c, r1, 0x8, &(0x7f0000000300)=[0xffffffffffffffff, r0, r1], &(0x7f0000000340)=[{0x0, 0x2, 0x9, 0x2}, {0x5, 0x3, 0xd, 0xc}, {0x4, 0x5, 0xe, 0x2}, {0x1, 0x2, 0x0, 0x8}, {0x3, 0x3, 0x3, 0x9}, {0x4, 0x5, 0x6, 0x7}, {0x0, 0x4, 0xb, 0xc}, {0x4, 0x2, 0xb, 0xc}], 0x10, 0x4, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffccc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='kfree\x00', r10, 0x0, 0x8143}, 0x18) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781a2c5ad74258e5189ffa7574faca9e41b6d225ca2f737d7182c1e8e9d2a956d16e45228bcbbc52d2560741bd3d102bc68dc9b7c7e79152145f0014defd4bd20c3d27f4a7141a"], 0x2000) r12 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r12, &(0x7f00000004c0)=ANY=[@ANYBLOB='system_u:object_r:ptch0 unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 0'], 0x67) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r13}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 0s ago: executing program 4 (id=243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="29d661e6ecfa0968813e30579e1f0000005e00feffffffffffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xba20cd33fb9585ea, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) r2 = socket(0x11, 0x800000003, 0x0) (async) r3 = socket(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x59) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000640), 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ftruncate(r4, 0xc17a) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/uevent_seqnum', 0x50300, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x700, 0x12) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) fadvise64(r0, 0xe2, 0x0, 0x3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) (async) unshare(0x2040400) (async) r9 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) (async) unshare(0x2000400) (async) fsmount(r9, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 18.871837][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 18.871856][ T29] audit: type=1400 audit(1733500970.748:76): avc: denied { transition } for pid=3176 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.875945][ T29] audit: type=1400 audit(1733500970.748:77): avc: denied { noatsecure } for pid=3176 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.878798][ T29] audit: type=1400 audit(1733500970.748:78): avc: denied { write } for pid=3176 comm="sh" path="pipe:[892]" dev="pipefs" ino=892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 18.882024][ T29] audit: type=1400 audit(1733500970.748:79): avc: denied { rlimitinh } for pid=3176 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.884685][ T29] audit: type=1400 audit(1733500970.748:80): avc: denied { siginh } for pid=3176 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.200194][ T29] audit: type=1400 audit(1733500973.078:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 27.091861][ T29] audit: type=1400 audit(1733500978.968:82): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.093113][ T3286] cgroup: Unknown subsys name 'net' [ 27.114592][ T29] audit: type=1400 audit(1733500978.968:83): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.142048][ T29] audit: type=1400 audit(1733500978.998:84): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.297382][ T3286] cgroup: Unknown subsys name 'cpuset' [ 27.303633][ T3286] cgroup: Unknown subsys name 'rlimit' [ 27.454089][ T29] audit: type=1400 audit(1733500979.328:85): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.480127][ T29] audit: type=1400 audit(1733500979.328:86): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.500644][ T29] audit: type=1400 audit(1733500979.328:87): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.505162][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.521049][ T29] audit: type=1400 audit(1733500979.328:88): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.549978][ T29] audit: type=1400 audit(1733500979.338:89): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.574865][ T29] audit: type=1400 audit(1733500979.338:90): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.592956][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.598252][ T29] audit: type=1400 audit(1733500979.408:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.747731][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 28.758273][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 28.807575][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.818867][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 28.864638][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 28.882231][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.889422][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.896846][ T3306] bridge_slave_0: entered allmulticast mode [ 28.903344][ T3306] bridge_slave_0: entered promiscuous mode [ 28.917882][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.924984][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.932389][ T3296] bridge_slave_0: entered allmulticast mode [ 28.938974][ T3296] bridge_slave_0: entered promiscuous mode [ 28.945486][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.952922][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.960299][ T3306] bridge_slave_1: entered allmulticast mode [ 28.966972][ T3306] bridge_slave_1: entered promiscuous mode [ 28.980588][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.987896][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.995294][ T3296] bridge_slave_1: entered allmulticast mode [ 29.001896][ T3296] bridge_slave_1: entered promiscuous mode [ 29.037895][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.053267][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.060448][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.067725][ T3297] bridge_slave_0: entered allmulticast mode [ 29.074157][ T3297] bridge_slave_0: entered promiscuous mode [ 29.091191][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.101280][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.112601][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.119761][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.126996][ T3297] bridge_slave_1: entered allmulticast mode [ 29.133471][ T3297] bridge_slave_1: entered promiscuous mode [ 29.145495][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.175647][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.182760][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.190468][ T3301] bridge_slave_0: entered allmulticast mode [ 29.196996][ T3301] bridge_slave_0: entered promiscuous mode [ 29.219128][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.228378][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.235516][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.242787][ T3301] bridge_slave_1: entered allmulticast mode [ 29.249655][ T3301] bridge_slave_1: entered promiscuous mode [ 29.261901][ T3306] team0: Port device team_slave_0 added [ 29.267705][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.275168][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.282741][ T3303] bridge_slave_0: entered allmulticast mode [ 29.289294][ T3303] bridge_slave_0: entered promiscuous mode [ 29.296599][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.310903][ T3296] team0: Port device team_slave_0 added [ 29.317654][ T3296] team0: Port device team_slave_1 added [ 29.323997][ T3306] team0: Port device team_slave_1 added [ 29.329731][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.336877][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.344037][ T3303] bridge_slave_1: entered allmulticast mode [ 29.350431][ T3303] bridge_slave_1: entered promiscuous mode [ 29.389415][ T3297] team0: Port device team_slave_0 added [ 29.396202][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.406109][ T3297] team0: Port device team_slave_1 added [ 29.417147][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.424184][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.450214][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.466455][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.481002][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.490460][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.497551][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.523547][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.534638][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.541654][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.567774][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.578989][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.585959][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.612068][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.623844][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.652917][ T3301] team0: Port device team_slave_0 added [ 29.663739][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.670759][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.697552][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.708926][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.715975][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.742291][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.754851][ T3301] team0: Port device team_slave_1 added [ 29.766831][ T3303] team0: Port device team_slave_0 added [ 29.796759][ T3303] team0: Port device team_slave_1 added [ 29.808665][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.815634][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.841623][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.863628][ T3296] hsr_slave_0: entered promiscuous mode [ 29.869676][ T3296] hsr_slave_1: entered promiscuous mode [ 29.886037][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.893158][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.919174][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.930422][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.937468][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.963523][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.975978][ T3306] hsr_slave_0: entered promiscuous mode [ 29.982070][ T3306] hsr_slave_1: entered promiscuous mode [ 29.987932][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.995500][ T3306] Cannot create hsr debugfs directory [ 30.017416][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.024402][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.050582][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.081611][ T3297] hsr_slave_0: entered promiscuous mode [ 30.087874][ T3297] hsr_slave_1: entered promiscuous mode [ 30.093732][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.101350][ T3297] Cannot create hsr debugfs directory [ 30.135396][ T3301] hsr_slave_0: entered promiscuous mode [ 30.141572][ T3301] hsr_slave_1: entered promiscuous mode [ 30.147571][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.155191][ T3301] Cannot create hsr debugfs directory [ 30.182116][ T3303] hsr_slave_0: entered promiscuous mode [ 30.188339][ T3303] hsr_slave_1: entered promiscuous mode [ 30.194267][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.201998][ T3303] Cannot create hsr debugfs directory [ 30.363387][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.372280][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.380847][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.391808][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.411283][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.420035][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.429793][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.438660][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.466035][ T3297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.475041][ T3297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.484630][ T3297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.499856][ T3297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.527391][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.538213][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.547813][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.579206][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.597085][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.610982][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.619628][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.628645][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.650454][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.670419][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.683985][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.691267][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.705954][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.719255][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.726470][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.740542][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.755586][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.762694][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.780860][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.787966][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.805435][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.820011][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.848766][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.861972][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.869081][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.883635][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.894120][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.929190][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.946640][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.953733][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.989026][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.999383][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.014168][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.025149][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.032335][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.041542][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.048618][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.075492][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.085995][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.112715][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.164621][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.177446][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.184530][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.204571][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.211736][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.245850][ T3296] veth0_vlan: entered promiscuous mode [ 31.257961][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.270977][ T3296] veth1_vlan: entered promiscuous mode [ 31.278666][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.307397][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.343742][ T3296] veth0_macvtap: entered promiscuous mode [ 31.364717][ T3296] veth1_macvtap: entered promiscuous mode [ 31.386035][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.401617][ T3306] veth0_vlan: entered promiscuous mode [ 31.409337][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.422388][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.432058][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.440914][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.449675][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.458538][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.481529][ T3306] veth1_vlan: entered promiscuous mode [ 31.523136][ T3306] veth0_macvtap: entered promiscuous mode [ 31.548310][ T3306] veth1_macvtap: entered promiscuous mode [ 31.559774][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.563874][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.585035][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.604680][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.612317][ T3303] veth0_vlan: entered promiscuous mode [ 31.623191][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.633716][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.644839][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.653651][ T3303] veth1_vlan: entered promiscuous mode [ 31.670545][ T3303] veth0_macvtap: entered promiscuous mode [ 31.690367][ T3301] veth0_vlan: entered promiscuous mode [ 31.701544][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.710391][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.719320][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.728139][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.741171][ T3303] veth1_macvtap: entered promiscuous mode [ 31.750713][ T3301] veth1_vlan: entered promiscuous mode [ 31.774509][ T3297] veth0_vlan: entered promiscuous mode [ 31.781993][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.792538][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.802448][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.813074][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.824264][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.838484][ T3301] veth0_macvtap: entered promiscuous mode [ 31.847442][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.858043][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.867941][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.878427][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.885512][ T3441] loop3: detected capacity change from 0 to 512 [ 31.891903][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.904348][ T3301] veth1_macvtap: entered promiscuous mode [ 31.914883][ T3297] veth1_vlan: entered promiscuous mode [ 31.922805][ T3303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.931692][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.940449][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.943779][ T3441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.949207][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.960697][ T3297] veth0_macvtap: entered promiscuous mode [ 31.977475][ T3441] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.989049][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.999739][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.009638][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.020134][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.030007][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.040458][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.053316][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.064498][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.075058][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.085014][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.095492][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.105495][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.115980][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.127823][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.137464][ T3297] veth1_macvtap: entered promiscuous mode [ 32.144990][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 32.145007][ T29] audit: type=1400 audit(1733500984.018:141): avc: denied { write } for pid=3440 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 32.170480][ T29] audit: type=1400 audit(1733500984.018:142): avc: denied { read write } for pid=3440 comm="syz.3.4" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.193644][ T29] audit: type=1400 audit(1733500984.018:143): avc: denied { open } for pid=3440 comm="syz.3.4" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.223847][ T3301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.232664][ T3301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.241474][ T3301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.250309][ T3301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.264052][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.274643][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.284491][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.294983][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.304811][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.315340][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.325178][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.335750][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.348449][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.371314][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.381894][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.391851][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.402322][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.412286][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.422738][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.432592][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.443092][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.456302][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.475251][ T3448] bridge_slave_0: left allmulticast mode [ 32.481043][ T3448] bridge_slave_0: left promiscuous mode [ 32.486752][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.495441][ T3448] bridge_slave_1: left allmulticast mode [ 32.501255][ T3448] bridge_slave_1: left promiscuous mode [ 32.506991][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.516260][ T3448] bond0: (slave bond_slave_0): Releasing backup interface [ 32.525980][ T3448] bond0: (slave bond_slave_1): Releasing backup interface [ 32.538275][ T3448] team0: Port device team_slave_0 removed [ 32.546297][ T3448] team0: Port device team_slave_1 removed [ 32.553186][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.560838][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.569639][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.577097][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.609415][ T3297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.618323][ T3297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.627163][ T3297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.635891][ T3297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.658504][ T29] audit: type=1400 audit(1733500984.538:144): avc: denied { write } for pid=3451 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.679104][ T3452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.737871][ T3448] syz.1.6 (3448) used greatest stack depth: 10280 bytes left [ 32.747842][ T29] audit: type=1400 audit(1733500984.628:145): avc: denied { ioctl } for pid=3451 comm="syz.0.1" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.763917][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.773864][ T29] audit: type=1400 audit(1733500984.628:146): avc: denied { read } for pid=3451 comm="syz.0.1" dev="nsfs" ino=4026532635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.794076][ T3460] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.802700][ T29] audit: type=1400 audit(1733500984.628:147): avc: denied { open } for pid=3451 comm="syz.0.1" path="net:[4026532635]" dev="nsfs" ino=4026532635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.822698][ T3460] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5'. [ 32.837379][ T29] audit: type=1400 audit(1733500984.638:148): avc: denied { create } for pid=3459 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 32.932209][ T29] audit: type=1400 audit(1733500984.668:149): avc: denied { create } for pid=3459 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.951682][ T29] audit: type=1400 audit(1733500984.698:150): avc: denied { create } for pid=3459 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.159080][ T3463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 33.161671][ T3476] process 'syz.1.10' launched './file1' with NULL argv: empty string added [ 33.167993][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.184095][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.192742][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.200493][ T3463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.350974][ T3484] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 33.369122][ T3484] loop3: detected capacity change from 0 to 2048 [ 33.410632][ T3484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.445483][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.681502][ T3458] syz.2.3 (3458) used greatest stack depth: 8128 bytes left [ 33.700380][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.707966][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.715669][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.723661][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.731175][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.738696][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.746206][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.753663][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.761263][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.768915][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.776393][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.784228][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.791715][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.799155][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.824908][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.832478][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.839931][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.847390][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.854801][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.862661][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.870132][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.877744][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.885266][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.892890][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.900353][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.907896][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.915302][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.922954][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.930511][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.938021][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.946260][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 33.996645][ T3514] loop2: detected capacity change from 0 to 2048 [ 34.009272][ T3514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.124919][ T3522] loop0: detected capacity change from 0 to 2048 [ 34.151914][ T3522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.220450][ T3520] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.240857][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.249421][ T3520] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 34.262168][ T3520] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.262168][ T3520] [ 34.272057][ T3520] EXT4-fs (loop2): Total free blocks count 0 [ 34.278234][ T3520] EXT4-fs (loop2): Free/Dirty block details [ 34.284224][ T3520] EXT4-fs (loop2): free_blocks=2415919104 [ 34.290032][ T3520] EXT4-fs (loop2): dirty_blocks=8224 [ 34.295434][ T3520] EXT4-fs (loop2): Block reservation details [ 34.301510][ T3520] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 34.383082][ T3539] tipc: Failed to obtain node identity [ 34.388682][ T3539] tipc: Enabling of bearer rejected, failed to enable media [ 34.402149][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 34.404476][ T3539] netlink: 'syz.3.29': attribute type 8 has an invalid length. [ 34.422368][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 34.450066][ T3541] capability: warning: `syz.0.25' uses deprecated v2 capabilities in a way that may be insecure [ 34.556813][ T3543] loop3: detected capacity change from 0 to 2048 [ 34.693409][ T3549] netlink: 192 bytes leftover after parsing attributes in process `syz.2.30'. [ 34.708629][ T3543] Alternate GPT is invalid, using primary GPT. [ 34.716215][ T3543] loop3: p2 p3 p7 [ 34.938503][ T3461] udevd[3461]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 34.948429][ T3373] udevd[3373]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 34.964859][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.002005][ T3373] udevd[3373]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 35.013372][ T3461] udevd[3461]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 35.024732][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.035399][ T3568] sit0: entered promiscuous mode [ 35.060354][ T3568] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 35.068006][ T3568] netlink: 9 bytes leftover after parsing attributes in process `syz.3.35'. [ 35.070177][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.077518][ T3570] netlink: 136 bytes leftover after parsing attributes in process `syz.1.38'. [ 35.091455][ T3373] udevd[3373]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 35.125692][ T3570] loop1: detected capacity change from 0 to 512 [ 35.147068][ T3570] EXT4-fs: Invalid want_extra_isize 43799 [ 35.176058][ T3572] loop3: detected capacity change from 0 to 512 [ 35.182719][ T3572] EXT4-fs: Ignoring removed oldalloc option [ 35.189066][ T3572] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 35.330752][ T3535] syz.4.28 (3535) used greatest stack depth: 8040 bytes left [ 35.349694][ T3586] tipc: Failed to obtain node identity [ 35.355314][ T3586] tipc: Enabling of bearer rejected, failed to enable media [ 35.365637][ T3586] netlink: 'syz.0.42': attribute type 8 has an invalid length. [ 35.374368][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 35.421721][ T3592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.44'. [ 35.473594][ T3594] pim6reg1: entered promiscuous mode [ 35.479374][ T3594] pim6reg1: entered allmulticast mode [ 35.602088][ T3604] bridge_slave_0: left allmulticast mode [ 35.607975][ T3604] bridge_slave_0: left promiscuous mode [ 35.613792][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.628574][ T3604] bridge_slave_1: left allmulticast mode [ 35.634352][ T3604] bridge_slave_1: left promiscuous mode [ 35.640794][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.737326][ T3604] bond0: (slave bond_slave_0): Releasing backup interface [ 35.765899][ T3618] loop1: detected capacity change from 0 to 1024 [ 35.775287][ T3618] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.791087][ T3616] loop2: detected capacity change from 0 to 1024 [ 35.815878][ T3618] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 35.816081][ T3604] bond0: (slave bond_slave_1): Releasing backup interface [ 35.832072][ T3618] EXT4-fs (loop1): orphan cleanup on readonly fs [ 35.840189][ T3618] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 35.851190][ T3616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.851613][ T3604] team0: Port device team_slave_0 removed [ 35.864249][ T3618] EXT4-fs (loop1): Remounting filesystem read-only [ 35.877900][ T3604] team0: Port device team_slave_1 removed [ 35.879016][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.891405][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.898974][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.902829][ T3618] EXT4-fs (loop1): 1 orphan inode deleted [ 35.913146][ T3618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.928527][ T3618] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 35.935498][ T3618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.938428][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.951986][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.959448][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.966911][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.974584][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.982071][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.989505][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 35.997037][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.004544][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.012085][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.019529][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.027305][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.034705][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.037252][ T3618] vhci_hcd: invalid port number 81 [ 36.042222][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.047327][ T3618] vhci_hcd: default hub control req: 8013 v0008 i0051 l27 [ 36.054648][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.065887][ T3617] delete_channel: no stack [ 36.069356][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.081313][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.088953][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.096406][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.103861][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.111417][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.118982][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.126955][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.134376][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.141894][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.149335][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.159192][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 36.193759][ T3628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.56'. [ 36.490493][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.551530][ T3646] pim6reg1: entered promiscuous mode [ 36.556942][ T3646] pim6reg1: entered allmulticast mode [ 36.701471][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.709003][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.754397][ T3649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.761914][ T3649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.828949][ T3662] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.102185][ T3675] loop2: detected capacity change from 0 to 256 [ 37.114114][ T3675] msdos: Unknown parameter '00000000000000000000012Š:roÅÜ1W—“IýƒýûÂæu;ß ås' [ 37.338590][ T3702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.347535][ T3702] mmap: syz.3.77 (3702) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.407323][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.414774][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.437687][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.445218][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.718600][ T3710] __nla_validate_parse: 9 callbacks suppressed [ 37.718620][ T3710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 37.774091][ T3714] futex_wake_op: syz.2.81 tries to shift op by 144; fix this program [ 37.785991][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 37.786008][ T29] audit: type=1400 audit(1733500989.658:461): avc: denied { ioctl } for pid=3711 comm="syz.0.82" path="socket:[5427]" dev="sockfs" ino=5427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.845730][ T29] audit: type=1400 audit(1733500989.718:462): avc: denied { write } for pid=3715 comm="syz.0.83" name="vlan0" dev="proc" ino=4026533282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 37.877185][ T29] audit: type=1400 audit(1733500989.758:463): avc: denied { ioctl } for pid=3715 comm="syz.0.83" path="socket:[4696]" dev="sockfs" ino=4696 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.877270][ T3716] @: renamed from vlan0 (while UP) [ 37.956883][ T29] audit: type=1326 audit(1733500989.828:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3719 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e3eeff19 code=0x7ffc0000 [ 37.980257][ T29] audit: type=1326 audit(1733500989.828:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3719 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e3eeff19 code=0x7ffc0000 [ 38.003507][ T29] audit: type=1326 audit(1733500989.828:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3719 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f87e3eeff19 code=0x7ffc0000 [ 38.026747][ T29] audit: type=1326 audit(1733500989.828:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3719 comm="syz.1.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e3eeff19 code=0x7ffc0000 [ 38.057149][ T3722] loop4: detected capacity change from 0 to 764 [ 38.077928][ T29] audit: type=1326 audit(1733500989.948:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3725 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8dd95ff19 code=0x7ffc0000 [ 38.101277][ T29] audit: type=1326 audit(1733500989.948:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3725 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8dd95ff19 code=0x7ffc0000 [ 38.124680][ T29] audit: type=1326 audit(1733500989.948:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3725 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8dd95ff19 code=0x7ffc0000 [ 38.152447][ T3729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.181853][ T3729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.211761][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 38.389231][ T3731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 38.495358][ T3755] netlink: 'syz.2.96': attribute type 10 has an invalid length. [ 38.503511][ T3755] veth1_macvtap: left promiscuous mode [ 38.584452][ T3767] loop1: detected capacity change from 0 to 4096 [ 38.593945][ T3767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.608165][ T3767] FAULT_INJECTION: forcing a failure. [ 38.608165][ T3767] name failslab, interval 1, probability 0, space 0, times 1 [ 38.621130][ T3767] CPU: 1 UID: 0 PID: 3767 Comm: syz.1.98 Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 38.631967][ T3767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.642363][ T3767] Call Trace: [ 38.645650][ T3767] [ 38.648581][ T3767] dump_stack_lvl+0xf2/0x150 [ 38.653231][ T3767] dump_stack+0x15/0x1a [ 38.657421][ T3767] should_fail_ex+0x223/0x230 [ 38.662295][ T3767] should_failslab+0x8f/0xb0 [ 38.667028][ T3767] __kmalloc_noprof+0xab/0x3f0 [ 38.671806][ T3767] ? ext4_find_extent+0x172/0x7c0 [ 38.676917][ T3767] ? widen_string+0x255/0x260 [ 38.682249][ T3767] ext4_find_extent+0x172/0x7c0 [ 38.687313][ T3767] ? vsnprintf+0xdd8/0xe30 [ 38.691781][ T3767] ext4_ext_map_blocks+0x11f/0x35c0 [ 38.697088][ T3767] ? xas_load+0x3ae/0x3d0 [ 38.701512][ T3767] ? xas_load+0x3ae/0x3d0 [ 38.706035][ T3767] ? cgroup_rstat_updated+0x9f/0x570 [ 38.711540][ T3767] ? down_read+0x171/0x4b0 [ 38.716094][ T3767] ext4_map_query_blocks+0x71/0x180 [ 38.721326][ T3767] ext4_map_blocks+0x23c/0xd20 [ 38.726204][ T3767] ? xas_load+0x3ae/0x3d0 [ 38.730601][ T3767] ? __rcu_read_unlock+0x4e/0x70 [ 38.735607][ T3767] ext4_getblk+0x11f/0x530 [ 38.740149][ T3767] ext4_bread_batch+0x5b/0x360 [ 38.744960][ T3767] __ext4_find_entry+0xa1d/0x1090 [ 38.750251][ T3767] ? kmem_cache_alloc_lru_noprof+0x230/0x320 [ 38.756384][ T3767] ? d_alloc_parallel+0xbf0/0xc60 [ 38.761447][ T3767] ext4_lookup+0xba/0x390 [ 38.765801][ T3767] __lookup_slow+0x184/0x250 [ 38.770583][ T3767] lookup_slow+0x3c/0x60 [ 38.774923][ T3767] walk_component+0x1f5/0x230 [ 38.779660][ T3767] ? path_lookupat+0xfd/0x2b0 [ 38.784379][ T3767] path_lookupat+0x10a/0x2b0 [ 38.788984][ T3767] filename_lookup+0x150/0x340 [ 38.793837][ T3767] user_path_at+0x3c/0x120 [ 38.798495][ T3767] do_sys_truncate+0x5b/0x130 [ 38.803196][ T3767] __x64_sys_truncate+0x31/0x40 [ 38.808065][ T3767] x64_sys_call+0x26d0/0x2dc0 [ 38.812781][ T3767] do_syscall_64+0xc9/0x1c0 [ 38.817293][ T3767] ? clear_bhb_loop+0x55/0xb0 [ 38.822039][ T3767] ? clear_bhb_loop+0x55/0xb0 [ 38.826809][ T3767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.833096][ T3767] RIP: 0033:0x7f87e3eeff19 [ 38.837598][ T3767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.857795][ T3767] RSP: 002b:00007f87e2567058 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 38.866297][ T3767] RAX: ffffffffffffffda RBX: 00007f87e40b5fa0 RCX: 00007f87e3eeff19 [ 38.874297][ T3767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001080 [ 38.882341][ T3767] RBP: 00007f87e25670a0 R08: 0000000000000000 R09: 0000000000000000 [ 38.890380][ T3767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.898371][ T3767] R13: 0000000000000000 R14: 00007f87e40b5fa0 R15: 00007ffd1e4c27f8 [ 38.906433][ T3767] [ 38.932425][ T3768] loop2: detected capacity change from 0 to 128 [ 38.952649][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.002587][ T3782] loop0: detected capacity change from 0 to 512 [ 39.003618][ T3783] Zero length message leads to an empty skb [ 39.031008][ T3782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.044142][ T3782] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.076671][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.081022][ T3789] loop3: detected capacity change from 0 to 512 [ 39.116717][ T3789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.129513][ T3789] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.132326][ T3796] lo speed is unknown, defaulting to 1000 [ 39.146540][ T3796] lo speed is unknown, defaulting to 1000 [ 39.152500][ T3796] lo speed is unknown, defaulting to 1000 [ 39.162195][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.185451][ T3796] infiniband syz0: set active [ 39.190323][ T3796] infiniband syz0: added lo [ 39.190461][ T3798] loop1: detected capacity change from 0 to 512 [ 39.194919][ T9] lo speed is unknown, defaulting to 1000 [ 39.221310][ T3801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 39.225113][ T3796] RDS/IB: syz0: added [ 39.236467][ T3796] smc: adding ib device syz0 with port count 1 [ 39.242827][ T3796] smc: ib device syz0 port 1 has pnetid [ 39.244850][ T3798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.251309][ T1036] lo speed is unknown, defaulting to 1000 [ 39.263546][ T3798] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.268694][ T3796] lo speed is unknown, defaulting to 1000 [ 39.310122][ T3796] lo speed is unknown, defaulting to 1000 [ 39.355917][ T3811] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 39.362494][ T3811] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 39.370163][ T3811] vhci_hcd vhci_hcd.0: Device attached [ 39.378866][ T3796] lo speed is unknown, defaulting to 1000 [ 39.393632][ T3812] vhci_hcd: cannot find the pending unlink 6 [ 39.410247][ T3817] netlink: 'syz.2.108': attribute type 2 has an invalid length. [ 39.418551][ T3812] vhci_hcd: connection closed [ 39.418736][ T777] vhci_hcd: stop threads [ 39.427856][ T777] vhci_hcd: release socket [ 39.432492][ T777] vhci_hcd: disconnect device [ 39.456671][ T3809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 39.474518][ T3796] lo speed is unknown, defaulting to 1000 [ 39.559653][ T3825] pim6reg1: entered promiscuous mode [ 39.565109][ T3825] pim6reg1: entered allmulticast mode [ 39.581792][ T3796] lo speed is unknown, defaulting to 1000 [ 39.583615][ T3827] loop2: detected capacity change from 0 to 512 [ 39.630012][ T3827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.646647][ T3827] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.691350][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.734217][ T3835] infiniband syz0: set active [ 39.753161][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.809413][ T3845] loop0: detected capacity change from 0 to 2048 [ 39.813896][ T1036] lo speed is unknown, defaulting to 1000 [ 39.829941][ T3845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.870237][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.901552][ T3851] loop0: detected capacity change from 0 to 2048 [ 39.918053][ T3851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.954553][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.030657][ T3863] pim6reg1: entered promiscuous mode [ 40.036003][ T3863] pim6reg1: entered allmulticast mode [ 40.067939][ T3865] loop0: detected capacity change from 0 to 2048 [ 40.092874][ T3865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.128768][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.153660][ T3875] loop0: detected capacity change from 0 to 512 [ 40.169471][ T3875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.182187][ T3875] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.206939][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.230241][ T3881] netlink: 356 bytes leftover after parsing attributes in process `syz.0.130'. [ 40.529722][ T3911] @: renamed from vlan0 (while UP) [ 40.558940][ T3913] netlink: 356 bytes leftover after parsing attributes in process `syz.1.141'. [ 40.937230][ T3942] loop2: detected capacity change from 0 to 164 [ 40.943695][ T3942] ======================================================= [ 40.943695][ T3942] WARNING: The mand mount option has been deprecated and [ 40.943695][ T3942] and is ignored by this kernel. Remove the mand [ 40.943695][ T3942] option from the mount to silence this warning. [ 40.943695][ T3942] ======================================================= [ 40.980499][ T3942] Unable to read rock-ridge attributes [ 41.007738][ T3944] FAULT_INJECTION: forcing a failure. [ 41.007738][ T3944] name failslab, interval 1, probability 0, space 0, times 0 [ 41.020474][ T3944] CPU: 1 UID: 0 PID: 3944 Comm: syz.0.151 Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 41.027918][ T3946] netlink: 356 bytes leftover after parsing attributes in process `syz.2.152'. [ 41.031096][ T3944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 41.031115][ T3944] Call Trace: [ 41.031123][ T3944] [ 41.031133][ T3944] dump_stack_lvl+0xf2/0x150 [ 41.061319][ T3944] dump_stack+0x15/0x1a [ 41.065583][ T3944] should_fail_ex+0x223/0x230 [ 41.070361][ T3944] should_failslab+0x8f/0xb0 [ 41.075188][ T3944] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 41.081543][ T3944] ? sidtab_sid2str_get+0xb8/0x140 [ 41.086685][ T3944] kmemdup_noprof+0x2a/0x60 [ 41.091268][ T3944] sidtab_sid2str_get+0xb8/0x140 [ 41.096234][ T3944] security_sid_to_context_core+0x1eb/0x2f0 [ 41.102208][ T3944] security_sid_to_context+0x27/0x30 [ 41.107594][ T3944] selinux_lsmprop_to_secctx+0x2c/0x40 [ 41.113156][ T3944] security_lsmprop_to_secctx+0x4a/0x90 [ 41.118823][ T3944] audit_log_task_context+0x93/0x1c0 [ 41.124141][ T3944] audit_log_task+0xf9/0x1c0 [ 41.128857][ T3944] audit_seccomp+0x68/0x130 [ 41.133427][ T3944] __seccomp_filter+0x6fa/0x1180 [ 41.138486][ T3944] ? __rcu_read_unlock+0x4e/0x70 [ 41.143448][ T3944] ? mntput_no_expire+0x70/0x3c0 [ 41.148462][ T3944] __secure_computing+0x9f/0x1c0 [ 41.153421][ T3944] syscall_trace_enter+0xd1/0x1f0 [ 41.158516][ T3944] ? __se_sys_fchdir+0x121/0x140 [ 41.163476][ T3944] ? fpregs_assert_state_consistent+0x83/0xa0 [ 41.169565][ T3944] do_syscall_64+0xaa/0x1c0 [ 41.174094][ T3944] ? clear_bhb_loop+0x55/0xb0 [ 41.178795][ T3944] ? clear_bhb_loop+0x55/0xb0 [ 41.184002][ T3944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.189999][ T3944] RIP: 0033:0x7fce8732e92c [ 41.194437][ T3944] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 41.214098][ T3944] RSP: 002b:00007fce859a7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.222635][ T3944] RAX: ffffffffffffffda RBX: 00007fce874f5fa0 RCX: 00007fce8732e92c [ 41.230627][ T3944] RDX: 000000000000000f RSI: 00007fce859a70b0 RDI: 0000000000000007 [ 41.238627][ T3944] RBP: 00007fce859a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 41.246659][ T3944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.254694][ T3944] R13: 0000000000000000 R14: 00007fce874f5fa0 R15: 00007ffc3edff458 [ 41.262685][ T3944] [ 41.444621][ T3970] netlink: 356 bytes leftover after parsing attributes in process `syz.0.163'. [ 41.491523][ T3977] lo speed is unknown, defaulting to 1000 [ 41.535839][ T3981] loop3: detected capacity change from 0 to 512 [ 41.570403][ T3984] FAULT_INJECTION: forcing a failure. [ 41.570403][ T3984] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.583522][ T3984] CPU: 1 UID: 0 PID: 3984 Comm: syz.3.166 Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 41.594427][ T3984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 41.604628][ T3984] Call Trace: [ 41.608035][ T3984] [ 41.611039][ T3984] dump_stack_lvl+0xf2/0x150 [ 41.615787][ T3984] dump_stack+0x15/0x1a [ 41.620033][ T3984] should_fail_ex+0x223/0x230 [ 41.624990][ T3984] should_fail+0xb/0x10 [ 41.629209][ T3984] should_fail_usercopy+0x1a/0x20 [ 41.634358][ T3984] _copy_from_iter+0xd5/0xd00 [ 41.639089][ T3984] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 41.644727][ T3984] copy_page_from_iter+0x14f/0x280 [ 41.650024][ T3984] tun_get_user+0x686/0x25b0 [ 41.654641][ T3984] ? _parse_integer+0x27/0x30 [ 41.659322][ T3984] ? ref_tracker_alloc+0x1f5/0x2f0 [ 41.664473][ T3984] tun_chr_write_iter+0x188/0x240 [ 41.669561][ T3984] vfs_write+0x77f/0x920 [ 41.673834][ T3984] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.679405][ T3984] ksys_write+0xe8/0x1b0 [ 41.683692][ T3984] __x64_sys_write+0x42/0x50 [ 41.688327][ T3984] x64_sys_call+0x287e/0x2dc0 [ 41.693053][ T3984] do_syscall_64+0xc9/0x1c0 [ 41.697590][ T3984] ? clear_bhb_loop+0x55/0xb0 [ 41.702358][ T3984] ? clear_bhb_loop+0x55/0xb0 [ 41.707050][ T3984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.713008][ T3984] RIP: 0033:0x7f370c57e9cf [ 41.717449][ T3984] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 41.737148][ T3984] RSP: 002b:00007f370abf7020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 41.745581][ T3984] RAX: ffffffffffffffda RBX: 00007f370c745fa0 RCX: 00007f370c57e9cf [ 41.753565][ T3984] RDX: 000000000000001f RSI: 0000000020000180 RDI: 00000000000000c8 [ 41.761540][ T3984] RBP: 00007f370abf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 41.769565][ T3984] R10: 000000000000001f R11: 0000000000000293 R12: 0000000000000001 [ 41.777543][ T3984] R13: 0000000000000000 R14: 00007f370c745fa0 R15: 00007ffe08469a08 [ 41.785534][ T3984] [ 41.857214][ T3999] loop1: detected capacity change from 0 to 512 [ 41.876096][ T3999] ext4: Unknown parameter 'nouser_xattr' [ 41.940148][ T4010] netlink: 356 bytes leftover after parsing attributes in process `syz.1.175'. [ 41.944178][ T4006] loop2: detected capacity change from 0 to 2048 [ 41.989331][ T4017] tipc: Started in network mode [ 41.994410][ T4017] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711 [ 42.003361][ T4017] tipc: Enabling of bearer rejected, failed to enable media [ 42.010379][ T4019] loop0: detected capacity change from 0 to 2048 [ 42.034217][ T4006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.068267][ T4019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.081672][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.117083][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.163643][ T4036] loop0: detected capacity change from 0 to 1764 [ 42.212602][ T4040] FAULT_INJECTION: forcing a failure. [ 42.212602][ T4040] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 42.212711][ T4040] CPU: 1 UID: 0 PID: 4040 Comm: syz.3.186 Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 42.212771][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.246750][ T4040] Call Trace: [ 42.246760][ T4040] [ 42.246769][ T4040] dump_stack_lvl+0xf2/0x150 [ 42.246882][ T4040] dump_stack+0x15/0x1a [ 42.246914][ T4040] should_fail_ex+0x223/0x230 [ 42.246940][ T4040] should_fail_alloc_page+0xfd/0x110 [ 42.246974][ T4040] __alloc_pages_noprof+0x109/0x340 [ 42.247038][ T4040] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 42.247120][ T4040] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 42.247168][ T4040] do_wp_page+0x64b/0x2340 [ 42.247190][ T4040] ? __rcu_read_lock+0x36/0x50 [ 42.247223][ T4040] handle_mm_fault+0xc63/0x2ac0 [ 42.247254][ T4040] exc_page_fault+0x3b9/0x650 [ 42.247286][ T4040] asm_exc_page_fault+0x26/0x30 [ 42.247322][ T4040] RIP: 0033:0x7f370c441990 [ 42.247338][ T4040] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 42.247357][ T4040] RSP: 002b:00007f370abf64c0 EFLAGS: 00010202 [ 42.247374][ T4040] RAX: 0000000000004005 RBX: 00007f370abf6560 RCX: 0000000000000101 [ 42.247387][ T4040] RDX: 00000000000000ff RSI: 0000000000000400 RDI: 00007f370abf6600 [ 42.247400][ T4040] RBP: 0000000000000102 R08: 00007f37027d7000 R09: 0000000000000004 [ 42.247494][ T4040] R10: 0000000020000942 R11: 000000000000048d R12: 0000000000000301 [ 42.247506][ T4040] R13: 00007f370c608300 R14: 0000000000000013 R15: 00007f370abf6600 [ 42.247526][ T4040] [ 42.247640][ T4040] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 42.252082][ T4040] loop3: detected capacity change from 0 to 512 [ 42.425265][ T4040] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.186: corrupted xattr block 95: invalid header [ 42.425541][ T4040] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 42.425622][ T4040] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.186: bg 0: block 7: invalid block bitmap [ 42.425721][ T4040] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 42.425805][ T4040] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.186: corrupted xattr block 95: invalid header [ 42.425920][ T4040] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 42.425949][ T4040] EXT4-fs (loop3): 1 orphan inode deleted [ 42.427000][ T4040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.525611][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.629676][ T4056] loop2: detected capacity change from 0 to 1024 [ 42.637025][ T4056] loop2: detected capacity change from 0 to 512 [ 42.774153][ T4064] loop2: detected capacity change from 0 to 512 [ 42.801188][ T4064] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.193: corrupted xattr block 95: invalid header [ 42.801397][ T4064] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.193: bg 0: block 7: invalid block bitmap [ 42.801509][ T4064] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 42.801586][ T4064] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.193: corrupted xattr block 95: invalid header [ 42.801756][ T4064] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 42.801780][ T4064] EXT4-fs (loop2): 1 orphan inode deleted [ 42.802582][ T4064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.915617][ T4072] pim6reg1: entered promiscuous mode [ 42.921185][ T4072] pim6reg1: entered allmulticast mode [ 42.924241][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.046048][ T4082] __nla_validate_parse: 1 callbacks suppressed [ 43.046068][ T4082] netlink: 356 bytes leftover after parsing attributes in process `syz.3.199'. [ 43.078929][ T4085] loop2: detected capacity change from 0 to 512 [ 43.099097][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 43.099115][ T29] audit: type=1400 audit(1733500994.978:833): avc: denied { mounton } for pid=4086 comm="syz.0.201" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 43.158949][ T4085] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.202: iget: bogus i_mode (0) [ 43.184049][ T4085] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.202: couldn't read orphan inode 17 (err -117) [ 43.206709][ T29] audit: type=1326 audit(1733500995.078:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c57ff19 code=0x7ffc0000 [ 43.230132][ T29] audit: type=1326 audit(1733500995.078:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c57ff19 code=0x7ffc0000 [ 43.253445][ T29] audit: type=1326 audit(1733500995.078:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f370c57ff19 code=0x7ffc0000 [ 43.277167][ T29] audit: type=1326 audit(1733500995.078:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c57ff19 code=0x7ffc0000 [ 43.297486][ T4085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.300499][ T29] audit: type=1326 audit(1733500995.078:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f370c57ff19 code=0x7ffc0000 [ 43.335760][ T29] audit: type=1326 audit(1733500995.078:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c57ff19 code=0x7ffc0000 [ 43.337937][ T4094] bridge_slave_0: left allmulticast mode [ 43.359202][ T29] audit: type=1326 audit(1733500995.078:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f370c57ff19 code=0x7ffc0000 [ 43.364810][ T4094] bridge_slave_0: left promiscuous mode [ 43.388230][ T29] audit: type=1326 audit(1733500995.078:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370c57ff19 code=0x7ffc0000 [ 43.394038][ T4094] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.417790][ T29] audit: type=1326 audit(1733500995.078:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f370c57ff19 code=0x7ffc0000 [ 43.466168][ T4094] bridge_slave_1: left allmulticast mode [ 43.471978][ T4094] bridge_slave_1: left promiscuous mode [ 43.477687][ T4094] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.501120][ T4094] bond0: (slave bond_slave_0): Releasing backup interface [ 43.511512][ T4094] bond0: (slave bond_slave_1): Releasing backup interface [ 43.523754][ T4094] team0: Port device team_slave_0 removed [ 43.553746][ T4105] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 43.561496][ T4105] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 43.571118][ T4094] team0: Port device team_slave_1 removed [ 43.635145][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.721591][ T4114] loop0: detected capacity change from 0 to 2048 [ 43.766921][ T4114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.817595][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.863314][ T4118] loop0: detected capacity change from 0 to 512 [ 43.884727][ T4112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.210'. [ 43.893888][ T4112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 43.908267][ T4118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.926502][ T4118] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.968701][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.164526][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 44.194919][ T4134] FAULT_INJECTION: forcing a failure. [ 44.194919][ T4134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.208338][ T4134] CPU: 0 UID: 0 PID: 4134 Comm: syz.3.216 Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 44.219598][ T4134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.229706][ T4134] Call Trace: [ 44.233002][ T4134] [ 44.236003][ T4134] dump_stack_lvl+0xf2/0x150 [ 44.240657][ T4134] dump_stack+0x15/0x1a [ 44.244918][ T4134] should_fail_ex+0x223/0x230 [ 44.249742][ T4134] should_fail+0xb/0x10 [ 44.254004][ T4134] should_fail_usercopy+0x1a/0x20 [ 44.259123][ T4134] _copy_from_user+0x1e/0xb0 [ 44.263758][ T4134] copy_msghdr_from_user+0x54/0x2a0 [ 44.269241][ T4134] ? __fget_files+0x17c/0x1c0 [ 44.274027][ T4134] __sys_sendmmsg+0x1e8/0x4b0 [ 44.278765][ T4134] __x64_sys_sendmmsg+0x57/0x70 [ 44.283810][ T4134] x64_sys_call+0x29aa/0x2dc0 [ 44.288583][ T4134] do_syscall_64+0xc9/0x1c0 [ 44.293135][ T4134] ? clear_bhb_loop+0x55/0xb0 [ 44.297905][ T4134] ? clear_bhb_loop+0x55/0xb0 [ 44.302609][ T4134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.308616][ T4134] RIP: 0033:0x7f370c57ff19 [ 44.313099][ T4134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.332796][ T4134] RSP: 002b:00007f370abf7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 44.341303][ T4134] RAX: ffffffffffffffda RBX: 00007f370c745fa0 RCX: 00007f370c57ff19 [ 44.349352][ T4134] RDX: 0000000000000001 RSI: 0000000020001c80 RDI: 0000000000000006 [ 44.357351][ T4134] RBP: 00007f370abf70a0 R08: 0000000000000000 R09: 0000000000000000 [ 44.365415][ T4134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.373426][ T4134] R13: 0000000000000000 R14: 00007f370c745fa0 R15: 00007ffe08469a08 [ 44.381434][ T4134] [ 44.554874][ T4151] loop2: detected capacity change from 0 to 2048 [ 44.583199][ T4153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 44.599870][ T4151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.724075][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.765008][ T4163] pim6reg1: entered promiscuous mode [ 44.770749][ T4163] pim6reg1: entered allmulticast mode [ 44.828246][ T4153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 44.883642][ T4167] syz.1.226[4167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.883761][ T4167] syz.1.226[4167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.905207][ T4167] syz.1.226[4167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.015956][ T4171] 9pnet: Could not find request transport: fdno= [ 45.047365][ T4181] Illegal XDP return value 4294967274 on prog (id 151) dev N/A, expect packet loss! [ 45.134846][ T4190] loop4: detected capacity change from 0 to 2048 [ 45.158092][ T4190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.186646][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.208602][ T4195] FAULT_INJECTION: forcing a failure. [ 45.208602][ T4195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.221835][ T4195] CPU: 0 UID: 0 PID: 4195 Comm: syz.4.236 Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 45.232468][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.242593][ T4195] Call Trace: [ 45.245892][ T4195] [ 45.248978][ T4195] dump_stack_lvl+0xf2/0x150 [ 45.253756][ T4195] dump_stack+0x15/0x1a [ 45.257946][ T4195] should_fail_ex+0x223/0x230 [ 45.262800][ T4195] should_fail+0xb/0x10 [ 45.266966][ T4195] should_fail_usercopy+0x1a/0x20 [ 45.272074][ T4195] _copy_from_user+0x1e/0xb0 [ 45.276796][ T4195] copy_msghdr_from_user+0x54/0x2a0 [ 45.282036][ T4195] ? __fget_files+0x17c/0x1c0 [ 45.286840][ T4195] __sys_sendmsg+0x13e/0x230 [ 45.291538][ T4195] __x64_sys_sendmsg+0x46/0x50 [ 45.296345][ T4195] x64_sys_call+0x2734/0x2dc0 [ 45.301115][ T4195] do_syscall_64+0xc9/0x1c0 [ 45.305671][ T4195] ? clear_bhb_loop+0x55/0xb0 [ 45.310359][ T4195] ? clear_bhb_loop+0x55/0xb0 [ 45.315159][ T4195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.321123][ T4195] RIP: 0033:0x7f556121ff19 [ 45.325574][ T4195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.345198][ T4195] RSP: 002b:00007f555f897058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.353675][ T4195] RAX: ffffffffffffffda RBX: 00007f55613e5fa0 RCX: 00007f556121ff19 [ 45.361691][ T4195] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 45.369688][ T4195] RBP: 00007f555f8970a0 R08: 0000000000000000 R09: 0000000000000000 [ 45.377745][ T4195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.385827][ T4195] R13: 0000000000000000 R14: 00007f55613e5fa0 R15: 00007ffef22d9f78 [ 45.393837][ T4195] [ 45.415860][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'. [ 45.448722][ T4202] netlink: 356 bytes leftover after parsing attributes in process `syz.3.238'. [ 45.559836][ T4197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 45.600044][ T4209] loop3: detected capacity change from 0 to 2048 [ 45.740539][ T4216] loop4: detected capacity change from 0 to 128 [ 45.757209][ T3373] ================================================================== [ 45.761325][ T4214] loop3: detected capacity change from 0 to 2048 [ 45.765403][ T3373] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 45.765430][ T3373] [ 45.765436][ T3373] write to 0xffff888100581910 of 8 bytes by task 2999 on cpu 1: [ 45.765453][ T3373] __dentry_kill+0x13e/0x4c0 [ 45.793192][ T3373] dput+0x5c/0xd0 [ 45.796838][ T3373] step_into+0x21a/0x840 [ 45.801185][ T3373] walk_component+0x169/0x230 [ 45.805871][ T3373] path_lookupat+0x10a/0x2b0 [ 45.810472][ T3373] filename_lookup+0x2e0/0x340 [ 45.815283][ T3373] do_readlinkat+0x89/0x210 [ 45.819895][ T3373] __x64_sys_readlink+0x47/0x60 [ 45.824858][ T3373] x64_sys_call+0x28ba/0x2dc0 [ 45.829587][ T3373] do_syscall_64+0xc9/0x1c0 [ 45.834102][ T3373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.840107][ T3373] [ 45.842434][ T3373] read to 0xffff888100581910 of 8 bytes by task 3373 on cpu 0: [ 45.850070][ T3373] fast_dput+0x65/0x2c0 [ 45.854319][ T3373] dput+0x24/0xd0 [ 45.857961][ T3373] do_unlinkat+0x258/0x4d0 [ 45.862401][ T3373] __x64_sys_unlink+0x2e/0x40 [ 45.867128][ T3373] x64_sys_call+0x2329/0x2dc0 [ 45.871821][ T3373] do_syscall_64+0xc9/0x1c0 [ 45.876684][ T3373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.882596][ T3373] [ 45.884923][ T3373] value changed: 0xffff8882379837f0 -> 0x0000000000000000 [ 45.892043][ T3373] [ 45.894384][ T3373] Reported by Kernel Concurrency Sanitizer on: [ 45.900566][ T3373] CPU: 0 UID: 0 PID: 3373 Comm: udevd Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 45.911614][ T3373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.921770][ T3373] ================================================================== [ 45.967284][ T4214] loop3: p1 < > p4 [ 45.971661][ T4214] loop3: p4 size 8388608 extends beyond EOD, truncated [ 45.982149][ T4214] SELinux: policydb version -681956326 does not match my version range 15-33 [ 45.982499][ T2999] loop3: p1 < > p4 [ 45.991096][ T4214] SELinux: failed to load policy [ 46.001099][ T2999] loop3: p4 size 8388608 extends beyond EOD, truncated [ 46.017553][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 46.017806][ T3373] udevd[3373]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 46.042016][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 46.042120][ T3373] udevd[3373]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory