last executing test programs: 4.512098436s ago: executing program 1 (id=198): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) pipe2(&(0x7f00000006c0), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f00000004c0)={0x2, 0xfffffffffffff000, 0x2, 0x5, 0x3, [0x4, 0xcb53, 0x5, 0x5]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x5, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) pipe2(&(0x7f00000002c0)={0x0, 0x0}, 0x80400) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000e40)={{r1}, "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"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r4 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x401}]}}}]}, 0x38}}, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r5, r3, 0x7fff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000070000009500000000000000f42603262f564daa872e65493ded09846f21fdbe6de2da265f594d58051000ae3a7b41b6e191d745e23a3e6b7249a2acf0df29814041464469992c23e4402ff91623e0bc25d905a09e6ec92f2f86a3c1792742fc1d78a80ac00bfda44a1baf9c46525af40c7968e31c1a25bf1c"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 3.713259829s ago: executing program 1 (id=203): unshare(0x22020600) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) unshare(0x20000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000002880)=ANY=[@ANYBLOB="0600000081000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f979, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@nfc={0x27, 0x0, 0x3, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x20040894) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000008000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000580)='wbt_timer\x00', r5}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000106fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="30200200090000001c0012800b0001006d616373656e6300000c00028005000300090000bc"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000000f6", @ANYRES32=r4, @ANYBLOB="91010200918c0200140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x80) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 3.289113703s ago: executing program 3 (id=209): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000180001002abd7000fcdbdf270a800000ff02fe08"], 0x44}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a01"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0000000201010200000000000000000a0008000c001980080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012807fbf81de7d5e2f63d30b0b00010067656e65666500001800028014000700000000000000e4577e44eec5aa63eb99c8d04514414589db71ae859a41ac33897de6bca563c8e9dceed5dc0640f17b99bace3f79e3d9059f0f4912323b7b4537075f9ef90094b035e2a8ee3e0e9e9d67f124107cdde2a0a7800aea3dadf7a315427a4798fd"], 0x48}}, 0x2000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.110976806s ago: executing program 1 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r2, 0x0, 0x4000041) 3.110592306s ago: executing program 1 (id=212): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x573, &(0x7f0000000cc0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) close_range(r0, r0, 0x0) r2 = eventfd(0x0) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x100, r2, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0, 0x0, 0x1000a, 0x0, 0x1, r2}]) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r0, 0x0, 0x0, 0x2000}]) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) 2.887616524s ago: executing program 1 (id=213): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0xd35, 0x1000, 0x4000}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x5, 0x1000, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.658304742s ago: executing program 3 (id=217): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x62840, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x1b, 0x0, 0x1, 0xc}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(r3, &(0x7f0000000180)=""/187, 0xbb, 0x1) 2.596918357s ago: executing program 3 (id=218): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000180)=0x7) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x50) sched_setscheduler(0x0, 0x2, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x100000000001, 0x0) 2.562746719s ago: executing program 1 (id=220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3fe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 2.337695587s ago: executing program 32 (id=220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3fe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 1.742353673s ago: executing program 3 (id=226): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003600)=@report={0x4c, 0x20, 0x800, 0x70bd25, 0x25dfdbfb, {0x32, {@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in6=@remote, 0x7f, 0x1, 0x4e20, 0x5, 0xa, 0x20}}}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000810) (fail_nth: 6) 1.646793121s ago: executing program 3 (id=227): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) set_mempolicy(0x8006, 0x0, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000d00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0xc8, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x0, 0x0, 0x10}, @hopopts={0x0, 0x11, '\x00', [@ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x75, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4793ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62091716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e"}, @ra, @generic, @padn]}]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='neigh_update\x00', r0}, 0x18) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r2, 0x0, 0x0) recvmsg(r2, &(0x7f0000000640)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000380)=""/65, 0x41}], 0x2, &(0x7f00000005c0)=""/71, 0x47}, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000963abea610bebcc4fb8aa000007b8af8ff00000000bfa20000000000f8ffffffb703000008000000b70400000200000008705d83c7deb2eb74060fd18500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x18) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r12, 0x40505331, &(0x7f0000000c00)={{0x0, 0x8}, {0x80, 0x20}, 0xfff, 0x7, 0x4f}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r13, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r8}, 0x10) getitimer(0x0, &(0x7f0000000000)) 1.134696361s ago: executing program 3 (id=232): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) ioctl$KDGKBDIACR(r1, 0x4bfb, &(0x7f0000000440)=""/252) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x4, 0x2be, &(0x7f0000000480)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000400deff0900000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000001600)=ANY=[@ANYBLOB="1802000000000000000000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000101850000007b00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x111c80, 0xc0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) open(0x0, 0x518282, 0x78e22799f4a46e8e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) timerfd_create(0x0, 0x0) timerfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 768.7692ms ago: executing program 2 (id=239): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe5}, {0xe, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc020) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mq_notify(r6, &(0x7f0000000200)={0x0, 0x1a, 0x1, @thr={0x0, 0x0}}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d332000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200636263286165732900000000002000"/240], 0x138}}, 0x0) r9 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x5}) 678.942447ms ago: executing program 0 (id=241): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000580)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x21202, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10800, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd8e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xa}, 0x100b28, 0x9, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x5, 0x0, 0x20000006}, 0x0, 0x6, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_io_uring_setup(0x102f90, &(0x7f00000002c0)={0x0, 0x4dd8, 0x3850, 0x1, 0x200002}, &(0x7f00000003c0), &(0x7f0000000140)=0x0) r7 = epoll_create(0xaf2) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000080)={0xe000200f}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r6, @ANYRESOCT=r2, @ANYRES64=r4, @ANYRES64], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) close(r9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 608.752363ms ago: executing program 4 (id=244): r0 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x190) 578.952115ms ago: executing program 2 (id=245): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000000013f, 0xfffffffffffffff9, 0x0, 0x200000000172, 0x10, 0x6cf58e39], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES64=r0]}, 0x97) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x8, 0x6, "167466da"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000045}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x80, 0x13, &(0x7f0000000100)=""/19, 0x41100, 0x20, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0x2, 0x558}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xc}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) readahead(0xffffffffffffffff, 0x7, 0x603d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x3, 0x738, &(0x7f0000000780)="$eJzs3V9rW2UYAPDnnDambtVWUPEPyMSh4li61snYlduV3gwHA2+30malNl1qk8wl7GK78lZEURBBv4P3itd+AL+Cgn9GvZhXkZN/29qki1vbQPP7wUne55wTnvddxvtA30PeAMbWsewljXgxIi4mETOd80lE5FqtyYhz7fu27txcyo4kms1LfyWte7I47vtM5mhE3IqIFyLi51zEiXRn3kq9sbZYKhU3O/FcdX1jrlJvnFxdX1wprhSvnT19euH0mXfOnt27sb71wYfPF7qdnP/thyTOxXQnvH8ce6mdLpf9Ez7gvf1INkLJqDvAI5mMiInO+3MxExOtFgBwmDXzEU0AYMwk6j8AjJnu3wG6a3v7tQ42yB/nI2KqX/7JzprZVGsd8shW8sDKRBIRswfZUQ6lW7cj4srssZ3//5Ida7b/16m96CD76qds/jnXb/5Je/NP9Jl/prrPTjymwfPfvfwTA+a/i0PmeP/lWnlg/tsRLyWTffInvfzJgPxXhsz/493lfwdda34f8fr2+jMRDzxRkOz6fMjc1dVS8VT7tX+OY7WbH+02/iN961/SeoZlt/FvDDn+6c9f/eXWLvnffG337z+J+PN8Z42+K6uJnw2Z/9Pcu18OupblX+6O/9vj9115+Pf/3ZD5z7zycWPIWwEAAAAAAAAAAAAAAAAAAAAAAAAAAOBQSCNiOpK00GunaaHQ3sP72TiSlsqV6omr5dq15WjtlT0bubT7U8sz7TjJ4vnO7/F344VWe6sXvx0Rz0TEF/knW3FhqVxaHvXgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDj6Lb9///Jt/f/BwAOualRdwAAOHDqPwCMH/UfAMaP+g8A40f9B4Dxo/4DwPh5hPqf349+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA2Ll64kB3NrTs3l7J4+Xq9tla+fnK5WFkrrNeWCkvlzY3CSrm8UioWlsrr2z+fbItL5fLGwkLUbsxVi5XqXKXeuLxerl2rXl5dX1wpXi7mDmxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADC86daRpIWISFvtNC0UIp6KiNnIJVdXS8VTEfF0RPyaz+WzeH7UnQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPVapN9YWS6XipoaGhkavMeqZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7evU2/R90TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABil9PckIrLjjZnj09uvPpHczbfeI+KTby59dWOxWt2cz87/3Ttf/bpzfmEU/QcAHqZbp7t1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6qdQba4ulUnGzUk8i4m6zrX2md+nxGqMeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe+e/AAAA//829Mx2") add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85", 0x12, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='kfree\x00', r6, 0x0, 0xfffffffffffffffb}, 0x18) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000600)=0x14) close(r7) 498.734631ms ago: executing program 4 (id=246): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') read$rfkill(r3, &(0x7f0000000200), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async) socket(0x11, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0xe85}, 0x18) (async) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x18) mq_timedsend(r4, 0x0, 0x0, 0x8, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, 0x0, 0x0) connect$pptp(r6, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe8}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) (async) gettid() 495.827421ms ago: executing program 4 (id=247): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0xc, 0x2, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r3, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) 378.074571ms ago: executing program 2 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003600)=@report={0x4c, 0x20, 0x800, 0x70bd25, 0x25dfdbfb, {0x32, {@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in6=@remote, 0x7f, 0x1, 0x4e20, 0x5, 0xa, 0x20}}}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000810) 368.658001ms ago: executing program 4 (id=249): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000002000000000000000700002018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 347.710283ms ago: executing program 0 (id=250): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984d", 0x1c}) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) setsockopt(r0, 0x84, 0x19, 0x0, 0x0) 278.608998ms ago: executing program 2 (id=251): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000008c0)='kfree\x00', r1}, 0x18) perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18080, &(0x7f0000000f80)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYRES8, @ANYRES16, @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 278.378548ms ago: executing program 4 (id=252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000180)=""/97, 0x61}], 0x2, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x105080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000240)={{0x9, 0xff}, 0x1, 0x7fff, 0xbc2, {0x7, 0x8}, 0x6, 0x4}) 241.902861ms ago: executing program 0 (id=253): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x7ff, 0x1, [0x342]}, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 233.695372ms ago: executing program 4 (id=254): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x1010040, &(0x7f00000006c0)={[{@stripe={'stripe', 0x3d, 0x1b5e}}, {@errors_continue}, {@data_journal}, {@sb={'sb', 0x3d, 0x6ec7}}, {@nobarrier}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@jqfmt_vfsv0}, {@dax_inode}]}, 0x1, 0x580, &(0x7f0000001600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], 0x48) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x482, &(0x7f0000001040)="$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") chdir(&(0x7f0000000040)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000140)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) mq_unlink(0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r5}, 0x8) 221.252233ms ago: executing program 2 (id=255): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x5, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16=0x0], 0x0, 0x40000, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7f4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x5, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16=0x0], 0x0, 0x40000, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7f4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)=""/93, 0x5d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) r4 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100004, 0xfffffffffffffffd, 0x2000005, 0x4, 0x0, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='cpu>=0||6') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) (async) r7 = fsmount(r6, 0x1, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r7, &(0x7f0000000080)='./file0\x00') readlinkat(r7, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="90000000000101040000000000000000010000032400018014000180000000000000ff0000000000000000000000000100000400fc0200000000000000000000000000010c0002800500010000000000240002800c0002803db3eba36a9e5a0814000180089b020000000000b9fd0200e00000020000164000000005000000030000000600000002080008400000000808001540000000001c001880000001400000002c08000140000000000800034000010000adeaa20e0922"], 0x90}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="90000000000101040000000000000000010000032400018014000180000000000000ff0000000000000000000000000100000400fc0200000000000000000000000000010c0002800500010000000000240002800c0002803db3eba36a9e5a0814000180089b020000000000b9fd0200e00000020000164000000005000000030000000600000002080008400000000808001540000000001c001880000001400000002c08000140000000000800034000010000adeaa20e0922"], 0x90}}, 0x0) 126.67911ms ago: executing program 0 (id=256): syz_emit_ethernet(0xd2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff80009c1101fe8000000000000000000000000000bbff02000000000000000000000000000100004e22009c90"], 0x0) 125.42076ms ago: executing program 0 (id=257): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000480)='.log\x00', 0x200001, 0x40) io_uring_enter(r0, 0x626a, 0xb76e, 0x51, &(0x7f00000004c0)={[0x2]}, 0x8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r1, &(0x7f0000001140)=[{&(0x7f0000000080)="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", 0x3db}], 0x1) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x9840, 0x0) lseek(r2, 0x9, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000000300001802c00018014000300fe8000000000a35b554b75e4f96f0000000000000000002014000400000000000000000000000000000000003c0003800c00028004000100890000002c0001801400030000000000000000000000ffffac1e000114000400ff0100000000000000000000000000013c1002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c0002800500010086000000"], 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="f8000000170a010300000000000000000700000908000740000000020c00054000000000000000020c0005400000000000000001ac00038008000240fffffffa0800024000005591080001400000000090000380140001007665746830000000000000000000000014000100736974300000000000000000000000001400010067656e65766531000000000000000000140001007767320000000000000000000000000014000100636169663000000000000000000000001400010073797a6b616c6c657231000000000000140000000000000000000c00054000000000000000020900020073797a3200000000"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 22.703148ms ago: executing program 2 (id=258): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000000013f, 0xfffffffffffffff9, 0x0, 0x200000000172, 0x10, 0x6cf58e39], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES64=r0]}, 0x97) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x8, 0x6, "167466da"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000045}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x80, 0x13, &(0x7f0000000100)=""/19, 0x41100, 0x20, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x8, 0x2, 0x558}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xc}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) readahead(0xffffffffffffffff, 0x7, 0x603d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x3, 0x738, &(0x7f0000000780)="$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") add_key(0x0, 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85", 0x12, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='kfree\x00', r6, 0x0, 0xfffffffffffffffb}, 0x18) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000600)=0x14) close(r7) 5.2493ms ago: executing program 0 (id=259): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x2, 0xc04}}, 0x120) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) (rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYRES64=r2, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000700)='./file1\x00', 0x2000775) (async) write$binfmt_elf64(r6, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0xffffffffffff8001, 0x3, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x1, 0xe61d, 0x200c, 0x38, 0x1, 0xfffe, 0x2, 0x4}, [{0x3, 0xf97, 0xb, 0x10, 0x0, 0x3, 0xffffffffffffffff, 0xc3}]}, 0x78) close(r6) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) (async, rerun: 64) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r5}, 0x18) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r10}, 0x3d) (async) r11 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) (async, rerun: 64) open_by_handle_at(r11, &(0x7f0000000080)=ANY=[], 0x0) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x6, 0x7fff0000}]}) 0s ago: executing program 5 (id=222): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@empty, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x200000004, 0x40000000007, 0x20000a0e2, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x3502, 0x3, 0x8, 0x0, 0x9075, 0x800, 0xc5e}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00082b00fc020000000000000000000000000004fe8000000000000000000000000000aa3b00030000089078a9441f9fbc0d4ac14876ea2edab64bf54eff0cbfaf4ac4ee8899a363fcffabbb4110dc2891919b381dbab3a3fbd1a7e8616adf2c648630f0a5c1cec075405a1423a423c1e4eaf42dd00cf5ef5fe1"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x18) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0x3}, 0x18) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000440)={'syzkaller0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(r4, &(0x7f0000000080), 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) chroot(&(0x7f0000000400)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x7fffffff, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x27, 0xfbfffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x4, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x3, 0x0, 0x10, 0x20, 0x0, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x361, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x20, 0x7]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x2}) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) inotify_init1(0x80800) kernel console output (not intermixed with test programs): [ 18.830523][ T29] audit: type=1400 audit(1765683593.520:62): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.852456][ T29] audit: type=1400 audit(1765683593.520:63): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.875129][ T29] audit: type=1400 audit(1765683593.520:64): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.898069][ T29] audit: type=1400 audit(1765683593.520:65): avc: denied { search } for pid=3197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.921023][ T29] audit: type=1400 audit(1765683593.520:66): avc: denied { read open } for pid=3198 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 22.063912][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 22.063925][ T29] audit: type=1400 audit(1765683596.750:70): avc: denied { mounton } for pid=3256 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.092849][ T29] audit: type=1400 audit(1765683596.780:71): avc: denied { mount } for pid=3256 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.093613][ T3256] cgroup: Unknown subsys name 'net' [ 22.120435][ T29] audit: type=1400 audit(1765683596.810:72): avc: denied { unmount } for pid=3256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.253335][ T3256] cgroup: Unknown subsys name 'cpuset' [ 22.259373][ T3256] cgroup: Unknown subsys name 'rlimit' [ 22.448330][ T29] audit: type=1400 audit(1765683597.130:73): avc: denied { setattr } for pid=3256 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.475945][ T29] audit: type=1400 audit(1765683597.130:74): avc: denied { create } for pid=3256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.496422][ T29] audit: type=1400 audit(1765683597.130:75): avc: denied { write } for pid=3256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.516844][ T29] audit: type=1400 audit(1765683597.130:76): avc: denied { read } for pid=3256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.537114][ T29] audit: type=1400 audit(1765683597.140:77): avc: denied { mounton } for pid=3256 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.543823][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.561889][ T29] audit: type=1400 audit(1765683597.140:78): avc: denied { mount } for pid=3256 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.593627][ T29] audit: type=1400 audit(1765683597.150:79): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 22.659442][ T3256] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.905956][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 23.928159][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 23.942876][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 23.959945][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 23.988734][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 24.051145][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.058328][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.065698][ T3316] bridge_slave_0: entered allmulticast mode [ 24.071998][ T3316] bridge_slave_0: entered promiscuous mode [ 24.092338][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.099474][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.106647][ T3316] bridge_slave_1: entered allmulticast mode [ 24.113173][ T3316] bridge_slave_1: entered promiscuous mode [ 24.141349][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.148435][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.155642][ T3312] bridge_slave_0: entered allmulticast mode [ 24.161968][ T3312] bridge_slave_0: entered promiscuous mode [ 24.168612][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.175689][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.182979][ T3319] bridge_slave_0: entered allmulticast mode [ 24.189238][ T3319] bridge_slave_0: entered promiscuous mode [ 24.195693][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.202781][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.210050][ T3315] bridge_slave_0: entered allmulticast mode [ 24.216491][ T3315] bridge_slave_0: entered promiscuous mode [ 24.233039][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.240142][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.247238][ T3312] bridge_slave_1: entered allmulticast mode [ 24.253613][ T3312] bridge_slave_1: entered promiscuous mode [ 24.259821][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.266949][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.274105][ T3319] bridge_slave_1: entered allmulticast mode [ 24.280458][ T3319] bridge_slave_1: entered promiscuous mode [ 24.286912][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.294017][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.301124][ T3315] bridge_slave_1: entered allmulticast mode [ 24.307579][ T3315] bridge_slave_1: entered promiscuous mode [ 24.314943][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.340989][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.354202][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.361269][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.368513][ T3311] bridge_slave_0: entered allmulticast mode [ 24.375161][ T3311] bridge_slave_0: entered promiscuous mode [ 24.399049][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.406165][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.413372][ T3311] bridge_slave_1: entered allmulticast mode [ 24.419758][ T3311] bridge_slave_1: entered promiscuous mode [ 24.426719][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.436731][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.446856][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.456542][ T3316] team0: Port device team_slave_0 added [ 24.462933][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.476906][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.486889][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.496767][ T3316] team0: Port device team_slave_1 added [ 24.527628][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.549759][ T3315] team0: Port device team_slave_0 added [ 24.555543][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.562583][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.588573][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.600249][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.610096][ T3312] team0: Port device team_slave_0 added [ 24.616475][ T3319] team0: Port device team_slave_0 added [ 24.622863][ T3315] team0: Port device team_slave_1 added [ 24.628705][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.635647][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.661579][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.676975][ T3319] team0: Port device team_slave_1 added [ 24.683305][ T3312] team0: Port device team_slave_1 added [ 24.714503][ T3311] team0: Port device team_slave_0 added [ 24.729310][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.736320][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.762235][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.774137][ T3311] team0: Port device team_slave_1 added [ 24.780022][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.786984][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.812872][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.823857][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.830778][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.856770][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.867806][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.874754][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.900646][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.920165][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.927116][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.953015][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.968826][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.975841][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.001717][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.029040][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.036054][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.062130][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.075272][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.082191][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.108082][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.121076][ T3316] hsr_slave_0: entered promiscuous mode [ 25.127057][ T3316] hsr_slave_1: entered promiscuous mode [ 25.163248][ T3312] hsr_slave_0: entered promiscuous mode [ 25.169303][ T3312] hsr_slave_1: entered promiscuous mode [ 25.175374][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 25.181094][ T3312] Cannot create hsr debugfs directory [ 25.193179][ T3319] hsr_slave_0: entered promiscuous mode [ 25.199132][ T3319] hsr_slave_1: entered promiscuous mode [ 25.205103][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 25.210813][ T3319] Cannot create hsr debugfs directory [ 25.234347][ T3315] hsr_slave_0: entered promiscuous mode [ 25.240235][ T3315] hsr_slave_1: entered promiscuous mode [ 25.246095][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 25.251801][ T3315] Cannot create hsr debugfs directory [ 25.273719][ T3311] hsr_slave_0: entered promiscuous mode [ 25.279476][ T3311] hsr_slave_1: entered promiscuous mode [ 25.285469][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 25.291191][ T3311] Cannot create hsr debugfs directory [ 25.457159][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.471973][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.480676][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.489168][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.518209][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.527275][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.538729][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.550642][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.570687][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.580402][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.594103][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.602901][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.636678][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.650314][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.660463][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.670695][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.700006][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.707276][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.716931][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.727375][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.739427][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.765575][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.774886][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.792467][ T401] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.799535][ T401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.813796][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.820894][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.832683][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.842085][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.856397][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.863491][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.879164][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.886214][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.908660][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.923842][ T1592] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.930889][ T1592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.948742][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.957555][ T1592] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.964600][ T1592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.994483][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.010516][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.028619][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.035748][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.050369][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.057415][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.068126][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.084145][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.100113][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.117171][ T1592] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.124259][ T1592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.139213][ T1592] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.146269][ T1592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.170902][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.181362][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.224406][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.245940][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.300188][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.316667][ T3312] veth0_vlan: entered promiscuous mode [ 26.341294][ T3312] veth1_vlan: entered promiscuous mode [ 26.395360][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.405087][ T3312] veth0_macvtap: entered promiscuous mode [ 26.415030][ T3316] veth0_vlan: entered promiscuous mode [ 26.422391][ T3312] veth1_macvtap: entered promiscuous mode [ 26.437561][ T3316] veth1_vlan: entered promiscuous mode [ 26.444985][ T3315] veth0_vlan: entered promiscuous mode [ 26.461025][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.473071][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.489610][ T401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.510993][ T401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.524971][ T3315] veth1_vlan: entered promiscuous mode [ 26.534958][ T401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.543933][ T3316] veth0_macvtap: entered promiscuous mode [ 26.550854][ T3316] veth1_macvtap: entered promiscuous mode [ 26.558705][ T401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.580352][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.590728][ T3319] veth0_vlan: entered promiscuous mode [ 26.614013][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.621781][ T3319] veth1_vlan: entered promiscuous mode [ 26.634708][ T401] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.648488][ T3311] veth0_vlan: entered promiscuous mode [ 26.655555][ T3315] veth0_macvtap: entered promiscuous mode [ 26.664584][ T401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.675111][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.692109][ T3315] veth1_macvtap: entered promiscuous mode [ 26.698560][ T401] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.710265][ T3311] veth1_vlan: entered promiscuous mode [ 26.716895][ T401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.747523][ T3311] veth0_macvtap: entered promiscuous mode [ 26.762380][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.771494][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.779402][ T3311] veth1_macvtap: entered promiscuous mode [ 26.793970][ T401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.809472][ T3319] veth0_macvtap: entered promiscuous mode [ 26.828478][ T401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.839267][ T3319] veth1_macvtap: entered promiscuous mode [ 26.854637][ T401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.874024][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.882563][ T3489] loop2: detected capacity change from 0 to 2048 [ 26.884296][ T3484] infiniband syz0: set active [ 26.893062][ T401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.893654][ T3484] infiniband syz0: added bond_slave_0 [ 26.903998][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.929247][ T3484] RDS/IB: syz0: added [ 26.933441][ T3484] smc: adding ib device syz0 with port count 1 [ 26.939598][ T3484] smc: ib device syz0 port 1 has no pnetid [ 26.963127][ T401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.970952][ T3489] EXT4-fs (loop2): failed to initialize system zone (-117) [ 26.979885][ T3489] EXT4-fs (loop2): mount failed [ 26.985179][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 27.012665][ T401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.021505][ T3501] bridge_slave_1: left allmulticast mode [ 27.027198][ T3501] bridge_slave_1: left promiscuous mode [ 27.032888][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.045524][ T3504] xt_socket: unknown flags 0x48 [ 27.058820][ T3501] bridge_slave_0: left allmulticast mode [ 27.064709][ T3501] bridge_slave_0: left promiscuous mode [ 27.070412][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.070648][ T3504] loop3: detected capacity change from 0 to 2048 [ 27.077703][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 27.077716][ T29] audit: type=1400 audit(1765683601.740:121): avc: denied { read write } for pid=3503 comm="syz.3.4" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.085021][ T3408] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.090015][ T29] audit: type=1400 audit(1765683601.740:122): avc: denied { open } for pid=3503 comm="syz.3.4" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.119452][ T3504] ======================================================= [ 27.119452][ T3504] WARNING: The mand mount option has been deprecated and [ 27.119452][ T3504] and is ignored by this kernel. Remove the mand [ 27.119452][ T3504] option from the mount to silence this warning. [ 27.119452][ T3504] ======================================================= [ 27.120398][ T29] audit: type=1400 audit(1765683601.760:123): avc: denied { read write } for pid=3503 comm="syz.3.4" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.157399][ T3506] netlink: 10648 bytes leftover after parsing attributes in process `syz.1.2'. [ 27.178273][ T29] audit: type=1400 audit(1765683601.760:124): avc: denied { open } for pid=3503 comm="syz.3.4" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.178302][ T29] audit: type=1400 audit(1765683601.760:125): avc: denied { ioctl } for pid=3503 comm="syz.3.4" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.222660][ T3408] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 27.299029][ T29] audit: type=1400 audit(1765683601.830:126): avc: denied { create } for pid=3487 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.318706][ T29] audit: type=1400 audit(1765683601.960:127): avc: denied { read } for pid=3503 comm="syz.3.4" name="hidraw0" dev="devtmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.347211][ T29] audit: type=1326 audit(1765683602.010:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3487 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5589ff749 code=0x7ffc0000 [ 27.370319][ T29] audit: type=1326 audit(1765683602.010:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3487 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5589ff749 code=0x7ffc0000 [ 27.393388][ T29] audit: type=1326 audit(1765683602.010:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3487 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fb5589ff749 code=0x7ffc0000 [ 27.427403][ T3510] fido_id[3510]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 27.455669][ T401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.475927][ T401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.494119][ T3525] loop3: detected capacity change from 0 to 512 [ 27.511080][ T3525] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.524650][ T3525] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 27.553669][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.591391][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.600210][ T3525] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 27.605645][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.622763][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.651385][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.668509][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.683122][ T3525] EXT4-fs (loop3): 1 truncate cleaned up [ 27.703121][ T3525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.731307][ T3534] loop4: detected capacity change from 0 to 1024 [ 27.742376][ T3534] ext4: Bad value for 'init_itable' [ 27.847158][ T3537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7'. [ 27.887342][ T3536] loop0: detected capacity change from 0 to 128 [ 27.958922][ T3539] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 27.970016][ T3540] mmap: syz.4.5 (3540) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.993264][ T3484] syz.2.3 (3484) used greatest stack depth: 10528 bytes left [ 28.015569][ T3539] loop1: detected capacity change from 0 to 2048 [ 28.043579][ T3539] EXT4-fs (loop1): failed to initialize system zone (-117) [ 28.050918][ T3539] EXT4-fs (loop1): mount failed [ 28.075735][ C0] hrtimer: interrupt took 47783 ns [ 28.137436][ T3550] loop1: detected capacity change from 0 to 1024 [ 28.214185][ T3550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.250734][ T3550] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.11: inode #2147549200: comm syz.1.11: iget: illegal inode # [ 28.298969][ T3559] loop2: detected capacity change from 0 to 1024 [ 28.346925][ T3559] ext4: Bad value for 'init_itable' [ 28.351104][ T3542] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 28.353011][ T3550] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.11: error while reading EA inode 2147549200 err=-117 [ 28.360648][ T3542] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 28.381651][ T3542] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 28.459840][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.486724][ T3559] loop2: detected capacity change from 0 to 512 [ 28.502213][ T3559] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.13: corrupted inode contents [ 28.514243][ T3559] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 28.532747][ T3559] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.13: corrupted inode contents [ 28.554123][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.557950][ T3559] EXT4-fs error (device loop2): ext4_evict_inode:301: inode #15: comm syz.2.13: mark_inode_dirty error [ 28.580490][ T3559] EXT4-fs (loop2): 1 orphan inode deleted [ 28.593909][ T3559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.633272][ T3559] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm wÞ£ÿ: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 28.658347][ T3570] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 28.687400][ T3570] loop4: detected capacity change from 0 to 2048 [ 28.707044][ T3573] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 28.743747][ T3570] EXT4-fs (loop4): failed to initialize system zone (-117) [ 28.751035][ T3570] EXT4-fs (loop4): mount failed [ 28.770538][ T3573] EXT4-fs (loop1): failed to initialize system zone (-117) [ 28.819653][ T3573] EXT4-fs (loop1): mount failed [ 28.838040][ T3585] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 28.870809][ T3585] EXT4-fs (loop3): failed to initialize system zone (-117) [ 28.879632][ T3585] EXT4-fs (loop3): mount failed [ 28.976038][ T3593] EXT4-fs (loop4): 1 truncate cleaned up [ 28.988116][ T3593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.029318][ T3598] EXT4-fs: Ignoring removed orlov option [ 29.069089][ T3598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.219338][ T3611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28'. [ 29.240262][ T3612] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.275230][ T3612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 29.287966][ T3612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 29.398568][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.480559][ T3612] syz.1.24 (3612) used greatest stack depth: 10192 bytes left [ 29.493538][ T3623] FAULT_INJECTION: forcing a failure. [ 29.493538][ T3623] name failslab, interval 1, probability 0, space 0, times 1 [ 29.506277][ T3623] CPU: 0 UID: 0 PID: 3623 Comm: syz.2.30 Not tainted syzkaller #0 PREEMPT(voluntary) [ 29.506303][ T3623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 29.506313][ T3623] Call Trace: [ 29.506321][ T3623] [ 29.506380][ T3623] __dump_stack+0x1d/0x30 [ 29.506405][ T3623] dump_stack_lvl+0xe8/0x140 [ 29.506426][ T3623] dump_stack+0x15/0x1b [ 29.506445][ T3623] should_fail_ex+0x265/0x280 [ 29.506469][ T3623] should_failslab+0x8c/0xb0 [ 29.506549][ T3623] kmem_cache_alloc_noprof+0x69/0x4b0 [ 29.506573][ T3623] ? getname_kernel+0x3c/0x1f0 [ 29.506600][ T3623] getname_kernel+0x3c/0x1f0 [ 29.506624][ T3623] kern_path+0x23/0x130 [ 29.506712][ T3623] autofs_dev_ioctl_openmount+0x92/0x2d0 [ 29.506733][ T3623] ? __pfx_autofs_dev_ioctl_openmount+0x10/0x10 [ 29.506775][ T3623] autofs_dev_ioctl+0x354/0x6a0 [ 29.506798][ T3623] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 29.506875][ T3623] __se_sys_ioctl+0xce/0x140 [ 29.506902][ T3623] __x64_sys_ioctl+0x43/0x50 [ 29.506994][ T3623] x64_sys_call+0x14b0/0x3000 [ 29.507017][ T3623] do_syscall_64+0xd8/0x2a0 [ 29.507047][ T3623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.507091][ T3623] RIP: 0033:0x7f134caaf749 [ 29.507113][ T3623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.507132][ T3623] RSP: 002b:00007f134b50f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.507152][ T3623] RAX: ffffffffffffffda RBX: 00007f134cd05fa0 RCX: 00007f134caaf749 [ 29.507164][ T3623] RDX: 0000200000000240 RSI: 00000000c0189374 RDI: 0000000000000006 [ 29.507174][ T3623] RBP: 00007f134b50f090 R08: 0000000000000000 R09: 0000000000000000 [ 29.507217][ T3623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.507306][ T3623] R13: 00007f134cd06038 R14: 00007f134cd05fa0 R15: 00007ffc9268d408 [ 29.507325][ T3623] [ 29.704022][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.757307][ T3627] netlink: 260 bytes leftover after parsing attributes in process `syz.2.33'. [ 29.780034][ T3627] netlink: 104 bytes leftover after parsing attributes in process `syz.2.33'. [ 29.802742][ T3629] x_tables: unsorted underflow at hook 3 [ 29.809139][ T3627] EXT4-fs (loop2): too many log groups per flexible block group [ 29.817049][ T3627] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 29.845099][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.863710][ T3627] EXT4-fs (loop2): mount failed [ 29.913014][ T3640] netlink: 'syz.2.37': attribute type 12 has an invalid length. [ 29.916950][ T3637] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 29.920675][ T3640] netlink: 'syz.2.37': attribute type 29 has an invalid length. [ 29.935551][ T3637] EXT4-fs (loop4): 1 truncate cleaned up [ 29.938240][ T3640] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 29.945079][ T3637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.951613][ T3640] netlink: 'syz.2.37': attribute type 2 has an invalid length. [ 30.030158][ T3644] Zero length message leads to an empty skb [ 30.156610][ T3657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 30.201991][ T3654] EXT4-fs (loop3): failed to initialize system zone (-117) [ 30.216087][ T3654] EXT4-fs (loop3): mount failed [ 30.228620][ T3657] EXT4-fs (loop2): 1 truncate cleaned up [ 30.243078][ T3657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.280969][ T3666] netlink: 'syz.3.46': attribute type 1 has an invalid length. [ 30.503597][ T3675] FAULT_INJECTION: forcing a failure. [ 30.503597][ T3675] name failslab, interval 1, probability 0, space 0, times 0 [ 30.516254][ T3675] CPU: 1 UID: 0 PID: 3675 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT(voluntary) [ 30.516294][ T3675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 30.516333][ T3675] Call Trace: [ 30.516341][ T3675] [ 30.516349][ T3675] __dump_stack+0x1d/0x30 [ 30.516447][ T3675] dump_stack_lvl+0xe8/0x140 [ 30.516541][ T3675] dump_stack+0x15/0x1b [ 30.516558][ T3675] should_fail_ex+0x265/0x280 [ 30.516649][ T3675] should_failslab+0x8c/0xb0 [ 30.516671][ T3675] kmem_cache_alloc_noprof+0x69/0x4b0 [ 30.516758][ T3675] ? skb_clone+0x151/0x1f0 [ 30.516853][ T3675] skb_clone+0x151/0x1f0 [ 30.516878][ T3675] __netlink_deliver_tap+0x2c9/0x500 [ 30.516907][ T3675] netlink_unicast+0x66b/0x690 [ 30.517009][ T3675] netlink_sendmsg+0x58b/0x6b0 [ 30.517037][ T3675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 30.517083][ T3675] __sock_sendmsg+0x145/0x180 [ 30.517103][ T3675] ____sys_sendmsg+0x31e/0x4a0 [ 30.517131][ T3675] ___sys_sendmsg+0x17b/0x1d0 [ 30.517246][ T3675] __x64_sys_sendmsg+0xd4/0x160 [ 30.517279][ T3675] x64_sys_call+0x17ba/0x3000 [ 30.517361][ T3675] do_syscall_64+0xd8/0x2a0 [ 30.517471][ T3675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.517562][ T3675] RIP: 0033:0x7f53f4fef749 [ 30.517575][ T3675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.517591][ T3675] RSP: 002b:00007f53f3a4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.517612][ T3675] RAX: ffffffffffffffda RBX: 00007f53f5245fa0 RCX: 00007f53f4fef749 [ 30.517625][ T3675] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 30.517638][ T3675] RBP: 00007f53f3a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 30.517652][ T3675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.517664][ T3675] R13: 00007f53f5246038 R14: 00007f53f5245fa0 R15: 00007ffc8faccf28 [ 30.517746][ T3675] [ 30.716483][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.790705][ T3678] process 'syz.3.50' launched '/dev/fd/4' with NULL argv: empty string added [ 30.826445][ T3684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.839032][ T3684] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.923463][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.939873][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.012136][ T3701] FAULT_INJECTION: forcing a failure. [ 31.012136][ T3701] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.025449][ T3701] CPU: 1 UID: 0 PID: 3701 Comm: syz.2.55 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.025474][ T3701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.025484][ T3701] Call Trace: [ 31.025489][ T3701] [ 31.025495][ T3701] __dump_stack+0x1d/0x30 [ 31.025518][ T3701] dump_stack_lvl+0xe8/0x140 [ 31.025560][ T3701] dump_stack+0x15/0x1b [ 31.025576][ T3701] should_fail_ex+0x265/0x280 [ 31.025596][ T3701] should_fail+0xb/0x20 [ 31.025614][ T3701] should_fail_usercopy+0x1a/0x20 [ 31.025647][ T3701] _copy_from_user+0x1c/0xb0 [ 31.025671][ T3701] ___sys_sendmsg+0xc1/0x1d0 [ 31.025707][ T3701] __x64_sys_sendmsg+0xd4/0x160 [ 31.025736][ T3701] x64_sys_call+0x17ba/0x3000 [ 31.025760][ T3701] do_syscall_64+0xd8/0x2a0 [ 31.025792][ T3701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.025814][ T3701] RIP: 0033:0x7f134caaf749 [ 31.025868][ T3701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.025883][ T3701] RSP: 002b:00007f134b50f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.025901][ T3701] RAX: ffffffffffffffda RBX: 00007f134cd05fa0 RCX: 00007f134caaf749 [ 31.025913][ T3701] RDX: 0000000000044800 RSI: 00002000000011c0 RDI: 0000000000000006 [ 31.025923][ T3701] RBP: 00007f134b50f090 R08: 0000000000000000 R09: 0000000000000000 [ 31.025935][ T3701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.025947][ T3701] R13: 00007f134cd06038 R14: 00007f134cd05fa0 R15: 00007ffc9268d408 [ 31.025963][ T3701] [ 31.215907][ T3702] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.224871][ T3702] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.234898][ T3697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.281769][ T3697] FAULT_INJECTION: forcing a failure. [ 31.281769][ T3697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.294937][ T3697] CPU: 0 UID: 0 PID: 3697 Comm: syz.3.59 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.294982][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.294992][ T3697] Call Trace: [ 31.294998][ T3697] [ 31.295004][ T3697] __dump_stack+0x1d/0x30 [ 31.295027][ T3697] dump_stack_lvl+0xe8/0x140 [ 31.295051][ T3697] dump_stack+0x15/0x1b [ 31.295095][ T3697] should_fail_ex+0x265/0x280 [ 31.295119][ T3697] should_fail+0xb/0x20 [ 31.295139][ T3697] should_fail_usercopy+0x1a/0x20 [ 31.295163][ T3697] copy_folio_from_iter_atomic+0x26a/0x1150 [ 31.295324][ T3697] ? inode_to_bdi+0x47/0xa0 [ 31.295344][ T3697] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 31.295376][ T3697] generic_perform_write+0x2c2/0x490 [ 31.295404][ T3697] ext4_buffered_write_iter+0x1ee/0x3c0 [ 31.295482][ T3697] ? ext4_file_write_iter+0xfe/0xf60 [ 31.295516][ T3697] ext4_file_write_iter+0x387/0xf60 [ 31.295579][ T3697] ? kstrtouint+0x76/0xc0 [ 31.295654][ T3697] ? kstrtouint_from_user+0x9f/0xf0 [ 31.295677][ T3697] ? avc_policy_seqno+0x15/0x30 [ 31.295697][ T3697] ? selinux_file_permission+0x1e2/0x320 [ 31.295729][ T3697] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 31.295770][ T3697] vfs_write+0x52a/0x960 [ 31.295795][ T3697] ksys_write+0xda/0x1a0 [ 31.295815][ T3697] __x64_sys_write+0x40/0x50 [ 31.295836][ T3697] x64_sys_call+0x2847/0x3000 [ 31.295857][ T3697] do_syscall_64+0xd8/0x2a0 [ 31.295909][ T3697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.295960][ T3697] RIP: 0033:0x7f53f4fef749 [ 31.295973][ T3697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.295988][ T3697] RSP: 002b:00007f53f3a4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 31.296004][ T3697] RAX: ffffffffffffffda RBX: 00007f53f5245fa0 RCX: 00007f53f4fef749 [ 31.296015][ T3697] RDX: 00000000fffffdab RSI: 0000200000000000 RDI: 0000000000000009 [ 31.296027][ T3697] RBP: 00007f53f3a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 31.296037][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.296048][ T3697] R13: 00007f53f5246038 R14: 00007f53f5245fa0 R15: 00007ffc8faccf28 [ 31.296087][ T3697] [ 31.532220][ T3705] EXT4-fs (loop1): failed to initialize system zone (-117) [ 31.540830][ T3702] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.54: Allocating blocks 41-42 which overlap fs metadata [ 31.572130][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.573862][ T3705] EXT4-fs (loop1): mount failed [ 31.590744][ T3702] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.54: Allocating blocks 41-42 which overlap fs metadata [ 31.605963][ T3715] bridge_slave_0 (unregistering): left allmulticast mode [ 31.613263][ T3715] bridge_slave_0 (unregistering): left promiscuous mode [ 31.620632][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.628246][ T3702] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.54: Failed to acquire dquot type 1 [ 31.697701][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.700692][ T3702] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 31.770543][ T3725] FAULT_INJECTION: forcing a failure. [ 31.770543][ T3725] name failslab, interval 1, probability 0, space 0, times 0 [ 31.783482][ T3725] CPU: 0 UID: 0 PID: 3725 Comm: syz.3.66 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.783514][ T3725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.783526][ T3725] Call Trace: [ 31.783532][ T3725] [ 31.783538][ T3725] __dump_stack+0x1d/0x30 [ 31.783716][ T3725] dump_stack_lvl+0xe8/0x140 [ 31.783737][ T3725] dump_stack+0x15/0x1b [ 31.783754][ T3725] should_fail_ex+0x265/0x280 [ 31.783793][ T3725] should_failslab+0x8c/0xb0 [ 31.783816][ T3725] kmem_cache_alloc_noprof+0x69/0x4b0 [ 31.783837][ T3725] ? __anon_vma_prepare+0xcd/0x2f0 [ 31.783861][ T3725] __anon_vma_prepare+0xcd/0x2f0 [ 31.783941][ T3725] do_wp_page+0x18ee/0x2510 [ 31.784015][ T3725] ? css_rstat_updated+0xb7/0x240 [ 31.784033][ T3725] ? __rcu_read_lock+0x37/0x50 [ 31.784052][ T3725] handle_mm_fault+0x7b0/0x2c60 [ 31.784106][ T3725] do_user_addr_fault+0x630/0x1080 [ 31.784265][ T3725] ? ksys_mmap_pgoff+0xc2/0x310 [ 31.784362][ T3725] exc_page_fault+0x62/0xa0 [ 31.784388][ T3725] asm_exc_page_fault+0x26/0x30 [ 31.784481][ T3725] RIP: 0033:0x7f53f4eb0943 [ 31.784501][ T3725] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 31.784555][ T3725] RSP: 002b:00007f53f3a4e4a0 EFLAGS: 00010202 [ 31.784571][ T3725] RAX: 0000000000000400 RBX: 00007f53f3a4e540 RCX: 00007f53eb62f000 [ 31.784584][ T3725] RDX: 00007f53f3a4e6e0 RSI: 0000000000000011 RDI: 00007f53f3a4e5e0 [ 31.784625][ T3725] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001a4 [ 31.784637][ T3725] R10: 00000000000001c4 R11: 00007f53f3a4e540 R12: 0000000000000001 [ 31.784647][ T3725] R13: 00007f53f508fc40 R14: 0000000000000020 R15: 00007f53f3a4e5e0 [ 31.784664][ T3725] [ 31.784690][ T3725] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 31.810123][ T3702] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.54: corrupted inode contents [ 31.840081][ T3725] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.991778][ T3702] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.54: mark_inode_dirty error [ 32.009991][ T3723] set_capacity_and_notify: 14 callbacks suppressed [ 32.010007][ T3723] loop1: detected capacity change from 0 to 128 [ 32.023179][ T3725] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 32.033760][ T3725] EXT4-fs (loop3): orphan cleanup on readonly fs [ 32.050908][ T3702] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.54: corrupted inode contents [ 32.063847][ T3725] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.66: Allocating blocks 41-42 which overlap fs metadata [ 32.084293][ T3702] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.54: mark_inode_dirty error [ 32.096491][ T401] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.127790][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 32.127806][ T29] audit: type=1326 audit(1765683606.810:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5589ff749 code=0x7ffc0000 [ 32.164371][ T3725] EXT4-fs (loop3): Remounting filesystem read-only [ 32.175755][ T3702] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.54: corrupted inode contents [ 32.202746][ T3725] Quota error (device loop3): write_blk: dquota write failed [ 32.210157][ T3725] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 32.232311][ T3702] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 32.261892][ T29] audit: type=1326 audit(1765683606.850:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5589ff749 code=0x7ffc0000 [ 32.262753][ T3725] EXT4-fs (loop3): 1 truncate cleaned up [ 32.285074][ T29] audit: type=1326 audit(1765683606.850:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5589ff749 code=0x7ffc0000 [ 32.292691][ T3702] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.54: corrupted inode contents [ 32.314003][ T29] audit: type=1326 audit(1765683606.850:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb5589ff749 code=0x7ffc0000 [ 32.314068][ T29] audit: type=1326 audit(1765683606.850:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5589ff749 code=0x7ffc0000 [ 32.314116][ T29] audit: type=1326 audit(1765683606.850:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5589ff749 code=0x7ffc0000 [ 32.314145][ T29] audit: type=1326 audit(1765683606.850:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fb5589ff749 code=0x7ffc0000 [ 32.358073][ T3702] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.54: mark_inode_dirty error [ 32.372399][ T29] audit: type=1326 audit(1765683606.850:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5589ff749 code=0x7ffc0000 [ 32.382936][ T3725] EXT4-fs (loop3): pa ffff888107ab0150: logic 1, phys. 41, len 23 [ 32.422752][ T3702] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 32.430368][ T3725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.471526][ T3702] EXT4-fs (loop0): 1 truncate cleaned up [ 32.489275][ T3702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.532233][ T3725] syz.3.66 (3725) used greatest stack depth: 10160 bytes left [ 32.540784][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.563687][ T3702] syz.0.54 (3702) used greatest stack depth: 9952 bytes left [ 32.581622][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.605143][ T3744] loop3: detected capacity change from 0 to 1024 [ 32.615999][ T3744] ext4: Bad value for 'init_itable' [ 32.673384][ T3752] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 32.717534][ T3744] loop3: detected capacity change from 0 to 512 [ 32.730110][ T3744] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.73: corrupted inode contents [ 32.745913][ T3744] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 32.754679][ T3744] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.73: corrupted inode contents [ 32.766741][ T3744] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.73: mark_inode_dirty error [ 32.778174][ T3744] EXT4-fs (loop3): 1 orphan inode deleted [ 32.784838][ T3744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.014974][ T3762] __nla_validate_parse: 8 callbacks suppressed [ 33.014990][ T3762] netlink: 40 bytes leftover after parsing attributes in process `syz.4.80'. [ 33.147601][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.581759][ T3773] program syz.0.85 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.612588][ T3775] loop0: detected capacity change from 0 to 1024 [ 33.619873][ T3775] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.629959][ T3775] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 33.640951][ T3775] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 33.650885][ T3775] JBD2: no valid journal superblock found [ 33.656688][ T3775] EXT4-fs (loop0): Could not load journal inode [ 33.760010][ T3780] loop0: detected capacity change from 0 to 1024 [ 33.766951][ T3780] EXT4-fs (loop0): invalid first ino: 9 [ 33.784726][ T3780] loop0: detected capacity change from 0 to 2048 [ 33.793529][ T3780] EXT4-fs (loop0): failed to initialize system zone (-117) [ 33.800748][ T3780] EXT4-fs (loop0): mount failed [ 33.957211][ T3802] FAULT_INJECTION: forcing a failure. [ 33.957211][ T3802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.970271][ T3802] CPU: 0 UID: 0 PID: 3802 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.970296][ T3802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.970307][ T3802] Call Trace: [ 33.970312][ T3802] [ 33.970329][ T3802] __dump_stack+0x1d/0x30 [ 33.970350][ T3802] dump_stack_lvl+0xe8/0x140 [ 33.970370][ T3802] dump_stack+0x15/0x1b [ 33.970387][ T3802] should_fail_ex+0x265/0x280 [ 33.970407][ T3802] should_fail+0xb/0x20 [ 33.970505][ T3802] should_fail_usercopy+0x1a/0x20 [ 33.970519][ T3802] _copy_from_user+0x1c/0xb0 [ 33.970535][ T3802] __copy_msghdr+0x244/0x300 [ 33.970557][ T3802] ___sys_sendmsg+0x109/0x1d0 [ 33.970579][ T3802] __x64_sys_sendmsg+0xd4/0x160 [ 33.970596][ T3802] x64_sys_call+0x17ba/0x3000 [ 33.970629][ T3802] do_syscall_64+0xd8/0x2a0 [ 33.970648][ T3802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.970660][ T3802] RIP: 0033:0x7f5ddfa8f749 [ 33.970669][ T3802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.970679][ T3802] RSP: 002b:00007f5dde4f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.970709][ T3802] RAX: ffffffffffffffda RBX: 00007f5ddfce5fa0 RCX: 00007f5ddfa8f749 [ 33.970716][ T3802] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 33.970723][ T3802] RBP: 00007f5dde4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.970730][ T3802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.970737][ T3802] R13: 00007f5ddfce6038 R14: 00007f5ddfce5fa0 R15: 00007ffe090eaee8 [ 33.970747][ T3802] [ 34.142522][ T3566] Bluetooth: hci0: command 0x1003 tx timeout [ 34.148659][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.183262][ T3788] capability: warning: `syz.4.91' uses 32-bit capabilities (legacy support in use) [ 34.269853][ T3812] loop0: detected capacity change from 0 to 512 [ 34.284883][ T3812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.307002][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.456016][ T3831] netlink: 40 bytes leftover after parsing attributes in process `syz.0.102'. [ 34.471245][ T3831] loop0: detected capacity change from 0 to 128 [ 34.523641][ T3837] atomic_op ffff888105514528 conn xmit_atomic 0000000000000000 [ 34.581490][ T3844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.590582][ T3844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.676712][ T3856] loop2: detected capacity change from 0 to 256 [ 34.689824][ T3856] FAT-fs (loop2): Directory bread(block 64) failed [ 34.697191][ T3856] FAT-fs (loop2): Directory bread(block 65) failed [ 34.703851][ T3856] FAT-fs (loop2): Directory bread(block 66) failed [ 34.710407][ T3856] FAT-fs (loop2): Directory bread(block 67) failed [ 34.717085][ T3856] FAT-fs (loop2): Directory bread(block 68) failed [ 34.724068][ T3856] FAT-fs (loop2): Directory bread(block 69) failed [ 34.730641][ T3856] FAT-fs (loop2): Directory bread(block 70) failed [ 34.737276][ T3856] FAT-fs (loop2): Directory bread(block 71) failed [ 34.743911][ T3856] FAT-fs (loop2): Directory bread(block 72) failed [ 34.750580][ T3856] FAT-fs (loop2): Directory bread(block 73) failed [ 34.756587][ T3859] futex_wake_op: syz.0.113 tries to shift op by 32; fix this program [ 34.766116][ T3856] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 34.774695][ T3856] FAT-fs (loop2): Filesystem has been set read-only [ 34.781488][ T3856] syz.2.112: attempt to access beyond end of device [ 34.781488][ T3856] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 34.786230][ T3859] IPv6: NLM_F_CREATE should be specified when creating new route [ 34.795480][ T3856] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 34.811512][ T3856] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 34.820620][ T3856] syz.2.112: attempt to access beyond end of device [ 34.820620][ T3856] loop2: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 34.861009][ T3861] loop0: detected capacity change from 0 to 1024 [ 34.867783][ T3861] ext4: Bad value for 'init_itable' [ 34.952161][ T3861] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.114: corrupted inode contents [ 34.962845][ T3868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.116'. [ 34.964448][ T3861] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 34.981804][ T3861] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.114: corrupted inode contents [ 34.993999][ T3861] EXT4-fs error (device loop0): ext4_evict_inode:301: inode #15: comm syz.0.114: mark_inode_dirty error [ 35.005584][ T3861] EXT4-fs (loop0): 1 orphan inode deleted [ 35.011895][ T3861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.105896][ T3870] netlink: 48 bytes leftover after parsing attributes in process `syz.2.117'. [ 35.120645][ T3870] EXT4-fs (loop2): 1 truncate cleaned up [ 35.145562][ T3870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.279543][ T3883] netlink: 'syz.4.122': attribute type 39 has an invalid length. [ 35.313687][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.430443][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.450825][ T3892] capability: warning: `syz.4.127' uses deprecated v2 capabilities in a way that may be insecure [ 35.485657][ T3895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 35.501753][ T3895] team0: Port device team_slave_1 removed [ 35.525704][ T3897] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 35.549720][ T3897] EXT4-fs (loop1): mount failed [ 35.557496][ T3895] netlink: 48 bytes leftover after parsing attributes in process `syz.0.125'. [ 35.760233][ T3910] syzkaller0: entered promiscuous mode [ 35.765889][ T3910] syzkaller0: entered allmulticast mode [ 35.776687][ T3910] netlink: 176 bytes leftover after parsing attributes in process `syz.1.132'. [ 35.855916][ T3912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3912 comm=syz.1.133 [ 35.977012][ T3422] IPVS: starting estimator thread 0... [ 36.072536][ T3915] IPVS: using max 2448 ests per chain, 122400 per kthread [ 36.241095][ T3917] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 36.271776][ T3923] netlink: 36 bytes leftover after parsing attributes in process `syz.2.135'. [ 36.294645][ T3923] EXT4-fs: Ignoring removed orlov option [ 36.307484][ T3923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.494503][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.748086][ T3990] netlink: 'syz.1.146': attribute type 4 has an invalid length. [ 36.755955][ T3990] netlink: 152 bytes leftover after parsing attributes in process `syz.1.146'. [ 36.769829][ T3990] .`: renamed from bond0 (while UP) [ 37.235818][ T4001] netlink: 'syz.4.151': attribute type 21 has an invalid length. [ 37.243721][ T4001] netlink: 100 bytes leftover after parsing attributes in process `syz.4.151'. [ 37.491159][ T4004] set_capacity_and_notify: 6 callbacks suppressed [ 37.491177][ T4004] loop2: detected capacity change from 0 to 4096 [ 37.527334][ T4004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.554191][ T4004] netlink: 'syz.2.152': attribute type 2 has an invalid length. [ 37.562829][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 37.562850][ T29] audit: type=1400 audit(1765683612.250:783): avc: denied { create } for pid=4003 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 37.588707][ T29] audit: type=1400 audit(1765683612.250:784): avc: denied { connect } for pid=4003 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 37.657208][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.743861][ T29] audit: type=1400 audit(1765683612.430:785): avc: denied { append } for pid=4021 comm="syz.1.160" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.790927][ T4018] syzkaller0: entered promiscuous mode [ 37.796482][ T4018] syzkaller0: entered allmulticast mode [ 37.907405][ T29] audit: type=1400 audit(1765683612.580:786): avc: denied { write } for pid=4014 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 37.937462][ T29] audit: type=1400 audit(1765683612.600:787): avc: denied { shutdown } for pid=4041 comm="syz.2.164" laddr=fe80::12 lport=51794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.020784][ T29] audit: type=1400 audit(1765683612.700:788): avc: denied { bind } for pid=4048 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 38.042102][ T4049] __nla_validate_parse: 1 callbacks suppressed [ 38.042122][ T4049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.165'. [ 38.061727][ T4056] nft_compat: unsupported protocol 0 [ 38.123672][ T29] audit: type=1326 audit(1765683612.760:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4041 comm="syz.2.164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f134caaf749 code=0x0 [ 38.146487][ T29] audit: type=1400 audit(1765683612.790:790): avc: denied { bind } for pid=4048 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.181935][ T29] audit: type=1400 audit(1765683612.810:791): avc: denied { ioctl } for pid=4048 comm="syz.4.165" path="socket:[6832]" dev="sockfs" ino=6832 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 38.390616][ T4098] netlink: 'syz.4.174': attribute type 8 has an invalid length. [ 38.399204][ T4045] loop1: detected capacity change from 0 to 1024 [ 38.406637][ T4045] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 38.418691][ T4045] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 38.431558][ T4045] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: inode #32: comm syz.1.162: iget: special inode unallocated [ 38.456922][ T4045] EXT4-fs (loop1): Remounting filesystem read-only [ 38.464065][ T4045] EXT4-fs (loop1): no journal found [ 38.469354][ T4045] EXT4-fs (loop1): can't get journal size [ 38.475881][ T4045] EXT4-fs (loop1): filesystem is read-only [ 38.485079][ T4045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.504008][ T29] audit: type=1400 audit(1765683613.190:792): avc: denied { read } for pid=4039 comm="syz.1.162" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.580685][ T4045] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 38.611784][ T4128] syz.4.176 uses obsolete (PF_INET,SOCK_PACKET) [ 38.734381][ T4043] syz.2.164 (4043) used greatest stack depth: 9328 bytes left [ 38.788007][ T4164] FAULT_INJECTION: forcing a failure. [ 38.788007][ T4164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.801123][ T4164] CPU: 1 UID: 0 PID: 4164 Comm: syz.2.179 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.801139][ T4164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.801147][ T4164] Call Trace: [ 38.801151][ T4164] [ 38.801156][ T4164] __dump_stack+0x1d/0x30 [ 38.801171][ T4164] dump_stack_lvl+0xe8/0x140 [ 38.801298][ T4164] dump_stack+0x15/0x1b [ 38.801308][ T4164] should_fail_ex+0x265/0x280 [ 38.801322][ T4164] should_fail+0xb/0x20 [ 38.801339][ T4164] should_fail_usercopy+0x1a/0x20 [ 38.801352][ T4164] _copy_from_user+0x1c/0xb0 [ 38.801367][ T4164] load_msg+0x173/0x2f0 [ 38.801403][ T4164] do_mq_timedsend+0x23e/0x6b0 [ 38.801415][ T4164] __x64_sys_mq_timedsend+0xd1/0x160 [ 38.801435][ T4164] x64_sys_call+0x22db/0x3000 [ 38.801464][ T4164] do_syscall_64+0xd8/0x2a0 [ 38.801483][ T4164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.801495][ T4164] RIP: 0033:0x7f134caaf749 [ 38.801504][ T4164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.801582][ T4164] RSP: 002b:00007f134b50f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 38.801594][ T4164] RAX: ffffffffffffffda RBX: 00007f134cd05fa0 RCX: 00007f134caaf749 [ 38.801677][ T4164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 38.801790][ T4164] RBP: 00007f134b50f090 R08: 0000000000000000 R09: 0000000000000000 [ 38.801797][ T4164] R10: 0200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.801804][ T4164] R13: 00007f134cd06038 R14: 00007f134cd05fa0 R15: 00007ffc9268d408 [ 38.801859][ T4164] [ 39.003951][ T4175] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 39.378063][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.455794][ T4220] loop3: detected capacity change from 0 to 1024 [ 39.467231][ T4220] EXT4-fs: Ignoring removed orlov option [ 39.477132][ T4220] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 39.499858][ T4220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.528058][ T4249] netlink: 40 bytes leftover after parsing attributes in process `syz.1.193'. [ 39.538881][ T4220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 39.557443][ T4220] netlink: 48 bytes leftover after parsing attributes in process `syz.3.187'. [ 39.566626][ T4245] loop1: detected capacity change from 0 to 128 [ 39.618523][ T4253] loop1: detected capacity change from 0 to 1024 [ 39.626558][ T4253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.647097][ T4253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.667007][ T4258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 39.684413][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.764593][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.812454][ T4265] loop1: detected capacity change from 0 to 512 [ 39.819891][ T4265] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.864925][ T4265] EXT4-fs (loop1): 1 truncate cleaned up [ 39.871812][ T4265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.613594][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.734126][ T4282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.204'. [ 40.762953][ T4279] loop3: detected capacity change from 0 to 128 [ 40.865063][ T4284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4284 comm=syz.1.203 [ 40.936127][ T4288] loop3: detected capacity change from 0 to 128 [ 40.978804][ T4284] netlink: 'syz.1.203': attribute type 1 has an invalid length. [ 41.095910][ T4298] netlink: 40 bytes leftover after parsing attributes in process `syz.3.209'. [ 41.130084][ T4298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.137349][ T4298] IPv6: NLM_F_CREATE should be set when creating new route [ 41.144609][ T4298] IPv6: NLM_F_CREATE should be set when creating new route [ 41.212336][ T4298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.209'. [ 41.225942][ T4304] loop1: detected capacity change from 0 to 1024 [ 41.264078][ T4303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 41.281322][ T4304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.331043][ T4304] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.212: missing EA_INODE flag [ 41.357269][ T4304] EXT4-fs (loop1): Remounting filesystem read-only [ 41.537235][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.688804][ T4318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.216'. [ 41.704583][ T4318] loop2: detected capacity change from 0 to 128 [ 41.730782][ T4322] FAULT_INJECTION: forcing a failure. [ 41.730782][ T4322] name failslab, interval 1, probability 0, space 0, times 0 [ 41.743566][ T4322] CPU: 0 UID: 0 PID: 4322 Comm: syz.0.219 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.743594][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.743607][ T4322] Call Trace: [ 41.743612][ T4322] [ 41.743735][ T4322] __dump_stack+0x1d/0x30 [ 41.743761][ T4322] dump_stack_lvl+0xe8/0x140 [ 41.743785][ T4322] dump_stack+0x15/0x1b [ 41.743814][ T4322] should_fail_ex+0x265/0x280 [ 41.743868][ T4322] should_failslab+0x8c/0xb0 [ 41.743887][ T4322] kmem_cache_alloc_noprof+0x69/0x4b0 [ 41.743907][ T4322] ? skb_clone+0x151/0x1f0 [ 41.744004][ T4322] skb_clone+0x151/0x1f0 [ 41.744032][ T4322] pfkey_sendmsg+0x2cc/0x900 [ 41.744088][ T4322] ? avc_has_perm+0xf7/0x180 [ 41.744114][ T4322] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 41.744215][ T4322] __sock_sendmsg+0x145/0x180 [ 41.744232][ T4322] ____sys_sendmsg+0x31e/0x4a0 [ 41.744272][ T4322] ___sys_sendmsg+0x17b/0x1d0 [ 41.744304][ T4322] __x64_sys_sendmsg+0xd4/0x160 [ 41.744345][ T4322] x64_sys_call+0x17ba/0x3000 [ 41.744369][ T4322] do_syscall_64+0xd8/0x2a0 [ 41.744466][ T4322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.744486][ T4322] RIP: 0033:0x7f5ddfa8f749 [ 41.744500][ T4322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.744519][ T4322] RSP: 002b:00007f5dde4f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.744538][ T4322] RAX: ffffffffffffffda RBX: 00007f5ddfce5fa0 RCX: 00007f5ddfa8f749 [ 41.744548][ T4322] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 41.744625][ T4322] RBP: 00007f5dde4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.744636][ T4322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.744646][ T4322] R13: 00007f5ddfce6038 R14: 00007f5ddfce5fa0 R15: 00007ffe090eaee8 [ 41.744660][ T4322] [ 41.940052][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.965523][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.022754][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.105393][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.177851][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 42.242170][ T60] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.251707][ T60] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.261202][ T60] .` (unregistering): Released all slaves [ 42.279764][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.286884][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.294043][ T4334] bridge_slave_0: entered allmulticast mode [ 42.300287][ T4334] bridge_slave_0: entered promiscuous mode [ 42.307376][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.314505][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.321711][ T4334] bridge_slave_1: entered allmulticast mode [ 42.328287][ T4334] bridge_slave_1: entered promiscuous mode [ 42.348056][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.358568][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.370467][ T60] hsr_slave_0: left promiscuous mode [ 42.376003][ T60] hsr_slave_1: left promiscuous mode [ 42.381617][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.389032][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.396760][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.404233][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.414459][ T60] veth1_macvtap: left promiscuous mode [ 42.419914][ T60] veth0_macvtap: left promiscuous mode [ 42.425465][ T60] veth1_vlan: left promiscuous mode [ 42.430679][ T60] veth0_vlan: left promiscuous mode [ 42.505247][ T60] team0 (unregistering): Port device team_slave_1 removed [ 42.515346][ T60] team0 (unregistering): Port device team_slave_0 removed [ 42.576241][ T4334] team0: Port device team_slave_0 added [ 42.583752][ T4355] audit_log_lost: 222 callbacks suppressed [ 42.583765][ T4355] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 42.589813][ T4334] team0: Port device team_slave_1 added [ 42.597226][ T4355] audit: out of memory in audit_log_start [ 42.632573][ T29] audit: type=1326 audit(1765683617.320:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f4fef749 code=0x7ffc0000 [ 42.659821][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.666809][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.692725][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.703293][ T29] audit: type=1326 audit(1765683617.340:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f4fef749 code=0x7ffc0000 [ 42.726639][ T29] audit: type=1326 audit(1765683617.340:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53f4fef749 code=0x7ffc0000 [ 42.747935][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.750128][ T29] audit: type=1326 audit(1765683617.340:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f4fef749 code=0x7ffc0000 [ 42.756845][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.756869][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.780112][ T29] audit: type=1326 audit(1765683617.340:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f53f4fef749 code=0x7ffc0000 [ 42.780142][ T29] audit: type=1326 audit(1765683617.340:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f4fef749 code=0x7ffc0000 [ 42.863078][ T29] audit: type=1326 audit(1765683617.340:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53f4fef749 code=0x7ffc0000 [ 42.886393][ T29] audit: type=1326 audit(1765683617.340:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f4fef749 code=0x7ffc0000 [ 42.949301][ T4371] FAULT_INJECTION: forcing a failure. [ 42.949301][ T4371] name failslab, interval 1, probability 0, space 0, times 0 [ 42.962074][ T4371] CPU: 0 UID: 0 PID: 4371 Comm: gtp Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.962103][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.962113][ T4371] Call Trace: [ 42.962119][ T4371] [ 42.962126][ T4371] __dump_stack+0x1d/0x30 [ 42.962238][ T4371] dump_stack_lvl+0xe8/0x140 [ 42.962257][ T4371] dump_stack+0x15/0x1b [ 42.962347][ T4371] should_fail_ex+0x265/0x280 [ 42.962368][ T4371] should_failslab+0x8c/0xb0 [ 42.962443][ T4371] __kmalloc_cache_noprof+0x65/0x4c0 [ 42.962468][ T4371] ? getname_flags+0x208/0x3b0 [ 42.962513][ T4371] getname_flags+0x208/0x3b0 [ 42.962533][ T4371] __se_sys_quotactl+0x16a/0x670 [ 42.962554][ T4371] __x64_sys_quotactl+0x55/0x70 [ 42.962572][ T4371] x64_sys_call+0x19a4/0x3000 [ 42.962629][ T4371] do_syscall_64+0xd8/0x2a0 [ 42.962724][ T4371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.962742][ T4371] RIP: 0033:0x7f5ddfa8f749 [ 42.962755][ T4371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.962769][ T4371] RSP: 002b:00007f5dde4f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 42.962880][ T4371] RAX: ffffffffffffffda RBX: 00007f5ddfce5fa0 RCX: 00007f5ddfa8f749 [ 42.962891][ T4371] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: ffffffff80000200 [ 42.962901][ T4371] RBP: 00007f5dde4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.962912][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.962922][ T4371] R13: 00007f5ddfce6038 R14: 00007f5ddfce5fa0 R15: 00007ffe090eaee8 [ 42.962937][ T4371] [ 43.148113][ T4334] hsr_slave_0: entered promiscuous mode [ 43.154124][ T4334] hsr_slave_1: entered promiscuous mode [ 43.189160][ T60] IPVS: stop unused estimator thread 0... [ 43.255010][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.275284][ T4380] loop3: detected capacity change from 0 to 128 [ 43.300344][ T4380] vfat: Unknown parameter '01777777777777777777777' [ 43.340427][ T4334] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.356669][ T4386] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4386 comm=syz.0.234 [ 43.369103][ T4386] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4386 comm=syz.0.234 [ 43.384347][ T4391] __nla_validate_parse: 3 callbacks suppressed [ 43.384362][ T4391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.235'. [ 43.404260][ T4334] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.404837][ T4386] netlink: 272 bytes leftover after parsing attributes in process `syz.0.234'. [ 43.423390][ T4334] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.436577][ T4389] loop2: detected capacity change from 0 to 128 [ 43.452157][ T4334] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.577894][ T4417] netlink: 'syz.2.239': attribute type 30 has an invalid length. [ 43.583608][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.599714][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.611192][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.618339][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.681944][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.681996][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.708635][ T4334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.708655][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.771277][ T4437] syz0: rxe_newlink: already configured on bond_slave_0 [ 43.810554][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.826701][ T4437] loop2: detected capacity change from 0 to 2048 [ 43.885253][ T4437] EXT4-fs (loop2): failed to initialize system zone (-117) [ 43.892726][ T4437] EXT4-fs (loop2): mount failed [ 44.017462][ T4478] loop2: detected capacity change from 0 to 128 [ 44.084984][ T4334] veth0_vlan: entered promiscuous mode [ 44.092791][ T4334] veth1_vlan: entered promiscuous mode [ 44.126775][ T4334] veth0_macvtap: entered promiscuous mode [ 44.141438][ T4334] veth1_macvtap: entered promiscuous mode [ 44.173640][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.209669][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.217072][ T4507] netlink: 120 bytes leftover after parsing attributes in process `syz.0.257'. [ 44.225956][ T1088] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.226330][ T1088] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.262793][ T4507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.257'. [ 44.273822][ T1088] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.302214][ T4512] syz0: rxe_newlink: already configured on bond_slave_0 [ 44.317466][ T1088] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.335073][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 44.342704][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 44.350206][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 44.357702][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 44.365141][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 44.372647][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 44.380037][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 44.387529][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 44.394966][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 44.402344][ T23] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 44.411735][ T4522] ================================================================== [ 44.419818][ T4522] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 44.427187][ T4522] [ 44.429502][ T4522] write to 0xffff888104fd6100 of 8 bytes by task 4515 on cpu 1: [ 44.437110][ T4522] mas_wmb_replace+0x208/0xfa0 [ 44.441860][ T4522] mas_wr_store_entry+0x13e3/0x2750 [ 44.447050][ T4522] mas_store_prealloc+0x760/0xa90 [ 44.452066][ T4522] vma_iter_store_new+0x1c5/0x200 [ 44.457074][ T4522] vma_complete+0x125/0x580 [ 44.461566][ T4522] __split_vma+0x5e3/0x660 [ 44.465979][ T4522] vma_modify+0xbee/0xd50 [ 44.470299][ T4522] vma_modify_flags+0x10c/0x190 [ 44.475138][ T4522] mprotect_fixup+0x30f/0x5e0 [ 44.479796][ T4522] do_mprotect_pkey+0x6d6/0x980 [ 44.484629][ T4522] __x64_sys_mprotect+0x48/0x60 [ 44.489462][ T4522] x64_sys_call+0x2c3b/0x3000 [ 44.494125][ T4522] do_syscall_64+0xd8/0x2a0 [ 44.498623][ T4522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.504505][ T4522] [ 44.506817][ T4522] read to 0xffff888104fd6100 of 8 bytes by task 4522 on cpu 0: [ 44.514343][ T4522] mas_state_walk+0x119/0x650 [ 44.519023][ T4522] mas_walk+0x60/0x150 [ 44.523082][ T4522] lock_vma_under_rcu+0x95/0x1b0 [ 44.528011][ T4522] do_user_addr_fault+0x233/0x1080 [ 44.533111][ T4522] exc_page_fault+0x62/0xa0 [ 44.537603][ T4522] asm_exc_page_fault+0x26/0x30 [ 44.542435][ T4522] [ 44.544739][ T4522] value changed: 0xffff88810abe8dc1 -> 0xffff888104fd6100 [ 44.551822][ T4522] [ 44.554124][ T4522] Reported by Kernel Concurrency Sanitizer on: [ 44.560253][ T4522] CPU: 0 UID: 0 PID: 4522 Comm: syz.0.259 Not tainted syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 44.569869][ T4522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.579906][ T4522] ================================================================== [ 44.591900][ T4512] loop2: detected capacity change from 0 to 2048 [ 44.610763][ T23] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 44.647559][ T4512] EXT4-fs (loop2): failed to initialize system zone (-117) [ 44.655133][ T4512] EXT4-fs (loop2): mount failed [ 44.997537][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.055416][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.126237][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.195372][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.260805][ T52] bridge_slave_1: left allmulticast mode [ 45.262561][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 45.266663][ T52] bridge_slave_1: left promiscuous mode [ 45.272512][ T3566] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.278162][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.293752][ T52] bridge_slave_0: left allmulticast mode [ 45.299401][ T52] bridge_slave_0: left promiscuous mode [ 45.305097][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.384728][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.394393][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.404192][ T52] bond0 (unregistering): Released all slaves [ 45.471150][ T52] hsr_slave_0: left promiscuous mode [ 45.476828][ T52] hsr_slave_1: left promiscuous mode [ 45.482415][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.489886][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.497620][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.505144][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.517324][ T52] veth1_macvtap: left promiscuous mode [ 45.522875][ T52] veth0_macvtap: left promiscuous mode [ 45.528876][ T52] veth1_vlan: left promiscuous mode [ 45.534177][ T52] veth0_vlan: left promiscuous mode [ 45.588499][ T52] team0 (unregistering): Port device team_slave_0 removed [ 45.908914][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.985171][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.054844][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.104866][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.165055][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.215304][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.245842][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.285853][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.365490][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.406359][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.455624][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.495088][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.572798][ T52] bridge_slave_1: left allmulticast mode [ 46.578448][ T52] bridge_slave_1: left promiscuous mode [ 46.584294][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.591973][ T52] bridge_slave_0: left allmulticast mode [ 46.597683][ T52] bridge_slave_0: left promiscuous mode [ 46.603322][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.611482][ T52] bridge_slave_1: left allmulticast mode [ 46.617137][ T52] bridge_slave_1: left promiscuous mode [ 46.622828][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.630410][ T52] bridge_slave_0: left allmulticast mode [ 46.636099][ T52] bridge_slave_0: left promiscuous mode [ 46.641733][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.650314][ T52] bridge_slave_1: left allmulticast mode [ 46.655957][ T52] bridge_slave_1: left promiscuous mode [ 46.661588][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.786111][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.795894][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.805345][ T52] bond0 (unregistering): Released all slaves [ 46.914265][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.923908][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.933119][ T52] bond0 (unregistering): Released all slaves [ 47.024795][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.034396][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.043823][ T52] bond0 (unregistering): Released all slaves [ 47.057949][ T23] syz0: Port: 1 Link DOWN [ 47.127573][ T52] hsr_slave_0: left promiscuous mode [ 47.134454][ T52] hsr_slave_1: left promiscuous mode [ 47.140136][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.147553][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.155353][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.162799][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.171688][ T52] hsr_slave_0: left promiscuous mode [ 47.177327][ T52] hsr_slave_1: left promiscuous mode [ 47.182886][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.190243][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.197733][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.205137][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.214146][ T52] hsr_slave_0: left promiscuous mode [ 47.219731][ T52] hsr_slave_1: left promiscuous mode [ 47.225460][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.232935][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.240338][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.247728][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.261472][ T52] veth1_macvtap: left promiscuous mode [ 47.267022][ T52] veth0_macvtap: left promiscuous mode [ 47.272562][ T52] veth1_vlan: left promiscuous mode [ 47.277752][ T52] veth0_vlan: left promiscuous mode [ 47.283529][ T52] veth1_macvtap: left promiscuous mode [ 47.288972][ T52] veth0_macvtap: left promiscuous mode [ 47.294745][ T52] veth1_vlan: left promiscuous mode [ 47.299953][ T52] veth0_vlan: left promiscuous mode [ 47.305577][ T52] veth1_macvtap: left promiscuous mode [ 47.311135][ T52] veth0_macvtap: left promiscuous mode [ 47.316671][ T52] veth1_vlan: left promiscuous mode [ 47.321877][ T52] veth0_vlan: left promiscuous mode [ 47.431716][ T52] team0 (unregistering): Port device team_slave_1 removed [ 47.441806][ T52] team0 (unregistering): Port device team_slave_0 removed [ 47.490247][ T52] team0 (unregistering): Port device team_slave_1 removed [ 47.501123][ T52] team0 (unregistering): Port device team_slave_0 removed [ 47.548271][ T52] team0 (unregistering): Port device team_slave_1 removed [ 47.558036][ T52] team0 (unregistering): Port device team_slave_0 removed [ 47.568735][ T41] smc: removing ib device syz0 [ 48.224117][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.265544][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.314918][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.365342][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.429719][ T52] bridge_slave_1: left allmulticast mode [ 48.435420][ T52] bridge_slave_1: left promiscuous mode [ 48.441061][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.449193][ T52] bridge_slave_0: left allmulticast mode [ 48.454928][ T52] bridge_slave_0: left promiscuous mode [ 48.460583][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.545342][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.555627][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.565111][ T52] bond0 (unregistering): Released all slaves [ 48.606484][ T52] hsr_slave_0: left promiscuous mode [ 48.612243][ T52] hsr_slave_1: left promiscuous mode [ 48.618154][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.625666][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.633455][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.640821][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.651147][ T52] veth1_macvtap: left promiscuous mode [ 48.656747][ T52] veth0_macvtap: left promiscuous mode [ 48.662363][ T52] veth1_vlan: left promiscuous mode [ 48.668553][ T52] veth0_vlan: left promiscuous mode [ 48.727123][ T52] team0 (unregistering): Port device team_slave_1 removed [ 48.736895][ T52] team0 (unregistering): Port device team_slave_0 removed