last executing test programs: 29.365421713s ago: executing program 3 (id=1674): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1001, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eee, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) r1 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x160, 0x220, 0xc8, 0x0, 0x160, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0xff0000ff, 0xff000000, 'veth0_vlan\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x4, 0x3, 0x45}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010102, 0xffffff00, 0xffffff, 'nr0\x00', 'team0\x00', {0xff}, {0xff}, 0x21, 0x1, 0x1}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0xff, 'pim6reg\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x67, 0x2, 0x41}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x5, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x1f, 0x4, @tid=r1}, &(0x7f0000000200)) 29.215686405s ago: executing program 3 (id=1680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x4, 0x1}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 29.150001116s ago: executing program 3 (id=1687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x327000, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 28.764632181s ago: executing program 3 (id=1697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0e0000000400000004000000090000000000000040cc26c00136a4e3203496905167f25931d0353bd1b7fe72aee6ed8ccafe912e90f8ea5feb4df7d64533690d78efaa7e801ef18d5ca522a2629790f25d27870c838b665192734cc7bda651a416fe4414d29758361ccde2df9ea9d543ce5ee86d6c08e7d2c2387e8555f860ab3fe25065ed88aedc2c2bd606205b650bd7019ebbcaa3", @ANYRESDEC, @ANYBLOB="f6ffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400008, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x6, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000080), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000600)='./file0\x00', 0x15090, &(0x7f0000000440)=ANY=[@ANYRES8=0x0], 0x2, 0x11ed, &(0x7f0000003040)="$eJzs3EGLW1UUB/Az09HWqTMZtVZbEC+60c2zmYUrFwaZgjSgtE2hFYRX50VDMknICwMRse7c+jnEpTtB/AKzceNacDcbl12IT0wG25RxMYjzYPj9Njlw7j/cm0DghpwcvvPNXr9bZt18GqsrK7E2jkgPU6RYjXOx8FW8eeeXX1+5dffejVa7vXMzpeut2823U0qbr/740RffvfbT9OKd7zd/OB8HWx8f/r7928HlgyuHf97+rFemXpmGo2nK0/3RaJrfHxRpt1f2s5Q+HBR5WaTesCwmS/3uYDQez1I+3N1YH0+Kskz5cJb6xSxNR2k6maX807w3TFmWpY314L/ofPuwqqqIqnoqno6qqqpnYj0uxrOxEZvRiK14Lp6PF+JSvBiX46V4Oa7MV9W9bwAAAAAAAAAAAAAAAAAAADhbzP8DAAAAAAAAAAAAAAAAAABA/cz/AwAAAAAAAAAAAAAAAAAAQP3M/wMAAAAAAAAAAAAAAAAAAED9bt29d6PVbu/cTOlCxN7X+539zuJxMeTf6kYvBlHEtWjEHzGf/l9Y1Nffb+9cS3Nb8dbeg6P8g/3OueV8c/53Asfmm4t8Ws6fj/XH89vRiEvH57ePzV+IN15/LJ9FI37+JEYxiN34O/so/2Uzpfc+aD+RvzpfBwAAAGdBlv6xfH9fPepn/9LvLPon+H7gifv1Wlxdq/XoREQ5+7yfDwbF5EwU7/5Pz7xy9GrVfkCF4pSKmj+YOBWP3vS6dwIAAAAAAAAAAMBJnMbPCes+IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7EDxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgqAAD//xwR7to=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18, r5}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r7, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000003c0), &(0x7f0000000400)=0x8) open(&(0x7f00000003c0)='.\x00', 0x500, 0x97) 28.518873524s ago: executing program 3 (id=1704): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000003c0)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000000000000080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb4, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f00000006c0), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x29, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x63cbaff8, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @ldst={0x2, 0x3, 0x4, 0x6, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}, @ldst={0x0, 0x0, 0x4, 0x1, 0x2, 0x54}]}, &(0x7f0000000000)='GPL\x00', 0x200, 0x1000, &(0x7f00000015c0)=""/4096, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xc, 0x7aca, 0x8}, 0x10, r5, r2, 0x5, 0x0, &(0x7f0000000900)=[{0x3, 0x4, 0x10, 0x9}, {0x4, 0x3, 0x3}, {0x0, 0x1, 0x0, 0x6}, {0x5, 0x5, 0x9, 0x1}, {0x0, 0x4, 0x10, 0x7}], 0x10, 0x80, @void, @value}, 0x94) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x1}}, 0x80, 0x0}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 27.700483696s ago: executing program 3 (id=1709): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0xeb8, 0x30, 0x1, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{0x0, 0x0, 0x0, 0x9}, {0x0, 0x4}, {}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0xfffffff8}, {0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x200}, {0x69, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {0x0, 0x2b}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000, 0x3}, {0x0, 0x0, 0x8000, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x10001}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0xff}, {0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x7fff}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {0x0, 0x0, 0x200000, 0xfffffffe}, {0x2}, {}, {0x8}, {}, {0x409}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x100, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {}, {}, {0x0, 0x0, 0xabd}, {}, {0x0, 0xdd86}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x40001}, {0x4}, {}, {0xfffffffe}, {}, {}, {}, {0x80000000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212}, {0x0, 0x0, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {0x2, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0xe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x5, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, r1, 0x0, 0x4, &(0x7f0000000040)='GPL\x00'}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xff81, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c8}, 0x20004804) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102000000000000000002001a000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f28edd81ab64db88bebd7f17bd812f8f03ec543bbbefc83c046d3b7691", @ANYRES8=r4, @ANYRES8=r4], 0xfc}}, 0x0) eventfd(0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) 27.679549496s ago: executing program 32 (id=1709): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0xeb8, 0x30, 0x1, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{0x0, 0x0, 0x0, 0x9}, {0x0, 0x4}, {}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0xfffffff8}, {0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x200}, {0x69, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {0x0, 0x2b}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000, 0x3}, {0x0, 0x0, 0x8000, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x10001}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0xff}, {0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x7fff}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {0x0, 0x0, 0x200000, 0xfffffffe}, {0x2}, {}, {0x8}, {}, {0x409}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x100, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {}, {}, {0x0, 0x0, 0xabd}, {}, {0x0, 0xdd86}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x40001}, {0x4}, {}, {0xfffffffe}, {}, {}, {}, {0x80000000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212}, {0x0, 0x0, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {0x2, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0xe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x5, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, r1, 0x0, 0x4, &(0x7f0000000040)='GPL\x00'}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xff81, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c8}, 0x20004804) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102000000000000000002001a000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f28edd81ab64db88bebd7f17bd812f8f03ec543bbbefc83c046d3b7691", @ANYRES8=r4, @ANYRES8=r4], 0xfc}}, 0x0) eventfd(0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) 1.325560592s ago: executing program 4 (id=2237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x14, r1, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}}, 0x40) 1.311562872s ago: executing program 0 (id=2238): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x221081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x42021) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) lchown(&(0x7f00000017c0)='./file0\x00', 0xee00, 0xee01) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.297546032s ago: executing program 4 (id=2239): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) semget$private(0x0, 0x6, 0x3b1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) rt_sigpending(0x0, 0x0) 1.271411413s ago: executing program 0 (id=2240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) 1.254745573s ago: executing program 0 (id=2241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1.210046244s ago: executing program 4 (id=2242): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x3020001, &(0x7f0000001000)={[{@nobarrier}, {@jqfmt_vfsv0}], [{@measure}, {@dont_measure}, {@fowner_lt}, {@uid_gt}, {@euid_eq}, {@hash}, {@subj_role={'subj_role', 0x3d, 'jqfmt=vfsv0'}}, {@subj_role={'subj_role', 0x3d, 'xprtrdma_post_send\x00'}}]}, 0x11, 0x527, &(0x7f0000019580)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = open(0x0, 0x145142, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_udplite(0x2, 0x2, 0x88) close(r3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = io_uring_setup(0x3efa, &(0x7f0000000000)={0x0, 0x0, 0x1840, 0x1}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) io_uring_enter(r2, 0x97, 0x8d46, 0x0, &(0x7f0000000800)={[0x9ab4]}, 0x8) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x3c, &(0x7f00000007c0)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}]}, &(0x7f0000000180)=0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$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") getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000880)=ANY=[@ANYRESDEC=r8, @ANYRES64=r0], 0x210) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='gid_map\x00') write$binfmt_aout(r10, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r9, &(0x7f0000000400)='cifs.idmap\x00', &(0x7f0000000440)='\x00') r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6) capget(&(0x7f0000000040)={0x20080522, r11}, &(0x7f0000000840)={0x9, 0x7, 0x1e, 0x2, 0xd, 0x9}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYRES16=r8, @ANYRES64=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000000c40)='xprtrdma_post_send\x00', r12}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 1.200800064s ago: executing program 0 (id=2243): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0xb4, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfbcc361}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x7}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}, @NFT_MSG_DELSET={0x128, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_USERDATA={0xa3, 0xd, 0x1, 0x0, "dfec8796f25069d4e4154f2eff253b2c51965b4553fc0ae0636b0722e7d785628700d1bec83bfd39163690f4da36b0bb02de2e966e884a83aeace07e50f759e6de10f877577b68318a58633665cd29d3db9338c8d2bdf67725daa50ba00616ae1ef38839e1fc4d010b259b745b02e78e4a0c29c078dce668ab721c13734c097da3132474542da4c4d7f7e91cb102c8cda3d57a35ede4c7e39348132de00fb4"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xd}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffffffffffff}]}, @NFT_MSG_NEWSETELEM={0x14bc, 0xc, 0xa, 0x304, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1468, 0x3, 0x0, 0x1, [{0x1454, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "849ba2e3e10814b3c29da4e2d4383e6e22ed566464f17fa830ea61cf6575c1448b2547d3e02d0731f60f535f5f1125360b541cf6dba4cd90e2e4345c8b94a3345349bcbccf385ee8c4bf82ec6980cc34baa64676f9212ed1d9f5c6573c3e50aeab35eafe4c6bd0730ec16421f8d0c7d26c3ec2cb0ab1db3d2dfc3e2717760990cc"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x118, 0xb, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xbd8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_DATA={0x11cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8c, 0x1, "4dc4a557bc941263e972ff3b94758ef4ba6fd80d3adfa4c34d70dc3960f3a89c0082597d05b0682a8100ec388de890a91dd5391f241f6dd4c6b8a1709bee64b4921a2c1d2efdb1c71330d3f630488551944e8c4350236bd3f6142169f13990e4cd2d2dcf71349914729594d4773864b4c74cf29fcfe7110ef6abeaecf96c545d675bc5bd51a139fc"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x55, 0x1, "7d2fe2e8af924ac98273633842ed7fbc0028b1588ff98e8ae0df4da54847b344460f3df4474509394d1faedce8aafb73aff22ddeefeb4d823ba60b9decff8f2cdcd89743cce73b10509e575409d847c1eb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "caabea9513a69e1dc4d820d804806db43d6459d0bab865ca6fea16eb81b96d478ed71f16f767f1fd14342b02f6f21f47234eb2de86fc903dbe16e90c009ac89c86481d9fff68817e1fa9fb0d8a2afabe51dccaa46f32a68f95b9de304c8975cdb3fdf378fce9e57dca3888a61fec446c1a4ef1d2f48d1951bceba436eacc69321a040a0b0a66961062b363f07d535f503d4854110d2e4055f6c2e00f3a1458"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xb8, 0x6, 0x1, 0x0, "0b0510391c2df2b3e81baade6e9fd4e46d440fb18cf4b1470f716b3df4cbbcd823f805032d8cf925b2eeef59d3ed65cdd35a40a5aa92933b58432937b2275cc795dea03b9eee05157d1a65a365e2d5d256aa2f257d688de984039ba9e95d15d8ad5bb9fb3aa8a9604b1a2e9b4628b03bbaadf880e8c9427bd777b69e4e2869eb71cfcb6fb82753055ba188821b394ed4bb5b01eefc8eb3d4b358917f8602899b9898fec50c29775b0699e5108ce219cdc4200798"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1c}]}]}]}, @NFT_MSG_NEWSET={0xe4, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0x8c, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x6}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa0}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_KEY_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x650, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x630, 0x3, 0x0, 0x1, [{0x304, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x2ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "1e2ec1b56c21107067200cbfd09b3bef2cba2726cd9bf02b0bc7ceb6dc52bd6c70afe455ce9495cabcc2112fe136f9aa1ec64604715560f544"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "209cc38c416a4f6032dd608a9c931e8a2b4ce4d8cdfd8a80c30de7b447dec12911f8ab42a4d1d78b5f60eae183b6307b102503c80def9d29dc6255f93bf777003acf667747029a477fb07e4e7f75fdfae6ff828e6359dbf88054d0dbf2c7fb2279c2c5bdfab1e91d9b261efec500ab329c1499494c3e22d56f965cb34cb9e4d3ac350bb5995cd1e4961ca34c99d5e612d39b472d5934c5e281f36515d945195379945c9cea75e3051f199ae8a546dc973b5a831296500c8025c2e5989a189c45aac0ed36311c46d8f6ab646c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd1, 0x6, 0x1, 0x0, "b28610c65f44c4d1d63f76bd4ca88b5af846a21d9f4d106ff261b31ff508a7eafcdec07a6d2cadfa4c501689063d3a6fe6ea76867d28f7bfa2097c66bf92b1741a67ff9d399106d91e02b61aeae22e57e61509044a91b73477be1c66bac65f5bc75832c561b351ba07ec2de1a149f34ab89745d19573a093592a312a8c8e4672e586370ed00277cb42f73657e05d5913f8c274988f9f38d84f36d0ba2e1de14bd6b06e436b0c891c50491e8a7c5af540aad5544c2e0a6e5d2577c650f3d87adb1d15cfae1c5d30e66a57c4981b"}]}, {0x250, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x220, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc9, 0x1, "594aad19deabf7b1a5aaca3181e02832ecdda1595fc762e3185b5b4ebf3afb34286b1008811e9a4c6d282d6e8f5b61fc10bea068c9dbb9c9b7cca44bc21e559657ed6e129fe2ef5db847f66d21839825c3e7b43cd84a921ccf22488aef1d61c03dd3022304433b5905a25c96e68567e9a6d717a6e34279b5eb2253de762498a74648e765d52e4b5301ea684b93935de5481b40ac15fa307c30fd268de4edc52144f7a5bb76f657c4d43a572e549b35100e639964ca3e6f42433105bd58a45cae3f412417de"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "2cd06f085713dbea3d24b9fdf384650bd0aaeaca3d04f9a4d0e355d3de9177b6ed62b83b0651b090a7ce8a29a8db3d122fb7f110051e3e27cd6b550c380bf73c42040d3e7a54b5df60558b08b54e2df5a11c36369218e81aa4c077a7d5076904d51ae50b782a9ec8ff84cf"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "62e872b048136bc9af3c0bdb91988a23f5acef4c12ea1579aca4e61a38edfa6d365b6bb418b92ca86efc69d11ddf4964e735754520ad0621df71f27d903ba6c2896c5a10468092ba0464c854d4af98ca74ceb3369960403bfae9dfc9b69d10ac9c2b6ba45c71f95e1ce8ebaf8b71b8448bb6cf12966cf1b0d7969c1848945a9491756501063d4654642a44840d3f6e9906ee0bc02a993982a06931b00a3f35025567829bede10195e456fe"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4e7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x3cc, 0x9, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_EXPR={0x37c, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x368, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x298, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "e208b37ec2c63ace7a90bfba04d0c53ffad1c30263d78f2fef3eec87cc4a5fe4225d12cd098cace271995599427508fccf658f502babce633b2659fa03a678a2cafb28fdb3e1043949e635bd536e697aa5f1d622f15359754bcde7f07fc10f248f8d5c488d72d5349fc53f86e325de4bb36430fcc98ab08b753c32f8050d7a1c2982e6ef4318d9fcb100b537a1e82873bcb655198ebb56cb2d6f33b7eaf1d4f84886d6288050ba9f37b757"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "87e3ccb9ec373453d3b1fd3cd90b24f3f7431dc5630bafe9d7721778f719be68b51c4bf724ccc2fcc2435985ea08450778786660e6a74d9b935329f20f49a33ffb0d876718b0ad5430ff4c39bacd20af5dadfc8772b52f4e4df5d7f63dcf994be3b453055aacb247277a0cd72d9e23c629f744984dd271ef735afa4e7fded8fc529576c79b926062006ad7a1e96a84fc9c8e71dcf98e816414ef9ec62597aff2c6a7de20af25cf42d7ad50ee6a728fde253d3d34210dec1960e4f318"}, @NFTA_DATA_VALUE={0x72, 0x1, "2b05d3e7774101514096310e4b0cb15ab415920570858e69a5d6f8cb2f8214288a3ce6438ee6baf00040f5e74bc4d613aa5147f0d9e94d043eb05b00771931dd18daa70a50c49f55280dde42c4aebb887cac0c03890466965132b421eaea17d0e83673a5c3ab910b20e0227ad7f3"}]}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xc00000000000}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x21e0}, 0x1, 0x0, 0x0, 0x2c841}, 0x854) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/213, 0xd5}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000001200)=""/255, 0xff}], 0x4, 0x8, 0x9) fcntl$notify(r1, 0x402, 0x6) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) 1.135153795s ago: executing program 2 (id=2244): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400d840}, 0x20048040) 1.054229625s ago: executing program 2 (id=2245): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="a6385adba5f7c5e7aed85666eeca91a2366739a438bbc20ec63441c0f692a9a0cc6f429e781907f46e0169520b12ee0fdc37e4ea2ffd3b63dc90cfa8762721f41d542a66d720b21eabf7c4a0d2e02cf667af0036504508a549d647a119e5f83046f4237309e05a6811bb17d7674d17c0a099060d197db784f549f2fb90d7abcd7961082b66170ad3abfcf0dd7b1fe84cdc36046b0d3d07a9e856df37d20e31bb6799e996d24ca03cd234b046e099bac68024c84544abe95cafc1dc0ae304c543b6272814a80a382576d6f4e9f50dc890a16ff208cde928b1f1cb0b230e88dc96357927fc51189fa7164c073ade64d09526", @ANYRES8=r0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000001080)='net/igmp\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) preadv(r3, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) 1.053817516s ago: executing program 4 (id=2246): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer']) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="28010000", @ANYRES16=r7, @ANYBLOB="0008801400078008000600c400000008000500ce081e261c000780080005002965354e0800050098574c030800060059000000240007a00810050004a08460080006000900000008000600ce00007805720b8eb2400008000500f0b44ebbc200078008000600800000000800050011130800050088634f0e0800369f16ab02614e9076aa6a333aeb1f06009200000008000600660000000800060000000000080006007e000000140007800800050003b8736f0800050099960c5314000780080005003f40f00d08000600c200000024000480050003000100000005000300000000000538e60c594190ba6a000300020000000c000402000000200008800a00078008000500ccb3906b08000500db1c417b0800"/285], 0x128}}, 0x880) r8 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f08000100000000000000", @ANYRES32, @ANYBLOB="fdffffff00000000000000181000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="004cdbf5767300000000000000b70500000800000085000000a5000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r10}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a00000000000000010000040000400007000000030000001b00000000002e0300302e5f0e00"], 0x0, 0x3a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0xfffffffd, {0x60, 0x0, 0x0, r12, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) close(r0) 1.030453626s ago: executing program 0 (id=2247): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x10, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x7, &(0x7f0000000200)=[{0x6, 0x31, 0x2}, {0x4, 0xc, 0x6, 0x2}, {0x0, 0x9, 0x2, 0x7}, {0x81, 0x8, 0x8, 0x2}, {0xd9, 0x7, 0x2, 0x2}, {0x0, 0x22, 0x8}, {0x9, 0x0, 0x0, 0x8}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfffffff0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r5, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r6 = msgget$private(0x0, 0x0) msgrcv(r6, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000) msgsnd(r6, &(0x7f0000000100)=ANY=[], 0xe, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x200, 0x70bd27, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff1}, {0x3, 0xfff1}}}, 0x24}}, 0x20040824) bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) 1.025794416s ago: executing program 2 (id=2248): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 910.118918ms ago: executing program 2 (id=2249): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0xffff, 0x4e20, 0x3, 0xd, 0x20, 0xa0, 0x11, 0x0, r0}, {0xffffffff, 0x6, 0x81, 0x37d19b4a, 0x3, 0x2, 0xfff, 0x9}, {0x8001, 0x101, 0x81, 0x3}, 0x8e8, 0x6e6bb0, 0x2, 0x1, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x6c}, 0x0, @in6=@private0, 0x3504, 0x3, 0x3, 0x92, 0x8, 0xc4, 0x4}}, 0xe8) (async) quotactl$Q_GETINFO(0x2, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f0000000140)) (async) r1 = socket$caif_seqpacket(0x25, 0x5, 0x4) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x5) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 798.412619ms ago: executing program 2 (id=2252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x100000, {{0x1, 0x0, 0x14}, {}, {0x0, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) 746.24439ms ago: executing program 4 (id=2253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 746.11577ms ago: executing program 2 (id=2254): r0 = timerfd_create(0x0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000240)=""/18, 0x12}, {0x0}, {&(0x7f0000000880)=""/200, 0xc8}, {&(0x7f00000002c0)=""/38, 0x26}], 0x4) dup2(r2, r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000080)=0x8, 0x4) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 629.424782ms ago: executing program 1 (id=2257): socket(0x10, 0x803, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000080000000000000095ffffffff040000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 607.479112ms ago: executing program 1 (id=2258): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="a6385adba5f7c5e7aed85666eeca91a2366739a438bbc20ec63441c0f692a9a0cc6f429e781907f46e0169520b12ee0fdc37e4ea2ffd3b63dc90cfa8762721f41d542a66d720b21eabf7c4a0d2e02cf667af0036504508a549d647a119e5f83046f4237309e05a6811bb17d7674d17c0a099060d197db784f549f2fb90d7abcd7961082b66170ad3abfcf0dd7b1fe84cdc36046b0d3d07a9e856df37d20e31bb6799e996d24ca03cd234b046e099bac68024c84544abe95cafc1dc0ae304c543b6272814a80a382576d6f4e9f50dc890a16ff208cde928b1f1cb0b230e88dc96357927fc51189fa7164c073ade64d09526", @ANYRES8=r0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000001080)='net/igmp\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) preadv(r3, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) 585.461092ms ago: executing program 1 (id=2260): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14b6deac033214c2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) unshare(0x24040000) unshare(0x2c020400) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x1) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 501.984143ms ago: executing program 4 (id=2262): syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="040000006c9d5f333aad8221d37e160e9f55f6e278beb65ba3b5c9b47905beca7330b28653389dcfbd47cecd8f445f07", @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x40, 0x2f6, &(0x7f0000000e40)="$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") r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0xc0185879, &(0x7f00000004c0)={0x0, 0xfffffbffffffffff, 0x3ffffd, 0x2, 0x0, 0x0, 0x2401}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'vlan0\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="a88935f22485a8c462b229df7e76a521bce772e0232fee68850236a3f7a4804a643becafa27cb4824315c44da838a6eda7efcfcbd42df1b79a0bc8044e112f92ce7f9ff72f970b01219f30a5369b9f5bc3", 0x51}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x38}, 0x40010) 489.683523ms ago: executing program 33 (id=2262): syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="040000006c9d5f333aad8221d37e160e9f55f6e278beb65ba3b5c9b47905beca7330b28653389dcfbd47cecd8f445f07", @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x40, 0x2f6, &(0x7f0000000e40)="$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") r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0xc0185879, &(0x7f00000004c0)={0x0, 0xfffffbffffffffff, 0x3ffffd, 0x2, 0x0, 0x0, 0x2401}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'vlan0\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="a88935f22485a8c462b229df7e76a521bce772e0232fee68850236a3f7a4804a643becafa27cb4824315c44da838a6eda7efcfcbd42df1b79a0bc8044e112f92ce7f9ff72f970b01219f30a5369b9f5bc3", 0x51}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x38}, 0x40010) 464.863574ms ago: executing program 1 (id=2264): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a00}, 0xffffff40}], 0x1, 0x2020, 0x0) 386.595195ms ago: executing program 1 (id=2266): setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000240)=0x9, 0x4) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x401, 0x398, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r6, 0x84, 0x0, &(0x7f0000001080)=""/4057, &(0x7f0000000000)=0xfd9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r7, 0xffffffff80000402, r9, &(0x7f0000000480)) io_uring_enter(r1, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 386.137105ms ago: executing program 1 (id=2267): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108) socket$netlink(0x10, 0x3, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x1) fcntl$setsig(0xffffffffffffffff, 0xa, 0x33) poll(&(0x7f0000b2c000)=[{r8}], 0x2c, 0xffffffffffbffff8) dup2(r7, r8) fcntl$setown(r7, 0x8, r6) tkill(r6, 0x13) fcntl$setown(r5, 0x8, r6) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="30bfff7f0000000000009fc161b01cec5f49af93be310421a972", 0x1a}], 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0xffff, 0x4, @mcast2}}, {{0xa, 0x4e23, 0x0, @loopback}}}, 0x108) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000200)=0x10) 291.502046ms ago: executing program 5 (id=2271): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x0) 218.126627ms ago: executing program 5 (id=2272): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x1) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaa0000000000000008c6"], 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 217.938287ms ago: executing program 5 (id=2273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 207.362237ms ago: executing program 5 (id=2274): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x221081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x42021) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) lchown(&(0x7f00000017c0)='./file0\x00', 0xee00, 0xee01) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 175.469607ms ago: executing program 0 (id=2275): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 132.049899ms ago: executing program 5 (id=2276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1a, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xddd9}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x5a}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @cb_func={0x18, 0xd, 0x4, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0xfe15, 0x89, &(0x7f0000000540)=""/137, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x7, 0x8, 0x8}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f00000006c0)=[{0x3, 0x1, 0xc, 0x2}, {0x1, 0x1, 0x9, 0x9}, {0x2, 0x3, 0xc, 0x3}, {0x3, 0x1, 0x6, 0x5}, {0x4, 0x4, 0xc}, {0x3, 0x1, 0x1, 0x6}, {0x0, 0x5, 0xb, 0x1}, {0x4, 0x1, 0x5, 0xa}, {0x0, 0x2, 0x7, 0x6}, {0x5, 0x2, 0xe, 0x4}], 0x10, 0x15, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 5 (id=2277): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@noblock_validity}, {@grpquota}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@discard}]}, 0x3, 0x591, &(0x7f0000000600)="$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") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) (async) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b535, 0x1, 0x9, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) (async) io_setup(0x2, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4a288, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000300), 0x3}, 0x183580, 0x5dd9, 0xc, 0x8, 0x3, 0xa, 0xfffb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x8) (async) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x200000a, 0x1, 0x8}) (async) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0]) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext={0x10001, 0x200000000000}, 0x1000, 0x5dd8, 0x0, 0x1, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xdf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x0, 0x40004, 0xfcffffff, 0xe33, 0x4000000, 0x35, 0x400000, 0x0, 0x3}) (async) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r8 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}], 0x2, 0x2600c054) (async) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) (async) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000040)=0x4c80, 0x4) sendmmsg$unix(r10, &(0x7f000009dec0)=[{{&(0x7f0000000600)=@file={0x0, './file1\x00'}, 0x6e, 0x0, 0x0, &(0x7f000009df00)=[@cred={{0x14, 0x1, 0x51}}], 0x20, 0x800}}], 0x1, 0x30004054) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r9, &(0x7f0000000400)="71d4e0de9e646bce688c15df0ff0bce7f79bfc29cef8d3783b6e856a8240d041d00a", 0x22, 0x2}]) kernel console output (not intermixed with test programs): c0000 [ 119.099852][ T29] audit: type=1326 audit(1745769567.543:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3ffe7e969 code=0x7ffc0000 [ 119.099908][ T29] audit: type=1326 audit(1745769567.543:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffe7e969 code=0x7ffc0000 [ 119.099998][ T29] audit: type=1326 audit(1745769567.543:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffe7e969 code=0x7ffc0000 [ 119.100080][ T29] audit: type=1326 audit(1745769567.543:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3ffe7e969 code=0x7ffc0000 [ 119.100113][ T29] audit: type=1326 audit(1745769567.543:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffe7e969 code=0x7ffc0000 [ 119.100221][ T29] audit: type=1326 audit(1745769567.543:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffe7e969 code=0x7ffc0000 [ 119.126223][ T7707] tipc: Disabling bearer [ 119.127740][ T7710] FAULT_INJECTION: forcing a failure. [ 119.127740][ T7710] name failslab, interval 1, probability 0, space 0, times 0 [ 119.127768][ T7710] CPU: 0 UID: 0 PID: 7710 Comm: syz.0.1513 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 119.127852][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.127864][ T7710] Call Trace: [ 119.127872][ T7710] [ 119.127880][ T7710] __dump_stack+0x1d/0x30 [ 119.127905][ T7710] dump_stack_lvl+0xe8/0x140 [ 119.128007][ T7710] dump_stack+0x15/0x1b [ 119.128023][ T7710] should_fail_ex+0x265/0x280 [ 119.128060][ T7710] ? audit_log_d_path+0x8d/0x150 [ 119.128161][ T7710] should_failslab+0x8c/0xb0 [ 119.128214][ T7710] __kmalloc_cache_noprof+0x4c/0x320 [ 119.128237][ T7710] audit_log_d_path+0x8d/0x150 [ 119.128353][ T7710] audit_log_d_path_exe+0x42/0x70 [ 119.128382][ T7710] audit_log_task+0x1e9/0x250 [ 119.128414][ T7710] audit_seccomp+0x61/0x100 [ 119.128444][ T7710] ? __seccomp_filter+0x68c/0x10d0 [ 119.128483][ T7710] __seccomp_filter+0x69d/0x10d0 [ 119.128569][ T7710] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 119.128601][ T7710] ? vfs_write+0x75e/0x8d0 [ 119.128676][ T7710] ? __rcu_read_unlock+0x4f/0x70 [ 119.128701][ T7710] ? __fget_files+0x184/0x1c0 [ 119.128732][ T7710] __secure_computing+0x82/0x150 [ 119.128807][ T7710] syscall_trace_enter+0xcf/0x1e0 [ 119.128828][ T7710] do_syscall_64+0xaa/0x1a0 [ 119.128852][ T7710] ? clear_bhb_loop+0x25/0x80 [ 119.128878][ T7710] ? clear_bhb_loop+0x25/0x80 [ 119.128941][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.128960][ T7710] RIP: 0033:0x7fc3dabfe969 [ 119.128974][ T7710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.128993][ T7710] RSP: 002b:00007fc3d9267038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 119.129013][ T7710] RAX: ffffffffffffffda RBX: 00007fc3dae25fa0 RCX: 00007fc3dabfe969 [ 119.129027][ T7710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 119.129039][ T7710] RBP: 00007fc3d9267090 R08: 0000000000000000 R09: 0000000000000000 [ 119.129053][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.129067][ T7710] R13: 0000000000000000 R14: 00007fc3dae25fa0 R15: 00007ffd3db12f18 [ 119.129088][ T7710] [ 119.269153][ T7717] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 119.844250][ T7735] SELinux: ebitmap: truncated map [ 119.860827][ T7735] SELinux: failed to load policy [ 119.890348][ T7735] loop1: detected capacity change from 0 to 1024 [ 119.898951][ T7735] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.945491][ T7735] EXT4-fs error (device loop1): __ext4_fill_super:5502: inode #2: comm syz.1.1523: iget: special inode unallocated [ 119.945708][ T7735] EXT4-fs (loop1): get root inode failed [ 119.945724][ T7735] EXT4-fs (loop1): mount failed [ 120.125155][ T7740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1524'. [ 120.229971][ T7744] tipc: Enabled bearer , priority 0 [ 120.314914][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.326016][ T7743] tipc: Disabling bearer [ 120.480519][ T7753] loop2: detected capacity change from 0 to 512 [ 120.505357][ T7753] EXT4-fs (loop2): 1 orphan inode deleted [ 120.511539][ T7753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.525607][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 120.540188][ T7753] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.556346][ T7753] ext4: Unknown parameter './file0' [ 120.573974][ T7770] loop3: detected capacity change from 0 to 512 [ 120.592176][ T7770] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.609117][ T7770] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1535: bg 0: block 248: padding at end of block bitmap is not set [ 120.628803][ T7770] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1535: Failed to acquire dquot type 1 [ 120.641511][ T7770] EXT4-fs (loop3): 1 truncate cleaned up [ 120.649050][ T7770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.664581][ T7775] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1534'. [ 120.722974][ T7780] loop4: detected capacity change from 0 to 2048 [ 120.841685][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.975272][ T7780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.989797][ T7780] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 121.255700][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.442563][ T7793] tipc: Enabled bearer , priority 0 [ 121.482002][ T7801] FAULT_INJECTION: forcing a failure. [ 121.482002][ T7801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.495240][ T7801] CPU: 0 UID: 0 PID: 7801 Comm: syz.0.1545 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 121.495273][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.495289][ T7801] Call Trace: [ 121.495296][ T7801] [ 121.495304][ T7801] __dump_stack+0x1d/0x30 [ 121.495379][ T7801] dump_stack_lvl+0xe8/0x140 [ 121.495398][ T7801] dump_stack+0x15/0x1b [ 121.495487][ T7801] should_fail_ex+0x265/0x280 [ 121.495525][ T7801] should_fail+0xb/0x20 [ 121.495575][ T7801] should_fail_usercopy+0x1a/0x20 [ 121.495664][ T7801] _copy_to_user+0x20/0xa0 [ 121.495685][ T7801] simple_read_from_buffer+0xb5/0x130 [ 121.495715][ T7801] proc_fail_nth_read+0x100/0x140 [ 121.495748][ T7801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.495792][ T7801] vfs_read+0x19d/0x6f0 [ 121.495852][ T7801] ? __rcu_read_unlock+0x4f/0x70 [ 121.495940][ T7801] ? __fget_files+0x184/0x1c0 [ 121.495970][ T7801] ksys_read+0xda/0x1a0 [ 121.495995][ T7801] __x64_sys_read+0x40/0x50 [ 121.496047][ T7801] x64_sys_call+0x2d77/0x2fb0 [ 121.496221][ T7801] do_syscall_64+0xd0/0x1a0 [ 121.496243][ T7801] ? clear_bhb_loop+0x25/0x80 [ 121.496297][ T7801] ? clear_bhb_loop+0x25/0x80 [ 121.496342][ T7801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.496363][ T7801] RIP: 0033:0x7fc3dabfd37c [ 121.496383][ T7801] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 121.496401][ T7801] RSP: 002b:00007fc3d9267030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.496424][ T7801] RAX: ffffffffffffffda RBX: 00007fc3dae25fa0 RCX: 00007fc3dabfd37c [ 121.496436][ T7801] RDX: 000000000000000f RSI: 00007fc3d92670a0 RDI: 0000000000000004 [ 121.496452][ T7801] RBP: 00007fc3d9267090 R08: 0000000000000000 R09: 0000000000000000 [ 121.496498][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.496510][ T7801] R13: 0000000000000000 R14: 00007fc3dae25fa0 R15: 00007ffd3db12f18 [ 121.496529][ T7801] [ 121.501399][ T7791] tipc: Disabling bearer [ 121.536573][ T7753] syz.2.1527 (7753) used greatest stack depth: 7032 bytes left [ 121.726085][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.735726][ T7073] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 121.798387][ T7809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7809 comm=syz.0.1546 [ 121.851104][ T7813] SELinux: ebitmap start bit (9) is not a multiple of the map unit size (64) [ 121.863899][ T7813] SELinux: failed to load policy [ 121.925172][ T7820] netlink: set zone limit has 8 unknown bytes [ 121.977842][ T7822] netlink: 'syz.3.1552': attribute type 4 has an invalid length. [ 121.998346][ T7822] netlink: 'syz.3.1552': attribute type 4 has an invalid length. [ 122.216943][ T7825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=7825 comm=syz.3.1553 [ 122.256552][ T7824] __nla_validate_parse: 3 callbacks suppressed [ 122.256592][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1553'. [ 122.525879][ T7827] loop3: detected capacity change from 0 to 1024 [ 122.532551][ T7827] ext4: Unknown parameter 'nouser_xattr' [ 122.567503][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1555'. [ 122.593853][ T7827] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1555'. [ 122.613669][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 122.709390][ T7835] tipc: Enabled bearer , priority 0 [ 122.725760][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'. [ 122.762337][ T7834] tipc: Disabling bearer [ 122.792978][ T7833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.904171][ T7833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.952667][ T7847] loop3: detected capacity change from 0 to 512 [ 122.967324][ T7847] EXT4-fs: Ignoring removed orlov option [ 122.980537][ T7847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.016293][ T7847] EXT4-fs (loop3): 1 truncate cleaned up [ 123.022539][ T7847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.051204][ T7855] tipc: New replicast peer: 255.255.255.83 [ 123.057244][ T7855] tipc: Enabled bearer , priority 10 [ 123.108326][ T7858] batadv0 speed is unknown, defaulting to 1000 [ 123.122895][ T7858] dummy0 speed is unknown, defaulting to 1000 [ 123.143470][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.192687][ T7863] FAULT_INJECTION: forcing a failure. [ 123.192687][ T7863] name failslab, interval 1, probability 0, space 0, times 0 [ 123.205630][ T7863] CPU: 1 UID: 0 PID: 7863 Comm: syz.3.1567 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 123.205661][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.205676][ T7863] Call Trace: [ 123.205684][ T7863] [ 123.205692][ T7863] __dump_stack+0x1d/0x30 [ 123.205712][ T7863] dump_stack_lvl+0xe8/0x140 [ 123.205736][ T7863] dump_stack+0x15/0x1b [ 123.205802][ T7863] should_fail_ex+0x265/0x280 [ 123.205832][ T7863] should_failslab+0x8c/0xb0 [ 123.205861][ T7863] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 123.205936][ T7863] ? __d_alloc+0x3d/0x350 [ 123.205977][ T7863] __d_alloc+0x3d/0x350 [ 123.206054][ T7863] ? __rcu_read_unlock+0x34/0x70 [ 123.206080][ T7863] d_alloc_parallel+0x53/0xc40 [ 123.206122][ T7863] ? selinux_inode_permission+0x32a/0x400 [ 123.206151][ T7863] ? lockref_get_not_dead+0x120/0x1c0 [ 123.206249][ T7863] ? __rcu_read_unlock+0x4f/0x70 [ 123.206271][ T7863] __lookup_slow+0x8c/0x250 [ 123.206292][ T7863] lookup_slow+0x3c/0x60 [ 123.206314][ T7863] walk_component+0x1ec/0x220 [ 123.206353][ T7863] path_lookupat+0xfe/0x2a0 [ 123.206454][ T7863] filename_lookup+0x147/0x340 [ 123.206553][ T7863] do_linkat+0xd2/0x600 [ 123.206577][ T7863] ? getname_flags+0x2be/0x3b0 [ 123.206604][ T7863] ? kmem_cache_free+0xdd/0x2f0 [ 123.206625][ T7863] __x64_sys_link+0x58/0x70 [ 123.206743][ T7863] x64_sys_call+0x2af9/0x2fb0 [ 123.206767][ T7863] do_syscall_64+0xd0/0x1a0 [ 123.206795][ T7863] ? clear_bhb_loop+0x25/0x80 [ 123.206828][ T7863] ? clear_bhb_loop+0x25/0x80 [ 123.206914][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.206934][ T7863] RIP: 0033:0x7ff4c051e969 [ 123.206949][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.206969][ T7863] RSP: 002b:00007ff4beb87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 123.206987][ T7863] RAX: ffffffffffffffda RBX: 00007ff4c0745fa0 RCX: 00007ff4c051e969 [ 123.207002][ T7863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 123.207017][ T7863] RBP: 00007ff4beb87090 R08: 0000000000000000 R09: 0000000000000000 [ 123.207032][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.207047][ T7863] R13: 0000000000000000 R14: 00007ff4c0745fa0 R15: 00007fffb08c7708 [ 123.207144][ T7863] [ 123.449350][ T7861] loop1: detected capacity change from 0 to 2048 [ 123.500123][ T7858] loop4: detected capacity change from 0 to 256 [ 123.535937][ T7861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.565056][ T7869] loop2: detected capacity change from 0 to 512 [ 123.571756][ T7869] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 123.662095][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1571'. [ 123.671271][ T7874] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1569'. [ 123.680507][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1569'. [ 123.689748][ T7861] Driver unsupported XDP return value 0 on prog (id 1283) dev N/A, expect packet loss! [ 123.905202][ T7064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.070522][ T7887] batadv0 speed is unknown, defaulting to 1000 [ 124.077546][ T7887] dummy0 speed is unknown, defaulting to 1000 [ 124.128464][ T7889] loop4: detected capacity change from 0 to 512 [ 124.135351][ T7889] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.208675][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.246901][ T7889] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 124.255176][ T7889] EXT4-fs (loop4): orphan cleanup on readonly fs [ 124.262795][ T7889] __quota_error: 333 callbacks suppressed [ 124.262874][ T7889] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 124.279080][ T7889] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.329404][ T7889] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 124.338138][ T7889] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1575: bg 0: block 40: padding at end of block bitmap is not set [ 124.353276][ T7889] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 124.364196][ T7889] EXT4-fs (loop4): 1 truncate cleaned up [ 124.371173][ T7889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.479706][ T29] audit: type=1400 audit(1745769572.953:5950): avc: denied { read } for pid=7892 comm="syz.1.1576" dev="nsfs" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.582192][ T23] tipc: Node number set to 3867481645 [ 124.588452][ T29] audit: type=1400 audit(1745769572.983:5951): avc: denied { open } for pid=7892 comm="syz.1.1576" path="mnt:[4026532376]" dev="nsfs" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.611820][ T29] audit: type=1400 audit(1745769573.003:5952): avc: denied { getopt } for pid=7892 comm="syz.1.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.632276][ T29] audit: type=1400 audit(1745769573.003:5953): avc: denied { ioctl } for pid=7892 comm="syz.1.1576" path="mnt:[4026532376]" dev="nsfs" ino=4026532376 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.637100][ T7898] loop1: detected capacity change from 0 to 512 [ 124.670795][ T7898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.705032][ T7898] EXT4-fs (loop1): 1 truncate cleaned up [ 124.713547][ T29] audit: type=1400 audit(1745769573.163:5954): avc: denied { create } for pid=7894 comm="syz.2.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 124.734171][ T29] audit: type=1400 audit(1745769573.173:5955): avc: denied { sys_module } for pid=7894 comm="syz.2.1577" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 124.759988][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.769804][ T7898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.780722][ T7904] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1580'. [ 124.808106][ T29] audit: type=1400 audit(1745769573.283:5956): avc: denied { load_policy } for pid=7896 comm="syz.1.1578" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 124.808259][ T7898] SELinux: failed to load policy [ 124.845388][ T7906] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1581'. [ 124.858235][ T29] audit: type=1400 audit(1745769573.313:5957): avc: denied { setopt } for pid=7905 comm="syz.0.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.858537][ T7897] SELinux: failed to load policy [ 124.877897][ T29] audit: type=1400 audit(1745769573.313:5958): avc: denied { name_bind } for pid=7905 comm="syz.0.1581" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 124.951830][ T7916] dccp_invalid_packet: P.Data Offset(10) too large [ 124.967756][ T7913] syzkaller0: entered promiscuous mode [ 124.973400][ T7913] syzkaller0: entered allmulticast mode [ 124.981689][ T7920] loop1: detected capacity change from 0 to 512 [ 125.006744][ T7920] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.1583: invalid block [ 125.027170][ T7920] EXT4-fs (loop1): Remounting filesystem read-only [ 125.055035][ T7920] EXT4-fs (loop1): 1 truncate cleaned up [ 125.141211][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 125.173833][ T7927] syzkaller0: entered promiscuous mode [ 125.179474][ T7927] syzkaller0: entered allmulticast mode [ 125.210086][ T1016] Process accounting resumed [ 125.280468][ T7937] batadv0 speed is unknown, defaulting to 1000 [ 125.297268][ T7937] dummy0 speed is unknown, defaulting to 1000 [ 125.540353][ T7952] SELinux: policydb magic number 0x6f727473 does not match expected magic number 0xf97cff8c [ 125.561495][ T7945] netlink: 'syz.4.1590': attribute type 4 has an invalid length. [ 125.569483][ T7952] SELinux: failed to load policy [ 125.586170][ T7952] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 125.613027][ T7952] SELinux: failed to load policy [ 125.779578][ T7959] batadv0 speed is unknown, defaulting to 1000 [ 125.796235][ T7959] dummy0 speed is unknown, defaulting to 1000 [ 125.943238][ T7967] loop3: detected capacity change from 0 to 1024 [ 126.152582][ T7995] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -11226, delta: 1 [ 126.161377][ T7995] ref_ctr increment failed for inode: 0x6aa offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810005d280 [ 126.207843][ T8002] netlink: 'syz.3.1610': attribute type 4 has an invalid length. [ 126.244247][ T8005] tipc: Enabled bearer , priority 0 [ 126.325997][ T8010] loop1: detected capacity change from 0 to 512 [ 126.338285][ T8010] EXT4-fs: Ignoring removed orlov option [ 126.363521][ T8004] tipc: Disabling bearer [ 126.392541][ T8010] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.432246][ T8021] loop3: detected capacity change from 0 to 2048 [ 126.470857][ T8025] netlink: 'syz.4.1618': attribute type 7 has an invalid length. [ 126.518041][ T8033] loop2: detected capacity change from 0 to 512 [ 126.526869][ T8033] EXT4-fs: dax option not supported [ 126.546977][ T8039] loop1: detected capacity change from 0 to 512 [ 126.554418][ T8039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.575410][ T8039] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.712632][ T8059] loop4: detected capacity change from 0 to 512 [ 126.735786][ T8065] tipc: Enabling of bearer rejected, already enabled [ 126.738773][ T8059] EXT4-fs: Ignoring removed orlov option [ 126.790124][ T8067] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 126.813034][ T8059] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.926980][ T8083] loop2: detected capacity change from 0 to 512 [ 126.970146][ T8083] EXT4-fs (loop2): 1 orphan inode deleted [ 126.979157][ T8083] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.985286][ T8094] tipc: Enabling of bearer rejected, already enabled [ 126.999551][ T7063] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 127.057781][ T7063] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 127.146547][ T8105] $Hÿ: renamed from bond0 (while UP) [ 127.154803][ T8105] $Hÿ: entered promiscuous mode [ 127.172076][ T8117] hub 9-0:1.0: USB hub found [ 127.180411][ T8117] hub 9-0:1.0: 8 ports detected [ 127.254889][ T8127] veth0_vlan: entered allmulticast mode [ 127.266893][ T8125] __nla_validate_parse: 25 callbacks suppressed [ 127.266910][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 127.280520][ T8127] ÿÿÿÿÿÿ: renamed from geneve0 (while UP) [ 127.299272][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 127.351519][ T8130] loop2: detected capacity change from 0 to 2048 [ 127.445045][ T8141] netlink: 'syz.1.1661': attribute type 10 has an invalid length. [ 127.451662][ T8140] tipc: Enabled bearer , priority 0 [ 127.452961][ T8141] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1661'. [ 127.470987][ T8138] tipc: Resetting bearer [ 127.516377][ T8138] tipc: Disabling bearer [ 127.543141][ T8146] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1663'. [ 127.552150][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1663'. [ 127.572047][ T8146] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1663'. [ 127.618666][ T8156] loop1: detected capacity change from 0 to 512 [ 127.632915][ T8156] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.644305][ T8156] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 127.652252][ T8156] System zones: 1-12 [ 127.657832][ T8156] EXT4-fs (loop1): 1 truncate cleaned up [ 127.665233][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1668'. [ 127.667709][ T8156] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 127.685835][ T8156] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8156 comm=syz.1.1667 [ 127.698335][ T8156] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8156 comm=syz.1.1667 [ 127.712260][ T8156] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 1835430250 > max in inode 18 [ 127.757712][ T8165] FAULT_INJECTION: forcing a failure. [ 127.757712][ T8165] name failslab, interval 1, probability 0, space 0, times 0 [ 127.771202][ T8165] CPU: 1 UID: 0 PID: 8165 Comm: syz.3.1670 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 127.771234][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.771250][ T8165] Call Trace: [ 127.771258][ T8165] [ 127.771267][ T8165] __dump_stack+0x1d/0x30 [ 127.771342][ T8165] dump_stack_lvl+0xe8/0x140 [ 127.771366][ T8165] dump_stack+0x15/0x1b [ 127.771382][ T8165] should_fail_ex+0x265/0x280 [ 127.771437][ T8165] ? common_read+0x3f/0x300 [ 127.771499][ T8165] should_failslab+0x8c/0xb0 [ 127.771555][ T8165] __kmalloc_cache_noprof+0x4c/0x320 [ 127.771584][ T8165] common_read+0x3f/0x300 [ 127.771702][ T8165] ? hashtab_init+0xbc/0xe0 [ 127.771732][ T8165] ? __pfx_common_read+0x10/0x10 [ 127.771757][ T8165] policydb_read+0x64f/0x1330 [ 127.771817][ T8165] security_load_policy+0xba/0x890 [ 127.771854][ T8165] ? rep_movs_alternative+0x4a/0x90 [ 127.771935][ T8165] sel_write_load+0x1d4/0x380 [ 127.771976][ T8165] ? __pfx_sel_write_load+0x10/0x10 [ 127.772010][ T8165] vfs_write+0x266/0x8d0 [ 127.772032][ T8165] ? __rcu_read_unlock+0x4f/0x70 [ 127.772173][ T8165] ? __fget_files+0x184/0x1c0 [ 127.772202][ T8165] ksys_write+0xda/0x1a0 [ 127.772233][ T8165] __x64_sys_write+0x40/0x50 [ 127.772269][ T8165] x64_sys_call+0x2cdd/0x2fb0 [ 127.772359][ T8165] do_syscall_64+0xd0/0x1a0 [ 127.772384][ T8165] ? clear_bhb_loop+0x25/0x80 [ 127.772428][ T8165] ? clear_bhb_loop+0x25/0x80 [ 127.772454][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.772480][ T8165] RIP: 0033:0x7ff4c051e969 [ 127.772619][ T8165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.772642][ T8165] RSP: 002b:00007ff4beb87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.772662][ T8165] RAX: ffffffffffffffda RBX: 00007ff4c0745fa0 RCX: 00007ff4c051e969 [ 127.772677][ T8165] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 127.772692][ T8165] RBP: 00007ff4beb87090 R08: 0000000000000000 R09: 0000000000000000 [ 127.772711][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.772727][ T8165] R13: 0000000000000000 R14: 00007ff4c0745fa0 R15: 00007fffb08c7708 [ 127.772751][ T8165] [ 127.998369][ T8165] SELinux: failed to load policy [ 128.025195][ T8173] syzkaller0: left promiscuous mode [ 128.029794][ T8169] netlink: 'syz.1.1671': attribute type 13 has an invalid length. [ 128.030476][ T8173] syzkaller0: left allmulticast mode [ 128.051875][ T8175] xt_hashlimit: max too large, truncated to 1048576 [ 128.076348][ T8169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.105332][ T8177] loop4: detected capacity change from 0 to 512 [ 128.111934][ T8177] EXT4-fs: Ignoring removed orlov option [ 128.136454][ T8181] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1678'. [ 128.143830][ T8179] SELinux: ebitmap start bit (9) is not a multiple of the map unit size (64) [ 128.146213][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 128.156511][ T8179] SELinux: failed to load policy [ 128.163490][ T8181] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1678'. [ 128.180222][ T8177] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.290279][ T8203] loop1: detected capacity change from 0 to 512 [ 128.296944][ T8198] netlink: 'syz.4.1684': attribute type 10 has an invalid length. [ 128.316987][ T8198] team0: Port device geneve1 added [ 128.341820][ T8203] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.359099][ T8211] FAULT_INJECTION: forcing a failure. [ 128.359099][ T8211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.372342][ T8211] CPU: 0 UID: 0 PID: 8211 Comm: syz.0.1689 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 128.372369][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.372434][ T8211] Call Trace: [ 128.372439][ T8211] [ 128.372449][ T8211] __dump_stack+0x1d/0x30 [ 128.372468][ T8211] dump_stack_lvl+0xe8/0x140 [ 128.372484][ T8211] dump_stack+0x15/0x1b [ 128.372498][ T8211] should_fail_ex+0x265/0x280 [ 128.372539][ T8211] should_fail+0xb/0x20 [ 128.372597][ T8211] should_fail_usercopy+0x1a/0x20 [ 128.372613][ T8211] _copy_from_user+0x1c/0xb0 [ 128.372638][ T8211] __sys_bpf+0x178/0x790 [ 128.372682][ T8211] __x64_sys_bpf+0x41/0x50 [ 128.372746][ T8211] x64_sys_call+0x2478/0x2fb0 [ 128.372772][ T8211] do_syscall_64+0xd0/0x1a0 [ 128.372798][ T8211] ? clear_bhb_loop+0x25/0x80 [ 128.372888][ T8211] ? clear_bhb_loop+0x25/0x80 [ 128.372914][ T8211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.372940][ T8211] RIP: 0033:0x7fc3dabfe969 [ 128.372957][ T8211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.372979][ T8211] RSP: 002b:00007fc3d9267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.372998][ T8211] RAX: ffffffffffffffda RBX: 00007fc3dae25fa0 RCX: 00007fc3dabfe969 [ 128.373089][ T8211] RDX: 0000000000000048 RSI: 0000200000000940 RDI: 0000000000000000 [ 128.373104][ T8211] RBP: 00007fc3d9267090 R08: 0000000000000000 R09: 0000000000000000 [ 128.373118][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.373133][ T8211] R13: 0000000000000000 R14: 00007fc3dae25fa0 R15: 00007ffd3db12f18 [ 128.373157][ T8211] [ 128.568321][ T3305] EXT4-fs unmount: 20 callbacks suppressed [ 128.568340][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 128.661578][ T8225] loop4: detected capacity change from 0 to 128 [ 128.669256][ T8225] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 128.680869][ T8229] loop3: detected capacity change from 0 to 128 [ 128.689481][ T8229] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.704831][ T8229] ext4 filesystem being mounted at /351/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.769433][ T8225] SELinux: failed to load policy [ 128.807465][ T8225] bio_check_eod: 102 callbacks suppressed [ 128.807484][ T8225] syz.4.1695: attempt to access beyond end of device [ 128.807484][ T8225] loop4: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 128.845250][ T8240] loop2: detected capacity change from 0 to 1024 [ 128.855536][ T8240] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 128.865366][ T8240] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 128.876420][ T8240] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 128.887290][ T8240] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #5: comm syz.2.1702: unexpected bad inode w/o EXT4_IGET_BAD [ 128.901736][ T8240] EXT4-fs (loop2): no journal found [ 128.902573][ T3304] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 128.907001][ T8240] EXT4-fs (loop2): can't get journal size [ 128.934141][ T3304] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 128.948836][ T8240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.964215][ T3304] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 128.982360][ T8249] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.982847][ T3304] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 129.012858][ T3304] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 129.027861][ T3304] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 129.055059][ T3304] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 129.094614][ T8249] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.107407][ T3304] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 129.150193][ T3304] EXT4-fs error (device loop3): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 129.166310][ T8249] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.177311][ T3304] EXT4-fs error (device loop3): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 129.224555][ T8249] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.310993][ T8249] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.326792][ T8249] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.368125][ T8249] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.422789][ T8249] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.576476][ T5837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.590548][ T8254] batadv0 speed is unknown, defaulting to 1000 [ 129.620219][ T8254] dummy0 speed is unknown, defaulting to 1000 [ 129.666960][ T7540] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.679236][ T8256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.689160][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 129.689178][ T29] audit: type=1400 audit(1745769578.153:6357): avc: denied { ioctl } for pid=8255 comm="syz.1.1708" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.723205][ T8256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.755482][ T29] audit: type=1400 audit(1745769578.223:6358): avc: denied { read write } for pid=8255 comm="syz.1.1708" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.756307][ T7540] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.779917][ T29] audit: type=1400 audit(1745769578.223:6359): avc: denied { open } for pid=8255 comm="syz.1.1708" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.879036][ T29] audit: type=1400 audit(1745769578.313:6360): avc: denied { create } for pid=8263 comm="syz.4.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.898890][ T29] audit: type=1400 audit(1745769578.313:6361): avc: denied { connect } for pid=8263 comm="syz.4.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.920209][ T29] audit: type=1400 audit(1745769578.373:6362): avc: denied { mounton } for pid=8267 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 129.941886][ T29] audit: type=1326 audit(1745769578.373:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa3ffe7d41f code=0x7ffc0000 [ 129.965812][ T29] audit: type=1326 audit(1745769578.373:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa3ffe7e9f7 code=0x7ffc0000 [ 129.998371][ T7540] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.057757][ T7540] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.118028][ T8283] loop4: detected capacity change from 0 to 512 [ 130.150402][ T8267] batadv0 speed is unknown, defaulting to 1000 [ 130.160375][ T8283] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm +|[@: corrupted in-inode xattr: invalid ea_ino [ 130.160803][ T8267] dummy0 speed is unknown, defaulting to 1000 [ 130.180780][ T7540] bridge_slave_1: left allmulticast mode [ 130.182795][ T8283] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm +|[@: couldn't read orphan inode 15 (err -117) [ 130.186458][ T7540] bridge_slave_1: left promiscuous mode [ 130.204229][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.222571][ T8283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.258069][ T7540] bridge_slave_0: left allmulticast mode [ 130.264425][ T7540] bridge_slave_0: left promiscuous mode [ 130.270212][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.398524][ T29] audit: type=1400 audit(1745769578.873:6365): avc: denied { setattr } for pid=8282 comm="syz.4.1715" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.427609][ T8266] netlink: 'syz.0.1706': attribute type 4 has an invalid length. [ 130.438396][ T29] audit: type=1326 audit(1745769578.913:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz.2.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3ffe7d2d0 code=0x7ffc0000 [ 130.465530][ T7540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.475976][ T7540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.487302][ T7540] bond0 (unregistering): Released all slaves [ 130.488114][ T8240] EXT4-fs error (device loop2): __ext4_iget:5025: inode #15: block 1803188595: comm syz.2.1702: invalid block [ 130.496560][ T7540] bond1 (unregistering): Released all slaves [ 130.508173][ T8240] EXT4-fs error (device loop2): __ext4_iget:5025: inode #15: block 1803188595: comm syz.2.1702: invalid block [ 130.558657][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.580683][ T7540] tipc: Left network mode [ 130.598317][ T7540] hsr_slave_0: left promiscuous mode [ 130.604401][ T7540] hsr_slave_1: left promiscuous mode [ 130.620373][ T7540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.627068][ T8296] netlink: 'syz.2.1717': attribute type 10 has an invalid length. [ 130.627974][ T7540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.650368][ T7540] veth1_macvtap: left promiscuous mode [ 130.655936][ T7540] veth0_macvtap: left promiscuous mode [ 130.661487][ T7540] veth1_vlan: left promiscuous mode [ 130.667128][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.675798][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.683636][ T7540] veth0_vlan: left promiscuous mode [ 130.767772][ T7540] team0 (unregistering): Port device team_slave_1 removed [ 130.778168][ T7540] team0 (unregistering): Port device team_slave_0 removed [ 130.815619][ T3381] dummy0 speed is unknown, defaulting to 1000 [ 130.821768][ T3381] infiniband syz2: ib_query_port failed (-19) [ 130.830616][ T8267] chnl_net:caif_netlink_parms(): no params data found [ 130.869721][ T8267] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.876965][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.884816][ T8267] bridge_slave_0: entered allmulticast mode [ 130.891313][ T8267] bridge_slave_0: entered promiscuous mode [ 130.898130][ T8267] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.905444][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.913427][ T8267] bridge_slave_1: entered allmulticast mode [ 130.919997][ T8267] bridge_slave_1: entered promiscuous mode [ 130.938057][ T8267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.949326][ T8267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.970142][ T8267] team0: Port device team_slave_0 added [ 130.976981][ T8267] team0: Port device team_slave_1 added [ 130.993079][ T8267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.000122][ T8267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.026220][ T8267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.037494][ T8267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.044471][ T8267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.070471][ T8267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.097672][ T8267] hsr_slave_0: entered promiscuous mode [ 131.103939][ T8267] hsr_slave_1: entered promiscuous mode [ 131.138177][ T7540] IPVS: stop unused estimator thread 0... [ 131.176776][ T8267] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.186190][ T8267] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.195308][ T8267] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.212220][ T8267] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.227382][ T8267] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.234671][ T8267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.241986][ T8267] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.249131][ T8267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.280425][ T8267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.292208][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.301051][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.316497][ T8267] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.326693][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.333797][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.345511][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.352617][ T7064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.365732][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.437180][ T8267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.505129][ T8319] 9pnet_fd: Insufficient options for proto=fd [ 131.525478][ T8332] loop2: detected capacity change from 0 to 512 [ 131.532604][ T8332] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.557882][ T8332] EXT4-fs (loop2): 1 truncate cleaned up [ 131.565585][ T8332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.567685][ T8267] veth0_vlan: entered promiscuous mode [ 131.605053][ T8267] veth1_vlan: entered promiscuous mode [ 131.639559][ T8267] veth0_macvtap: entered promiscuous mode [ 131.647881][ T8267] veth1_macvtap: entered promiscuous mode [ 131.660447][ T8267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.668921][ T8267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.680315][ T8267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.691720][ T8267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.704368][ T8267] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.713187][ T8267] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.722147][ T8267] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.731002][ T8267] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.808412][ T8350] $Hÿ: renamed from bond0 (while UP) [ 131.815928][ T8350] $Hÿ: entered promiscuous mode [ 131.862194][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.926198][ T8361] FAULT_INJECTION: forcing a failure. [ 131.926198][ T8361] name failslab, interval 1, probability 0, space 0, times 0 [ 131.938891][ T8361] CPU: 0 UID: 0 PID: 8361 Comm: syz.2.1732 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 131.938926][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.938942][ T8361] Call Trace: [ 131.938997][ T8361] [ 131.939006][ T8361] __dump_stack+0x1d/0x30 [ 131.939032][ T8361] dump_stack_lvl+0xe8/0x140 [ 131.939053][ T8361] dump_stack+0x15/0x1b [ 131.939074][ T8361] should_fail_ex+0x265/0x280 [ 131.939114][ T8361] should_failslab+0x8c/0xb0 [ 131.939224][ T8361] __kmalloc_noprof+0xa5/0x3e0 [ 131.939242][ T8361] ? ___neigh_create+0x4c9/0x1290 [ 131.939269][ T8361] ___neigh_create+0x4c9/0x1290 [ 131.939295][ T8361] ? avc_has_perm+0xd3/0x150 [ 131.939351][ T8361] ? selinux_ip_postroute+0xb07/0xb50 [ 131.939414][ T8361] __neigh_create+0x54/0x70 [ 131.939432][ T8361] ip_neigh_gw4+0x12e/0x170 [ 131.939458][ T8361] ip_finish_output2+0x857/0x8b0 [ 131.939486][ T8361] ? __rcu_read_unlock+0x4f/0x70 [ 131.939524][ T8361] ip_finish_output+0x112/0x290 [ 131.939550][ T8361] ip_output+0xad/0x170 [ 131.939567][ T8361] ? __pfx_ip_finish_output+0x10/0x10 [ 131.939585][ T8361] ? __pfx_ip_output+0x10/0x10 [ 131.939658][ T8361] ip_send_skb+0x11d/0x140 [ 131.939684][ T8361] udp_send_skb+0x6e3/0xa40 [ 131.939716][ T8361] ? ip_make_skb+0x197/0x2c0 [ 131.939790][ T8361] udp_sendmsg+0x1044/0x13a0 [ 131.939861][ T8361] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 131.939980][ T8361] udpv6_sendmsg+0x7dd/0x1570 [ 131.940034][ T8361] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 131.940061][ T8361] inet6_sendmsg+0xac/0xd0 [ 131.940088][ T8361] __sock_sendmsg+0x8b/0x180 [ 131.940154][ T8361] ____sys_sendmsg+0x345/0x4e0 [ 131.940186][ T8361] ___sys_sendmsg+0x17b/0x1d0 [ 131.940291][ T8361] __sys_sendmmsg+0x178/0x300 [ 131.940344][ T8361] __x64_sys_sendmmsg+0x57/0x70 [ 131.940360][ T8361] x64_sys_call+0x2f2f/0x2fb0 [ 131.940378][ T8361] do_syscall_64+0xd0/0x1a0 [ 131.940435][ T8361] ? clear_bhb_loop+0x25/0x80 [ 131.940474][ T8361] ? clear_bhb_loop+0x25/0x80 [ 131.940492][ T8361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.940516][ T8361] RIP: 0033:0x7fa3ffe7e969 [ 131.940529][ T8361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.940545][ T8361] RSP: 002b:00007fa3fe4e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 131.940579][ T8361] RAX: ffffffffffffffda RBX: 00007fa4000a5fa0 RCX: 00007fa3ffe7e969 [ 131.940589][ T8361] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000004 [ 131.940599][ T8361] RBP: 00007fa3fe4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 131.940610][ T8361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.940652][ T8361] R13: 0000000000000000 R14: 00007fa4000a5fa0 R15: 00007ffebd36b858 [ 131.940669][ T8361] [ 132.306479][ T8366] loop4: detected capacity change from 0 to 1024 [ 132.324758][ T8366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.353993][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.414638][ T8383] support for the xor transformation has been removed. [ 132.415254][ T8384] FAULT_INJECTION: forcing a failure. [ 132.415254][ T8384] name failslab, interval 1, probability 0, space 0, times 0 [ 132.434994][ T8384] CPU: 1 UID: 0 PID: 8384 Comm: syz.2.1742 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 132.435026][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.435042][ T8384] Call Trace: [ 132.435050][ T8384] [ 132.435059][ T8384] __dump_stack+0x1d/0x30 [ 132.435085][ T8384] dump_stack_lvl+0xe8/0x140 [ 132.435156][ T8384] dump_stack+0x15/0x1b [ 132.435237][ T8384] should_fail_ex+0x265/0x280 [ 132.435314][ T8384] should_failslab+0x8c/0xb0 [ 132.435350][ T8384] kmem_cache_alloc_node_noprof+0x57/0x320 [ 132.435394][ T8384] ? __alloc_skb+0x101/0x320 [ 132.435432][ T8384] __alloc_skb+0x101/0x320 [ 132.435543][ T8384] ? audit_log_start+0x365/0x6c0 [ 132.435580][ T8384] audit_log_start+0x380/0x6c0 [ 132.435673][ T8384] audit_seccomp+0x48/0x100 [ 132.435701][ T8384] ? __seccomp_filter+0x68c/0x10d0 [ 132.435725][ T8384] __seccomp_filter+0x69d/0x10d0 [ 132.435748][ T8384] ? do_nanosleep+0x26d/0x330 [ 132.435796][ T8384] ? __hrtimer_setup+0x144/0x170 [ 132.435828][ T8384] __secure_computing+0x82/0x150 [ 132.435869][ T8384] syscall_trace_enter+0xcf/0x1e0 [ 132.435943][ T8384] do_syscall_64+0xaa/0x1a0 [ 132.435967][ T8384] ? clear_bhb_loop+0x25/0x80 [ 132.436079][ T8384] ? clear_bhb_loop+0x25/0x80 [ 132.436105][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.436125][ T8384] RIP: 0033:0x7fa3ffe7d37c [ 132.436140][ T8384] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 132.436229][ T8384] RSP: 002b:00007fa3fe4e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.436318][ T8384] RAX: ffffffffffffffda RBX: 00007fa4000a5fa0 RCX: 00007fa3ffe7d37c [ 132.436331][ T8384] RDX: 000000000000000f RSI: 00007fa3fe4e70a0 RDI: 0000000000000006 [ 132.436342][ T8384] RBP: 00007fa3fe4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.436354][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.436369][ T8384] R13: 0000000000000000 R14: 00007fa4000a5fa0 R15: 00007ffebd36b858 [ 132.436394][ T8384] [ 132.687047][ T8387] loop2: detected capacity change from 0 to 1024 [ 132.694853][ T8387] EXT4-fs: Ignoring removed oldalloc option [ 132.700876][ T8387] EXT4-fs: Ignoring removed i_version option [ 132.715402][ T8387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.732760][ T8387] __nla_validate_parse: 7 callbacks suppressed [ 132.732777][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1743'. [ 132.761007][ T8387] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1743'. [ 132.818221][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.891447][ T8422] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 133.050867][ T8454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1764'. [ 133.179140][ T8471] SELinux: Context system_u:object_r:etc_aliases_t:s0 is not valid (left unmapped). [ 133.231422][ T8477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.289048][ T8481] SELinux: policydb version 536 does not match my version range 15-34 [ 133.297607][ T8481] SELinux: failed to load policy [ 133.380600][ T8485] tipc: Enabled bearer , priority 10 [ 133.448095][ T8495] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1780'. [ 133.810065][ T8526] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1788'. [ 133.819514][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1788'. [ 133.893973][ T8530] netlink: 'syz.1.1791': attribute type 25 has an invalid length. [ 133.901936][ T8530] netlink: 'syz.1.1791': attribute type 7 has an invalid length. [ 134.097490][ T8531] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.151560][ T8533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1792'. [ 134.190005][ T8531] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.287136][ T8531] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.389342][ T8531] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.477480][ T8536] batadv0 speed is unknown, defaulting to 1000 [ 134.574647][ T8531] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.648649][ T8531] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.739173][ T8541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1795'. [ 134.767171][ T8531] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.838916][ T8531] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.871222][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 134.871268][ T29] audit: type=1326 audit(1745769583.343:6641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8542 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b1d2e969 code=0x7ffc0000 [ 134.941532][ T29] audit: type=1326 audit(1745769583.343:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8542 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b1d2e969 code=0x7ffc0000 [ 134.965224][ T29] audit: type=1326 audit(1745769583.383:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8542 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6b1d2d2d0 code=0x7ffc0000 [ 134.988654][ T29] audit: type=1326 audit(1745769583.383:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8542 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa6b1d30197 code=0x7ffc0000 [ 135.012198][ T29] audit: type=1326 audit(1745769583.383:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8542 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6b1d2e969 code=0x7ffc0000 [ 135.035629][ T29] audit: type=1326 audit(1745769583.383:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8542 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa6b1d30197 code=0x7ffc0000 [ 135.059136][ T29] audit: type=1326 audit(1745769583.383:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8542 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa6b1d2d5ca code=0x7ffc0000 [ 135.082422][ T29] audit: type=1326 audit(1745769583.383:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8542 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b1d2e969 code=0x7ffc0000 [ 135.106094][ T29] audit: type=1326 audit(1745769583.383:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8542 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b1d2e969 code=0x7ffc0000 [ 135.129683][ T29] audit: type=1326 audit(1745769583.383:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8542 comm="syz.1.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fa6b1d2e969 code=0x7ffc0000 [ 135.286516][ T8552] loop4: detected capacity change from 0 to 128 [ 135.340965][ T8552] vfat: Unknown parameter '/dev/rtc0' [ 135.396481][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1803'. [ 135.416394][ T8561] loop2: detected capacity change from 0 to 512 [ 135.434905][ T8561] EXT4-fs: Ignoring removed orlov option [ 135.492613][ T8561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.573150][ T8561] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.613039][ T8566] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 135.664932][ T8570] support for the xor transformation has been removed. [ 135.675521][ T8572] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1806'. [ 135.683851][ T8566] SELinux: failed to load policy [ 135.732727][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.899617][ T8585] FAULT_INJECTION: forcing a failure. [ 135.899617][ T8585] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.912988][ T8585] CPU: 1 UID: 0 PID: 8585 Comm: syz.0.1812 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 135.913019][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.913034][ T8585] Call Trace: [ 135.913042][ T8585] [ 135.913050][ T8585] __dump_stack+0x1d/0x30 [ 135.913078][ T8585] dump_stack_lvl+0xe8/0x140 [ 135.913109][ T8585] dump_stack+0x15/0x1b [ 135.913128][ T8585] should_fail_ex+0x265/0x280 [ 135.913227][ T8585] should_fail_alloc_page+0xf2/0x100 [ 135.913260][ T8585] __alloc_frozen_pages_noprof+0xff/0x360 [ 135.913288][ T8585] alloc_pages_mpol+0xb3/0x250 [ 135.913348][ T8585] vma_alloc_folio_noprof+0x1aa/0x300 [ 135.913412][ T8585] handle_mm_fault+0x1056/0x2ae0 [ 135.913449][ T8585] ? mas_walk+0xf2/0x120 [ 135.913481][ T8585] do_user_addr_fault+0x636/0x1090 [ 135.913522][ T8585] ? fpregs_assert_state_consistent+0x84/0xa0 [ 135.913663][ T8585] exc_page_fault+0x54/0xc0 [ 135.913701][ T8585] asm_exc_page_fault+0x26/0x30 [ 135.913725][ T8585] RIP: 0033:0x7fc3daac0d70 [ 135.913743][ T8585] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 135.913762][ T8585] RSP: 002b:00007fc3d92664a0 EFLAGS: 00010286 [ 135.913776][ T8585] RAX: 0000000000001000 RBX: 00007fc3d9266540 RCX: 0000000000000001 [ 135.913815][ T8585] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007fc3d92665e0 [ 135.913830][ T8585] RBP: 00000000000000db R08: 00007fc3d0e47000 R09: 00000000000000ff [ 135.913844][ T8585] R10: 0000000000000000 R11: 00007fc3d9266550 R12: 0000000000000001 [ 135.913858][ T8585] R13: 00007fc3dac9bfc0 R14: 0000000000000000 R15: 00007fc3d92665e0 [ 135.913877][ T8585] [ 135.913886][ T8585] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 136.071078][ T8583] futex_wake_op: syz.2.1811 tries to shift op by -1; fix this program [ 136.118671][ T8591] loop4: detected capacity change from 0 to 8192 [ 136.125722][ T8591] vfat: Unknown parameter '&ó #ó0»!T—.yÕ„¯÷—Ž£ ÎÆ°*Æì ì#Ë' [ 136.174069][ T8591] syz_tun: entered promiscuous mode [ 136.180632][ T8591] syz_tun: left promiscuous mode [ 136.287362][ T8613] loop2: detected capacity change from 0 to 512 [ 136.302255][ T8613] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 136.769109][ T8640] netlink: 'syz.1.1831': attribute type 21 has an invalid length. [ 136.971894][ T8653] batadv0 speed is unknown, defaulting to 1000 [ 137.524793][ T8680] netlink: 'syz.2.1846': attribute type 16 has an invalid length. [ 137.739581][ T8685] loop4: detected capacity change from 0 to 512 [ 137.747316][ T8685] EXT4-fs: Ignoring removed orlov option [ 137.774844][ T8685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.806155][ T8686] loop5: detected capacity change from 0 to 4096 [ 137.808088][ T8685] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.812900][ T8686] EXT4-fs: Ignoring removed orlov option [ 137.828718][ T8686] EXT4-fs: Ignoring removed nobh option [ 137.844303][ T8696] __nla_validate_parse: 10 callbacks suppressed [ 137.844317][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 137.917017][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.927427][ T8686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.940600][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 137.973862][ T8686] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1847: Failed to acquire dquot type 1 [ 137.992034][ T8704] loop2: detected capacity change from 0 to 512 [ 138.000446][ T8686] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1847: Failed to acquire dquot type 1 [ 138.003050][ T8704] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 138.050016][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1854'. [ 138.069837][ T8707] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1854'. [ 138.088697][ T8712] 9pnet_fd: Insufficient options for proto=fd [ 138.125718][ T8714] dccp_v4_rcv: dropped packet with invalid checksum [ 138.151477][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.178737][ T8716] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1856'. [ 138.188949][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 138.199444][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.291180][ T8722] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1859'. [ 138.480917][ T8267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.516008][ T8731] loop9: detected capacity change from 0 to 5 [ 138.522409][ T8731] buffer_io_error: 2 callbacks suppressed [ 138.522420][ T8731] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.526676][ T8733] loop4: detected capacity change from 0 to 512 [ 138.528320][ T8731] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.551033][ T8731] loop9: unable to read partition table [ 138.554751][ T8733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.569576][ T8731] loop_reread_partitions: partition scan of loop9 (þ被üŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 138.569576][ T8731] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 138.570783][ T8733] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.584917][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1862'. [ 138.625852][ T8738] loop5: detected capacity change from 0 to 512 [ 138.655682][ T8738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.668495][ T8738] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.727495][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.742307][ T8743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1866'. [ 138.754794][ T8746] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1867'. [ 138.780796][ T8748] x_tables: duplicate underflow at hook 1 [ 138.841848][ T8754] loop4: detected capacity change from 0 to 512 [ 138.848530][ T8756] loop2: detected capacity change from 0 to 1024 [ 138.855614][ T8756] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 138.866751][ T8756] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 138.877083][ T8754] EXT4-fs: Ignoring removed orlov option [ 138.884179][ T8756] JBD2: no valid journal superblock found [ 138.890003][ T8756] EXT4-fs (loop2): Could not load journal inode [ 138.905058][ T8754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.918441][ T8754] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.964658][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.149644][ T8778] FAULT_INJECTION: forcing a failure. [ 139.149644][ T8778] name failslab, interval 1, probability 0, space 0, times 0 [ 139.163132][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.2.1880 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 139.163210][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.163249][ T8778] Call Trace: [ 139.163256][ T8778] [ 139.163266][ T8778] __dump_stack+0x1d/0x30 [ 139.163291][ T8778] dump_stack_lvl+0xe8/0x140 [ 139.163316][ T8778] dump_stack+0x15/0x1b [ 139.163334][ T8778] should_fail_ex+0x265/0x280 [ 139.163442][ T8778] should_failslab+0x8c/0xb0 [ 139.163548][ T8778] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 139.163570][ T8778] ? sidtab_sid2str_get+0xa0/0x130 [ 139.163691][ T8778] ? skb_put+0x67/0xf0 [ 139.163729][ T8778] kmemdup_noprof+0x2b/0x70 [ 139.163749][ T8778] sidtab_sid2str_get+0xa0/0x130 [ 139.163858][ T8778] security_sid_to_context_core+0x1eb/0x2e0 [ 139.163887][ T8778] security_sid_to_context+0x27/0x40 [ 139.163920][ T8778] selinux_lsmprop_to_secctx+0x67/0xf0 [ 139.164009][ T8778] security_lsmprop_to_secctx+0x43/0x80 [ 139.164036][ T8778] audit_log_task_context+0x77/0x190 [ 139.164072][ T8778] audit_log_task+0xf4/0x250 [ 139.164102][ T8778] audit_seccomp+0x61/0x100 [ 139.164178][ T8778] ? __seccomp_filter+0x68c/0x10d0 [ 139.164203][ T8778] __seccomp_filter+0x69d/0x10d0 [ 139.164230][ T8778] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 139.164254][ T8778] ? vfs_write+0x75e/0x8d0 [ 139.164339][ T8778] ? __rseq_handle_notify_resume+0x234/0xbd0 [ 139.164376][ T8778] __secure_computing+0x82/0x150 [ 139.164399][ T8778] syscall_trace_enter+0xcf/0x1e0 [ 139.164421][ T8778] do_syscall_64+0xaa/0x1a0 [ 139.164441][ T8778] ? clear_bhb_loop+0x25/0x80 [ 139.164522][ T8778] ? clear_bhb_loop+0x25/0x80 [ 139.164548][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.164575][ T8778] RIP: 0033:0x7fa3ffe7e969 [ 139.164614][ T8778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.164631][ T8778] RSP: 002b:00007fa3fe4e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 139.164651][ T8778] RAX: ffffffffffffffda RBX: 00007fa4000a5fa0 RCX: 00007fa3ffe7e969 [ 139.164702][ T8778] RDX: 0000000000000200 RSI: 0000000000000000 RDI: ffffffffffffffff [ 139.164717][ T8778] RBP: 00007fa3fe4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.164780][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.164791][ T8778] R13: 0000000000000000 R14: 00007fa4000a5fa0 R15: 00007ffebd36b858 [ 139.164814][ T8778] [ 139.476527][ T8779] infiniband syz!: set down [ 139.481100][ T8779] infiniband syz!: added team_slave_0 [ 139.500744][ T8779] RDS/IB: syz!: added [ 139.506750][ T8779] smc: adding ib device syz! with port count 1 [ 139.524841][ T8779] smc: ib device syz! port 1 has pnetid [ 139.535386][ T8267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.559316][ T8790] IPVS: stopping master sync thread 8792 ... [ 139.625190][ T8785] loop4: detected capacity change from 0 to 512 [ 139.697552][ T8785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.724065][ T8785] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.735074][ T8785] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1877: bg 0: block 248: padding at end of block bitmap is not set [ 139.759638][ T8785] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1877: Failed to acquire dquot type 1 [ 139.790034][ T8785] EXT4-fs (loop4): 1 truncate cleaned up [ 139.796678][ T8785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.864037][ T8779] smc: net device bond0 applied user defined pnetid SYZ2 [ 139.928447][ T8779] ipvlan0: entered promiscuous mode [ 139.939461][ T8801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.948028][ T8801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.109330][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.296075][ T8805] loop4: detected capacity change from 0 to 128 [ 140.331344][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 140.331358][ T29] audit: type=1400 audit(1745769588.803:6952): avc: denied { create } for pid=8806 comm="syz.0.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 140.376895][ T29] audit: type=1400 audit(1745769588.853:6953): avc: denied { connect } for pid=8806 comm="syz.0.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 140.397511][ T29] audit: type=1400 audit(1745769588.853:6954): avc: denied { read } for pid=8806 comm="syz.0.1890" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 140.420630][ T29] audit: type=1400 audit(1745769588.853:6955): avc: denied { open } for pid=8806 comm="syz.0.1890" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 140.448992][ T8811] netlink: 'syz.0.1890': attribute type 27 has an invalid length. [ 140.489786][ T29] audit: type=1326 audit(1745769588.963:6956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b1d2e969 code=0x7ffc0000 [ 140.514104][ T29] audit: type=1326 audit(1745769588.963:6957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b1d2e969 code=0x7ffc0000 [ 140.540975][ T29] audit: type=1326 audit(1745769589.013:6958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6b1d2e969 code=0x7ffc0000 [ 140.593553][ T29] audit: type=1326 audit(1745769589.043:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b1d2e969 code=0x7ffc0000 [ 140.617205][ T29] audit: type=1326 audit(1745769589.043:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6b1d2e969 code=0x7ffc0000 [ 140.640972][ T29] audit: type=1326 audit(1745769589.043:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8814 comm="syz.1.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b1d2e969 code=0x7ffc0000 [ 140.681399][ T8811] $Hÿ: left promiscuous mode [ 140.703666][ T8829] loop5: detected capacity change from 0 to 128 [ 140.735445][ T8829] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.754640][ T8829] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.836147][ T8811] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.845638][ T8811] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.854174][ T8811] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.862652][ T8811] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.886893][ T8811] tipc: Resetting bearer [ 140.897465][ T8811] veth3: left promiscuous mode [ 140.902346][ T8811] veth3: left allmulticast mode [ 140.917628][ T8267] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.954122][ T8807] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 140.965885][ T8807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.014626][ T8838] wg1: entered promiscuous mode [ 141.019567][ T8838] wg1: entered allmulticast mode [ 141.172511][ T8853] loop5: detected capacity change from 0 to 512 [ 141.204058][ T8853] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.226283][ T8853] EXT4-fs: dax option not supported [ 141.234573][ T8856] loop4: detected capacity change from 0 to 2048 [ 141.283954][ T8863] loop5: detected capacity change from 0 to 512 [ 141.317187][ T8856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.343025][ T8856] batadv0 speed is unknown, defaulting to 1000 [ 141.371565][ T8868] FAULT_INJECTION: forcing a failure. [ 141.371565][ T8868] name failslab, interval 1, probability 0, space 0, times 0 [ 141.384848][ T8868] CPU: 1 UID: 0 PID: 8868 Comm: syz.0.1909 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 141.384878][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.384891][ T8868] Call Trace: [ 141.384896][ T8868] [ 141.384902][ T8868] __dump_stack+0x1d/0x30 [ 141.384921][ T8868] dump_stack_lvl+0xe8/0x140 [ 141.384991][ T8868] dump_stack+0x15/0x1b [ 141.385054][ T8868] should_fail_ex+0x265/0x280 [ 141.385174][ T8868] ? wakeup_source_sysfs_add+0x39/0x1b0 [ 141.385245][ T8868] should_failslab+0x8c/0xb0 [ 141.385317][ T8868] __kmalloc_cache_noprof+0x4c/0x320 [ 141.385339][ T8868] wakeup_source_sysfs_add+0x39/0x1b0 [ 141.385373][ T8868] wakeup_source_register+0xfd/0x240 [ 141.385410][ T8868] ep_insert+0x7fe/0xd10 [ 141.385501][ T8868] do_epoll_ctl+0x6c3/0x870 [ 141.385527][ T8868] __x64_sys_epoll_ctl+0xcb/0x100 [ 141.385575][ T8868] x64_sys_call+0x26ef/0x2fb0 [ 141.385600][ T8868] do_syscall_64+0xd0/0x1a0 [ 141.385660][ T8868] ? clear_bhb_loop+0x25/0x80 [ 141.385761][ T8868] ? clear_bhb_loop+0x25/0x80 [ 141.385787][ T8868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.385812][ T8868] RIP: 0033:0x7fc3dabfe969 [ 141.385830][ T8868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.385926][ T8868] RSP: 002b:00007fc3d9246038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 141.385947][ T8868] RAX: ffffffffffffffda RBX: 00007fc3dae26080 RCX: 00007fc3dabfe969 [ 141.385962][ T8868] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000005 [ 141.385976][ T8868] RBP: 00007fc3d9246090 R08: 0000000000000000 R09: 0000000000000000 [ 141.385991][ T8868] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 141.386005][ T8868] R13: 0000000000000000 R14: 00007fc3dae26080 R15: 00007ffd3db12f18 [ 141.386103][ T8868] [ 141.576404][ T8863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 141.595987][ T8863] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.633139][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.716675][ T8267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 141.761872][ T8872] loop2: detected capacity change from 0 to 128 [ 141.792492][ T8879] loop5: detected capacity change from 0 to 512 [ 141.802364][ T8879] EXT4-fs (loop5): orphan cleanup on readonly fs [ 141.815521][ T8879] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1913: bg 0: block 248: padding at end of block bitmap is not set [ 141.835769][ T8879] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1913: Failed to acquire dquot type 1 [ 141.848990][ T8879] EXT4-fs (loop5): 1 truncate cleaned up [ 141.859759][ T8879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.863142][ T8884] loop4: detected capacity change from 0 to 512 [ 141.888801][ T8879] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 141.899912][ T8884] EXT4-fs (loop4): failed to initialize system zone (-117) [ 141.909477][ T8884] EXT4-fs (loop4): mount failed [ 141.914718][ T8879] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 141.938116][ T8267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.968592][ T8896] netlink: 'syz.4.1918': attribute type 5 has an invalid length. [ 141.974079][ T8894] tipc: Started in network mode [ 141.981332][ T8894] tipc: Node identity 268f6ccaa2cb, cluster identity 4711 [ 141.988609][ T8894] tipc: Enabled bearer , priority 0 [ 142.017412][ T8893] tipc: Disabling bearer [ 142.080549][ T8902] loop2: detected capacity change from 0 to 512 [ 142.087950][ T8902] EXT4-fs: Ignoring removed orlov option [ 142.186892][ T8902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.209799][ T8902] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.247970][ T3384] IPVS: starting estimator thread 0... [ 142.276639][ T8918] loop4: detected capacity change from 0 to 512 [ 142.284202][ T8918] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.294327][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.307679][ T8918] EXT4-fs (loop4): 1 truncate cleaned up [ 142.317284][ T8918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.342797][ T8914] IPVS: using max 1920 ests per chain, 96000 per kthread [ 142.413914][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.455906][ T8939] loop4: detected capacity change from 0 to 512 [ 142.461184][ T8942] tmpfs: Bad value for 'mpol' [ 142.467284][ T8943] FAULT_INJECTION: forcing a failure. [ 142.467284][ T8943] name failslab, interval 1, probability 0, space 0, times 0 [ 142.480798][ T8943] CPU: 1 UID: 0 PID: 8943 Comm: +}[@ Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 142.480956][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.480998][ T8943] Call Trace: [ 142.481005][ T8943] [ 142.481012][ T8943] __dump_stack+0x1d/0x30 [ 142.481032][ T8943] dump_stack_lvl+0xe8/0x140 [ 142.481076][ T8943] dump_stack+0x15/0x1b [ 142.481097][ T8943] should_fail_ex+0x265/0x280 [ 142.481158][ T8943] should_failslab+0x8c/0xb0 [ 142.481195][ T8943] __kvmalloc_node_noprof+0x126/0x4d0 [ 142.481220][ T8943] ? alloc_netdev_mqs+0x5ac/0xab0 [ 142.481261][ T8943] alloc_netdev_mqs+0x5ac/0xab0 [ 142.481380][ T8943] slip_open+0x2d1/0x920 [ 142.481402][ T8943] ? vfree+0x374/0x3f0 [ 142.481422][ T8943] ? up_write+0x18/0x60 [ 142.481444][ T8943] tty_ldisc_open+0x5a/0xb0 [ 142.481505][ T8943] tty_set_ldisc+0x1db/0x380 [ 142.481541][ T8943] tiocsetd+0x51/0x60 [ 142.481570][ T8943] tty_ioctl+0xa7f/0xb80 [ 142.481626][ T8943] ? __pfx_tty_ioctl+0x10/0x10 [ 142.481647][ T8943] __se_sys_ioctl+0xcb/0x140 [ 142.481667][ T8943] __x64_sys_ioctl+0x43/0x50 [ 142.481766][ T8943] x64_sys_call+0x19a8/0x2fb0 [ 142.481833][ T8943] do_syscall_64+0xd0/0x1a0 [ 142.481854][ T8943] ? clear_bhb_loop+0x25/0x80 [ 142.481874][ T8943] ? clear_bhb_loop+0x25/0x80 [ 142.481894][ T8943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.481991][ T8943] RIP: 0033:0x7fc3dabfe969 [ 142.482010][ T8943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.482030][ T8943] RSP: 002b:00007fc3d9267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.482051][ T8943] RAX: ffffffffffffffda RBX: 00007fc3dae25fa0 RCX: 00007fc3dabfe969 [ 142.482067][ T8943] RDX: 00002000000002c0 RSI: 0000000000005423 RDI: 0000000000000006 [ 142.482079][ T8943] RBP: 00007fc3d9267090 R08: 0000000000000000 R09: 0000000000000000 [ 142.482091][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.482102][ T8943] R13: 0000000000000000 R14: 00007fc3dae25fa0 R15: 00007ffd3db12f18 [ 142.482172][ T8943] [ 142.723334][ T8939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.735981][ T8951] dummy0 speed is unknown, defaulting to 1000 [ 142.742084][ T8951] dummy0 speed is unknown, defaulting to 1000 [ 142.743763][ T8939] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.749302][ T8951] dummy0 speed is unknown, defaulting to 1000 [ 142.766081][ T8951] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.778573][ T8951] dummy0 speed is unknown, defaulting to 1000 [ 142.785296][ T8951] dummy0 speed is unknown, defaulting to 1000 [ 142.791819][ T8951] dummy0 speed is unknown, defaulting to 1000 [ 142.798261][ T8951] dummy0 speed is unknown, defaulting to 1000 [ 142.805695][ T8951] dummy0 speed is unknown, defaulting to 1000 [ 142.904089][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.054204][ T8977] loop5: detected capacity change from 0 to 1024 [ 143.060996][ T8977] EXT4-fs: Ignoring removed oldalloc option [ 143.067081][ T8977] EXT4-fs: Ignoring removed i_version option [ 143.089952][ T8977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.141548][ T8987] loop4: detected capacity change from 0 to 128 [ 143.153595][ T8267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.164856][ T8987] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.179183][ T8987] ext4 filesystem being mounted at /405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.237331][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.260944][ T8994] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 143.298497][ T9002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.298548][ T9002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.709890][ T9023] loop2: detected capacity change from 0 to 256 [ 143.716707][ T9023] msdos: Unknown parameter 'discard(uid' [ 143.769380][ T9026] loop2: detected capacity change from 0 to 512 [ 143.784676][ T9026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 143.798277][ T9026] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.847813][ T9030] 9pnet_fd: Insufficient options for proto=fd [ 143.927547][ T9034] batadv0 speed is unknown, defaulting to 1000 [ 144.038529][ T9034] dummy0 speed is unknown, defaulting to 1000 [ 144.080342][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 144.189345][ T9046] __nla_validate_parse: 14 callbacks suppressed [ 144.189360][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1969'. [ 144.204942][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1969'. [ 144.214813][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1969'. [ 144.247679][ T9050] loop5: detected capacity change from 0 to 512 [ 144.255883][ T9050] EXT4-fs: Ignoring removed orlov option [ 144.263943][ T9057] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1969'. [ 144.275578][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1969'. [ 144.284921][ T9046] netlink: 'syz.2.1969': attribute type 6 has an invalid length. [ 144.310172][ T9043] tipc: Enabling of bearer rejected, already enabled [ 144.334912][ T9060] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1973'. [ 144.343959][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'. [ 144.354014][ T9050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.369562][ T9066] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 144.382815][ T9050] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.421212][ T8267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.434259][ T9064] vlan0: entered promiscuous mode [ 144.439375][ T9064] vlan0: entered allmulticast mode [ 144.444540][ T9064] hsr_slave_1: entered allmulticast mode [ 144.499107][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1975'. [ 144.529823][ T9079] No such timeout policy "syz0" [ 144.544548][ T9077] netlink: '&': attribute type 1 has an invalid length. [ 144.560969][ T9077] netlink: 172 bytes leftover after parsing attributes in process `&'. [ 144.574749][ T9081] loop2: detected capacity change from 0 to 512 [ 144.584524][ T9081] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1982: invalid indirect mapped block 256 (level 2) [ 144.620522][ T9081] EXT4-fs (loop2): 2 truncates cleaned up [ 144.627105][ T9091] FAULT_INJECTION: forcing a failure. [ 144.627105][ T9091] name failslab, interval 1, probability 0, space 0, times 0 [ 144.640571][ T9091] CPU: 1 UID: 0 PID: 9091 Comm: syz.0.1985 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 144.640690][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.640705][ T9091] Call Trace: [ 144.640713][ T9091] [ 144.640722][ T9091] __dump_stack+0x1d/0x30 [ 144.640746][ T9091] dump_stack_lvl+0xe8/0x140 [ 144.640770][ T9091] dump_stack+0x15/0x1b [ 144.640785][ T9091] should_fail_ex+0x265/0x280 [ 144.640853][ T9091] should_failslab+0x8c/0xb0 [ 144.640882][ T9091] kmem_cache_alloc_node_noprof+0x57/0x320 [ 144.640915][ T9091] ? __alloc_skb+0x101/0x320 [ 144.640957][ T9081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.640986][ T9091] __alloc_skb+0x101/0x320 [ 144.641061][ T9091] ? audit_log_start+0x365/0x6c0 [ 144.641116][ T9091] audit_log_start+0x380/0x6c0 [ 144.641159][ T9091] audit_seccomp+0x48/0x100 [ 144.641184][ T9091] ? __seccomp_filter+0x68c/0x10d0 [ 144.641259][ T9091] __seccomp_filter+0x69d/0x10d0 [ 144.641289][ T9091] ? do_nanosleep+0x26d/0x330 [ 144.641393][ T9091] ? __hrtimer_setup+0x144/0x170 [ 144.641426][ T9091] __secure_computing+0x82/0x150 [ 144.641451][ T9091] syscall_trace_enter+0xcf/0x1e0 [ 144.641502][ T9091] do_syscall_64+0xaa/0x1a0 [ 144.641555][ T9091] ? clear_bhb_loop+0x25/0x80 [ 144.641582][ T9091] ? clear_bhb_loop+0x25/0x80 [ 144.641615][ T9091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.641659][ T9091] RIP: 0033:0x7fc3dabfd37c [ 144.641678][ T9091] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.641772][ T9091] RSP: 002b:00007fc3d9267030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.641796][ T9091] RAX: ffffffffffffffda RBX: 00007fc3dae25fa0 RCX: 00007fc3dabfd37c [ 144.641812][ T9091] RDX: 000000000000000f RSI: 00007fc3d92670a0 RDI: 0000000000000006 [ 144.641827][ T9091] RBP: 00007fc3d9267090 R08: 0000000000000000 R09: 0000000000000000 [ 144.641855][ T9091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.641873][ T9091] R13: 0000000000000000 R14: 00007fc3dae25fa0 R15: 00007ffd3db12f18 [ 144.641899][ T9091] [ 144.682481][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1986'. [ 144.709275][ T9081] blktrace: Concurrent blktraces are not allowed on sg0 [ 144.964655][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.047995][ T9120] random: crng reseeded on system resumption [ 145.145319][ T9125] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 145.151890][ T9125] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 145.159346][ T9125] vhci_hcd vhci_hcd.0: Device attached [ 145.183268][ T9131] loop2: detected capacity change from 0 to 512 [ 145.197332][ T9131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.225036][ T9128] vhci_hcd: connection closed [ 145.227565][ T7059] vhci_hcd: stop threads [ 145.230609][ T9131] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.232606][ T7059] vhci_hcd: release socket [ 145.252502][ T7059] vhci_hcd: disconnect device [ 145.294265][ T9138] vlan0: entered promiscuous mode [ 145.299433][ T9138] vlan0: entered allmulticast mode [ 145.304730][ T9138] hsr_slave_1: entered allmulticast mode [ 145.312603][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.333287][ T9146] loop2: detected capacity change from 0 to 512 [ 145.339931][ T9146] EXT4-fs: Ignoring removed bh option [ 145.345940][ T9146] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 145.355425][ T9146] EXT4-fs (loop2): 1 truncate cleaned up [ 145.361564][ T9146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.376656][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 145.376672][ T29] audit: type=1400 audit(1745769593.853:7315): avc: denied { append } for pid=9145 comm="syz.2.2004" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 145.425472][ T9149] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 145.496784][ T29] audit: type=1400 audit(1745769593.973:7316): avc: denied { validate_trans } for pid=9151 comm="syz.0.2005" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 145.542545][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.549933][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.565691][ T9158] bridge0: entered allmulticast mode [ 145.578029][ T9149] ipvlan2: entered promiscuous mode [ 145.585314][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.592384][ T9158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.599742][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.606890][ T9158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.614307][ T9158] bridge0: entered promiscuous mode [ 145.753950][ T9168] batadv0 speed is unknown, defaulting to 1000 [ 145.774266][ T9172] loop4: detected capacity change from 0 to 512 [ 145.795098][ T9172] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 145.796618][ T9168] dummy0 speed is unknown, defaulting to 1000 [ 145.805925][ T9172] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 145.821393][ T9172] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2012: Failed to acquire dquot type 1 [ 145.836445][ T9172] EXT4-fs (loop4): 1 truncate cleaned up [ 145.842634][ T9172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.855733][ T9172] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.869680][ T9172] SELinux: syz.4.2012 (9172) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 145.895612][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.958881][ T9181] process '/newroot/419/file0' started with executable stack [ 145.997127][ T9186] batadv0 speed is unknown, defaulting to 1000 [ 146.041533][ T9186] dummy0 speed is unknown, defaulting to 1000 [ 146.054975][ T29] audit: type=1326 audit(1745769594.533:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dabfe969 code=0x7ffc0000 [ 146.078534][ T29] audit: type=1326 audit(1745769594.533:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dabfe969 code=0x7ffc0000 [ 146.117553][ T29] audit: type=1326 audit(1745769594.533:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="syz.0.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc3dabfe969 code=0x7ffc0000 [ 146.141083][ T29] audit: type=1326 audit(1745769594.533:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dabfe969 code=0x7ffc0000 [ 146.164065][ T29] audit: type=1326 audit(1745769594.533:7321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3dabfe969 code=0x7ffc0000 [ 146.186965][ T29] audit: type=1326 audit(1745769594.573:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9188 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3dabfe969 code=0x7ffc0000 [ 146.242577][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.320182][ T9201] No such timeout policy "syz0" [ 146.519842][ T9230] SELinux: syz.4.2034 (9230) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 146.548650][ T9229] vlan2: entered promiscuous mode [ 146.553900][ T9229] hsr_slave_1: entered promiscuous mode [ 146.559572][ T9229] vlan2: entered allmulticast mode [ 146.564728][ T9229] hsr_slave_1: entered allmulticast mode [ 146.704391][ T9245] loop4: detected capacity change from 0 to 512 [ 146.716286][ T9245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.729153][ T9245] ext4 filesystem being mounted at /428/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.738350][ T9253] SELinux: syz.1.2040 (9253) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 146.754632][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.785815][ T9253] netlink: 'syz.1.2040': attribute type 10 has an invalid length. [ 146.793983][ T9253] ipvlan0: entered allmulticast mode [ 146.799363][ T9253] veth0_vlan: entered allmulticast mode [ 146.805227][ T9253] team0: Device ipvlan0 is up. Set it down before adding it as a team port [ 146.850355][ T9260] netlink: 'syz.1.2043': attribute type 16 has an invalid length. [ 146.858379][ T9260] netlink: 'syz.1.2043': attribute type 17 has an invalid length. [ 146.886965][ T9260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.321742][ T9280] block device autoloading is deprecated and will be removed. [ 147.579502][ T9303] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 147.624878][ T9305] vlan2: entered promiscuous mode [ 147.630052][ T9305] vlan2: entered allmulticast mode [ 147.635305][ T9305] hsr_slave_1: entered allmulticast mode [ 147.757884][ T9310] loop2: detected capacity change from 0 to 512 [ 147.764831][ T9310] EXT4-fs: Ignoring removed orlov option [ 147.773190][ T9312] FAULT_INJECTION: forcing a failure. [ 147.773190][ T9312] name failslab, interval 1, probability 0, space 0, times 0 [ 147.785944][ T9312] CPU: 0 UID: 0 PID: 9312 Comm: syz.4.2060 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 147.785977][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.786003][ T9312] Call Trace: [ 147.786010][ T9312] [ 147.786019][ T9312] __dump_stack+0x1d/0x30 [ 147.786045][ T9312] dump_stack_lvl+0xe8/0x140 [ 147.786069][ T9312] dump_stack+0x15/0x1b [ 147.786153][ T9312] should_fail_ex+0x265/0x280 [ 147.786260][ T9312] should_failslab+0x8c/0xb0 [ 147.786295][ T9312] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 147.786321][ T9312] ? security_context_to_sid_core+0x69/0x3b0 [ 147.786358][ T9312] kmemdup_nul+0x36/0xc0 [ 147.786441][ T9312] security_context_to_sid_core+0x69/0x3b0 [ 147.786481][ T9312] security_context_to_sid_force+0x30/0x40 [ 147.786554][ T9312] selinux_lsm_setattr+0x330/0x660 [ 147.786593][ T9312] selinux_setprocattr+0x4f/0x70 [ 147.786617][ T9312] security_setprocattr+0x1a4/0x1d0 [ 147.786641][ T9312] proc_pid_attr_write+0x1eb/0x220 [ 147.786743][ T9312] vfs_writev+0x3eb/0x870 [ 147.786772][ T9312] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 147.786803][ T9312] ? mutex_lock+0xd/0x30 [ 147.786836][ T9312] do_writev+0xe7/0x210 [ 147.786887][ T9312] __x64_sys_writev+0x45/0x50 [ 147.786989][ T9312] x64_sys_call+0x2006/0x2fb0 [ 147.787013][ T9312] do_syscall_64+0xd0/0x1a0 [ 147.787038][ T9312] ? clear_bhb_loop+0x25/0x80 [ 147.787141][ T9312] ? clear_bhb_loop+0x25/0x80 [ 147.787188][ T9312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.787253][ T9312] RIP: 0033:0x7f7f1448e969 [ 147.787270][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.787292][ T9312] RSP: 002b:00007f7f12af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 147.787314][ T9312] RAX: ffffffffffffffda RBX: 00007f7f146b5fa0 RCX: 00007f7f1448e969 [ 147.787327][ T9312] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 147.787339][ T9312] RBP: 00007f7f12af7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.787351][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.787394][ T9312] R13: 0000000000000000 R14: 00007f7f146b5fa0 R15: 00007fffa88e6d28 [ 147.787415][ T9312] [ 148.026857][ T9310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.046643][ T9310] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.076192][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.108327][ T9326] vlan2: entered promiscuous mode [ 148.113771][ T9326] vlan2: entered allmulticast mode [ 148.118966][ T9326] hsr_slave_1: entered allmulticast mode [ 148.129086][ T9335] loop4: detected capacity change from 0 to 512 [ 148.157160][ T9335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.174019][ T9335] ext4 filesystem being mounted at /436/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.219120][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.240026][ T9347] loop2: detected capacity change from 0 to 128 [ 148.260030][ T9347] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.274561][ T9347] ext4 filesystem being mounted at /409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.340909][ T9356] loop5: detected capacity change from 0 to 512 [ 148.350030][ T9356] EXT4-fs: Ignoring removed orlov option [ 148.388158][ T9356] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.415305][ T9364] loop4: detected capacity change from 0 to 4096 [ 148.464740][ T9376] tls_set_device_offload_rx: netdev not found [ 148.465953][ T9364] syzkaller0: entered promiscuous mode [ 148.476468][ T9364] syzkaller0: entered allmulticast mode [ 148.488074][ T9378] loop5: detected capacity change from 0 to 512 [ 148.510721][ T9364] batadv0 speed is unknown, defaulting to 1000 [ 148.544326][ T9378] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.555690][ T9364] dummy0 speed is unknown, defaulting to 1000 [ 148.575823][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.583721][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.591476][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.599353][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.607166][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.615095][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.622950][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.630709][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.638562][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.646534][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.654379][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.662134][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.670003][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.677803][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.685585][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.693357][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.701114][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.708947][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.716745][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.724516][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.732311][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.740081][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.747861][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.755759][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.763540][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.771298][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.779096][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.786902][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.794663][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.802414][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.810180][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.817975][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.825858][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.833682][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.841472][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.849292][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.857122][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.864937][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.872670][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.880474][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.888317][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.896094][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.903979][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.911718][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.919545][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.927322][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.935153][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.943060][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.950825][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 148.959738][ T3383] hid-generic 0000:FFFFFFFF:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.154684][ T9408] loop4: detected capacity change from 0 to 512 [ 149.155054][ T9408] EXT4-fs: Ignoring removed orlov option [ 149.176982][ T9408] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.280615][ T9413] __nla_validate_parse: 28 callbacks suppressed [ 149.280635][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2095'. [ 149.360846][ T9425] loop4: detected capacity change from 0 to 512 [ 149.361616][ T9425] journal_path: Lookup failure for './file0' [ 149.361636][ T9425] EXT4-fs: error: could not find journal device path [ 149.386779][ T9427] loop4: detected capacity change from 0 to 512 [ 149.406984][ T9427] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.483533][ T9434] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2101'. [ 149.483596][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'. [ 149.539965][ T9442] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2104'. [ 149.569498][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'. [ 149.577754][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2105'. [ 149.675091][ T9445] loop4: detected capacity change from 0 to 512 [ 149.675666][ T9445] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.701863][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'. [ 149.720117][ T9445] EXT4-fs (loop4): 1 truncate cleaned up [ 149.851161][ T9462] FAULT_INJECTION: forcing a failure. [ 149.851161][ T9462] name failslab, interval 1, probability 0, space 0, times 0 [ 149.864041][ T9462] CPU: 0 UID: 0 PID: 9462 Comm: syz.1.2112 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 149.864073][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.864088][ T9462] Call Trace: [ 149.864095][ T9462] [ 149.864103][ T9462] __dump_stack+0x1d/0x30 [ 149.864127][ T9462] dump_stack_lvl+0xe8/0x140 [ 149.864150][ T9462] dump_stack+0x15/0x1b [ 149.864170][ T9462] should_fail_ex+0x265/0x280 [ 149.864208][ T9462] should_failslab+0x8c/0xb0 [ 149.864242][ T9462] kmem_cache_alloc_noprof+0x50/0x310 [ 149.864281][ T9462] ? security_file_alloc+0x32/0x100 [ 149.864313][ T9462] security_file_alloc+0x32/0x100 [ 149.864342][ T9462] init_file+0x5c/0x1d0 [ 149.864376][ T9462] alloc_empty_file+0x8b/0x200 [ 149.864405][ T9462] alloc_file_pseudo+0xc6/0x160 [ 149.864438][ T9462] __shmem_file_setup+0x1b9/0x1f0 [ 149.864462][ T9462] shmem_zero_setup+0x63/0xd0 [ 149.864484][ T9462] mmap_region+0x1106/0x1470 [ 149.864549][ T9462] do_mmap+0x9de/0xc20 [ 149.864582][ T9462] vm_mmap_pgoff+0x17a/0x2e0 [ 149.864607][ T9462] ksys_mmap_pgoff+0xc2/0x310 [ 149.864628][ T9462] ? __x64_sys_mmap+0x49/0x70 [ 149.864649][ T9462] x64_sys_call+0x1602/0x2fb0 [ 149.864674][ T9462] do_syscall_64+0xd0/0x1a0 [ 149.864699][ T9462] ? clear_bhb_loop+0x25/0x80 [ 149.864724][ T9462] ? clear_bhb_loop+0x25/0x80 [ 149.864750][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.864771][ T9462] RIP: 0033:0x7fa6b1d2e969 [ 149.864786][ T9462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.864802][ T9462] RSP: 002b:00007fa6b0397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 149.864823][ T9462] RAX: ffffffffffffffda RBX: 00007fa6b1f55fa0 RCX: 00007fa6b1d2e969 [ 149.864837][ T9462] RDX: 0000000000000002 RSI: 0000000000fbe000 RDI: 0000200000000000 [ 149.864851][ T9462] RBP: 00007fa6b0397090 R08: ffffffffffffffff R09: 0000000000000000 [ 149.864866][ T9462] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000002 [ 149.864880][ T9462] R13: 0000000000000000 R14: 00007fa6b1f55fa0 R15: 00007ffeaca58958 [ 149.864903][ T9462] [ 149.917199][ T9472] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2115'. [ 150.108399][ T9483] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.2117'. [ 150.108428][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 150.124817][ T9484] loop4: detected capacity change from 0 to 512 [ 150.158528][ T9484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.180842][ T9484] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 150.222411][ T9484] loop4: detected capacity change from 0 to 256 [ 150.237961][ T9494] loop5: detected capacity change from 0 to 512 [ 150.257604][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.266387][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.282017][ T9494] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.297862][ T9502] loop2: detected capacity change from 0 to 512 [ 150.305604][ T9502] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.336576][ T9504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.349620][ T9502] EXT4-fs (loop2): 1 truncate cleaned up [ 150.356075][ T9504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.421100][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 150.421118][ T29] audit: type=1400 audit(1745769598.893:7487): avc: denied { ioctl } for pid=9490 comm="syz.2.2122" path="/415/bus/file1" dev="loop2" ino=15 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.877280][ T29] audit: type=1400 audit(1745769599.353:7488): avc: denied { map } for pid=9525 comm="syz.1.2133" path="socket:[29068]" dev="sockfs" ino=29068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.900507][ T29] audit: type=1400 audit(1745769599.353:7489): avc: denied { read } for pid=9525 comm="syz.1.2133" path="socket:[29068]" dev="sockfs" ino=29068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.935498][ T9526] 9pnet_fd: p9_fd_create_tcp (9526): problem connecting socket to 127.0.0.1 [ 150.935998][ T29] audit: type=1400 audit(1745769599.413:7490): avc: denied { mounton } for pid=9525 comm="syz.1.2133" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 151.011487][ T29] audit: type=1326 audit(1745769599.423:7491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b7d7e969 code=0x7ffc0000 [ 151.035063][ T29] audit: type=1326 audit(1745769599.423:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49b7d7e969 code=0x7ffc0000 [ 151.058633][ T29] audit: type=1326 audit(1745769599.423:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b7d7e969 code=0x7ffc0000 [ 151.082089][ T29] audit: type=1326 audit(1745769599.423:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49b7d7e969 code=0x7ffc0000 [ 151.105504][ T29] audit: type=1326 audit(1745769599.423:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b7d7e969 code=0x7ffc0000 [ 151.129026][ T29] audit: type=1326 audit(1745769599.423:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49b7d7e969 code=0x7ffc0000 [ 151.480435][ T9549] loop2: detected capacity change from 0 to 8192 [ 151.678940][ T9563] loop2: detected capacity change from 0 to 512 [ 151.718471][ T9563] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.730763][ T9565] 9pnet_fd: Insufficient options for proto=fd [ 151.765598][ T9573] loop5: detected capacity change from 0 to 512 [ 151.772613][ T9573] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 151.911171][ T9597] loop2: detected capacity change from 0 to 1024 [ 151.930762][ T9597] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2154: Failed to acquire dquot type 0 [ 151.978830][ T9597] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 151.994945][ T9597] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2154: corrupted inode contents [ 152.010656][ T9597] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.2154: mark_inode_dirty error [ 152.027298][ T9597] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2154: corrupted inode contents [ 152.045085][ T9597] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.2154: mark_inode_dirty error [ 152.057598][ T9597] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2154: corrupted inode contents [ 152.070845][ T9597] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 152.081305][ T9597] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2154: corrupted inode contents [ 152.098327][ T9597] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.2154: mark_inode_dirty error [ 152.110045][ T9624] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.120982][ T9597] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 152.139388][ T9597] EXT4-fs (loop2): 1 truncate cleaned up [ 152.147767][ T9597] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 152.837156][ T9724] loop5: detected capacity change from 0 to 2048 [ 152.867176][ T9724] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 152.895859][ T9724] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28 [ 152.908803][ T9724] EXT4-fs (loop5): This should not happen!! Data will be lost [ 152.908803][ T9724] [ 152.918568][ T9724] EXT4-fs (loop5): Total free blocks count 0 [ 152.924674][ T9724] EXT4-fs (loop5): Free/Dirty block details [ 152.930626][ T9724] EXT4-fs (loop5): free_blocks=2415919104 [ 152.937131][ T9724] EXT4-fs (loop5): dirty_blocks=16 [ 152.942282][ T9724] EXT4-fs (loop5): Block reservation details [ 152.948305][ T9724] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 152.973856][ T9737] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28 [ 152.986235][ T9737] EXT4-fs (loop5): This should not happen!! Data will be lost [ 152.986235][ T9737] [ 152.999662][ T9724] xt_hashlimit: size too large, truncated to 1048576 [ 153.104393][ T9744] loop0: detected capacity change from 0 to 512 [ 153.128862][ T9744] EXT4-fs: Ignoring removed orlov option [ 153.170777][ T9744] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.449535][ T9768] 8021q: VLANs not supported on ip6gre0 [ 153.601676][ T9779] loop4: detected capacity change from 0 to 512 [ 153.608762][ T9779] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 153.656198][ T9777] hub 2-0:1.0: USB hub found [ 153.662880][ T9777] hub 2-0:1.0: 8 ports detected [ 153.829304][ T9802] loop0: detected capacity change from 0 to 512 [ 153.867448][ T9806] loop2: detected capacity change from 0 to 512 [ 153.876131][ T9806] EXT4-fs: Ignoring removed orlov option [ 153.887793][ T9806] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.899992][ T9802] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.975881][ T9821] vlan2: entered allmulticast mode [ 153.984186][ T9822] loop0: detected capacity change from 0 to 1024 [ 153.995962][ T9822] loop0: detected capacity change from 0 to 512 [ 154.107753][ T9844] loop5: detected capacity change from 0 to 512 [ 154.116346][ T9844] EXT4-fs: Ignoring removed orlov option [ 154.145688][ T9844] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.230646][ T9858] tls_set_device_offload: netdev not found [ 154.625409][ T9881] loop5: detected capacity change from 0 to 512 [ 154.632489][ T9881] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.639094][ T9881] EXT4-fs: Ignoring removed bh option [ 154.647478][ T9881] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.698990][ T9881] EXT4-fs (loop5): 1 truncate cleaned up [ 155.340339][ T9894] __nla_validate_parse: 20 callbacks suppressed [ 155.340358][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2219'. [ 155.435297][ T9905] loop5: detected capacity change from 0 to 512 [ 155.473591][ T9905] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.570256][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 155.570270][ T29] audit: type=1400 audit(1745769604.043:7724): avc: denied { bind } for pid=9917 comm="syz.4.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.648589][ T9921] loop5: detected capacity change from 0 to 764 [ 155.687049][ T29] audit: type=1400 audit(1745769604.123:7725): avc: denied { mount } for pid=9920 comm="syz.5.2229" name="/" dev="ramfs" ino=29429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 155.699143][ T9921] IPv4: Oversized IP packet from 127.202.26.0 [ 155.710204][ T29] audit: type=1400 audit(1745769604.143:7726): avc: denied { mounton } for pid=9920 comm="syz.5.2229" path="/file1" dev="ramfs" ino=29430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 155.738348][ T29] audit: type=1400 audit(1745769604.153:7727): avc: denied { write } for pid=9917 comm="syz.4.2228" path="socket:[28554]" dev="sockfs" ino=28554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.763437][ T29] audit: type=1400 audit(1745769604.153:7728): avc: denied { nlmsg_read } for pid=9917 comm="syz.4.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.784409][ T29] audit: type=1400 audit(1745769604.153:7729): avc: denied { mount } for pid=9920 comm="syz.5.2229" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 155.840520][ T9928] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2231'. [ 155.850615][ T9928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2231'. [ 155.918678][ T29] audit: type=1400 audit(1745769604.363:7730): avc: denied { connect } for pid=9929 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.031746][ T9936] syzkaller0: entered promiscuous mode [ 156.037370][ T9936] syzkaller0: entered allmulticast mode [ 156.178422][ T9952] loop4: detected capacity change from 0 to 512 [ 156.196558][ T9952] loop4: detected capacity change from 0 to 512 [ 156.204010][ T9952] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.218057][ T9952] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.2242: invalid indirect mapped block 4294967295 (level 0) [ 156.232430][ T9952] EXT4-fs (loop4): Remounting filesystem read-only [ 156.241234][ T9952] EXT4-fs (loop4): 1 orphan inode deleted [ 156.246546][ T9955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9955 comm=syz.0.2243 [ 156.247018][ T9952] EXT4-fs (loop4): 1 truncate cleaned up [ 156.270126][ T29] audit: type=1326 audit(1745769604.743:7731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9951 comm="syz.4.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f1448e969 code=0x7ffc0000 [ 156.324096][ T29] audit: type=1400 audit(1745769604.773:7732): avc: denied { audit_write } for pid=9954 comm="syz.0.2243" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 156.345299][ T29] audit: type=1107 audit(1745769604.773:7733): pid=9954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 156.396112][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2246'. [ 156.494692][ T9975] loop5: detected capacity change from 0 to 512 [ 156.522197][ T9975] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.729485][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2255'. [ 156.887610][T10008] loop5: detected capacity change from 0 to 512 [ 156.930326][ T7063] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.943335][T10008] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.994338][ T7063] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.066640][ T7063] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.107396][T10015] batadv0 speed is unknown, defaulting to 1000 [ 157.135271][ T7063] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.148835][T10015] dummy0 speed is unknown, defaulting to 1000 [ 157.165667][T10042] netlink: 'syz.5.2272': attribute type 4 has an invalid length. [ 157.221247][T10050] loop5: detected capacity change from 0 to 512 [ 157.247255][T10050] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.301477][ T7063] team0: Port device geneve1 removed [ 157.349445][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2275'. [ 157.380512][T10065] loop5: detected capacity change from 0 to 1024 [ 157.387766][T10065] EXT4-fs: quotafile must be on filesystem root [ 157.404687][ T7540] ================================================================== [ 157.410255][ T7063] $Hÿ (unregistering): Released all slaves [ 157.412793][ T7540] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 157.412839][ T7540] [ 157.412846][ T7540] write to 0xffff888117368508 of 44 bytes by task 10066 on cpu 1: [ 157.412865][ T7540] tty_set_termios+0xc0/0x8c0 [ 157.412887][ T7540] set_termios+0x35b/0x4e0 [ 157.446536][ T7540] tty_mode_ioctl+0x379/0x5c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 157.451229][ T7540] n_tty_ioctl_helper+0x91/0x210 [ 157.456184][ T7540] n_tty_ioctl+0x101/0x200 [ 157.460617][ T7540] tty_ioctl+0x842/0xb80 [ 157.464887][ T7540] __se_sys_ioctl+0xcb/0x140 [ 157.469498][ T7540] __x64_sys_ioctl+0x43/0x50 [ 157.474111][ T7540] x64_sys_call+0x19a8/0x2fb0 [ 157.478814][ T7540] do_syscall_64+0xd0/0x1a0 [ 157.483345][ T7540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.489260][ T7540] [ 157.491616][ T7540] read to 0xffff888117368522 of 1 bytes by task 7540 on cpu 0: [ 157.499178][ T7540] n_tty_receive_char_flow_ctrl+0x59/0x1a0 [ 157.505047][ T7540] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 157.510614][ T7540] tty_port_default_lookahead_buf+0x8e/0xc0 [ 157.516523][ T7540] flush_to_ldisc+0x318/0x410 [ 157.521212][ T7540] process_scheduled_works+0x4cb/0x9d0 [ 157.526697][ T7540] worker_thread+0x582/0x770 [ 157.531317][ T7540] kthread+0x486/0x510 [ 157.535390][ T7540] ret_from_fork+0x4b/0x60 [ 157.539823][ T7540] ret_from_fork_asm+0x1a/0x30 [ 157.544598][ T7540] [ 157.546919][ T7540] value changed: 0x47 -> 0x81 [ 157.552028][ T7540] [ 157.554352][ T7540] Reported by Kernel Concurrency Sanitizer on: [ 157.560513][ T7540] CPU: 0 UID: 0 PID: 7540 Comm: kworker/u8:41 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 157.573192][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.583259][ T7540] Workqueue: events_unbound flush_to_ldisc [ 157.589093][ T7540] ================================================================== [ 157.683180][ T7063] tipc: Disabling bearer [ 157.689212][ T7063] tipc: Disabling bearer [ 157.694503][ T7063] tipc: Left network mode [ 157.785646][ T7063] hsr_slave_0: left promiscuous mode [ 157.795094][ T7063] veth1_macvtap: left promiscuous mode [ 157.800580][ T7063] veth0_macvtap: left promiscuous mode [ 157.853433][ T37] smc: removing ib device syz! [ 157.874165][ T3383] infiniband syz1: ib_query_port failed (-19) [ 158.185705][ T7063] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.234134][ T7063] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.284161][ T7063] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.334067][ T7063] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.397777][ T7063] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.425576][ T7063] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.495548][ T7063] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.565971][ T7063] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.615798][ T7063] bridge_slave_1: left allmulticast mode [ 158.621468][ T7063] bridge_slave_1: left promiscuous mode [ 158.627205][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.635163][ T7063] bridge_slave_0: left allmulticast mode [ 158.640873][ T7063] bridge_slave_0: left promiscuous mode [ 158.646647][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.655433][ T7063] bridge_slave_1: left allmulticast mode [ 158.661071][ T7063] bridge_slave_1: left promiscuous mode [ 158.666814][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.674624][ T7063] bridge_slave_0: left promiscuous mode [ 158.680238][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.916030][ T7063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.926532][ T7063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.936320][ T7063] bond0 (unregistering): Released all slaves [ 158.944736][ T7063] bond1 (unregistering): Released all slaves [ 158.953321][ T7063] bond2 (unregistering): Released all slaves [ 158.962155][ T7063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.972402][ T7063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.981858][ T7063] bond0 (unregistering): Released all slaves [ 158.990405][ T7063] bond0 (unregistering): Released all slaves [ 159.065322][ T7063] tipc: Left network mode [ 159.069853][ T7063] tipc: Left network mode [ 159.082106][ T7063] hsr_slave_0: left promiscuous mode [ 159.087650][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.096149][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.105411][ T7063] hsr_slave_0: left promiscuous mode [ 159.110962][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.118459][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.126786][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.134270][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.145013][ T7063] veth1_macvtap: left promiscuous mode [ 159.150489][ T7063] veth0_macvtap: left promiscuous mode [ 159.156034][ T7063] veth1_vlan: left promiscuous mode [ 159.161937][ T7063] veth1_macvtap: left promiscuous mode [ 159.167454][ T7063] veth0_macvtap: left promiscuous mode [ 159.173008][ T7063] veth1_vlan: left promiscuous mode [ 159.178281][ T7063] veth0_vlan: left promiscuous mode [ 159.236576][ T7063] pimreg2 (unregistering): left allmulticast mode [ 159.310458][ T7063] team0 (unregistering): Port device team_slave_1 removed [ 159.320926][ T7063] team0 (unregistering): Port device team_slave_0 removed [ 159.987308][ T7063] tipc: Resetting bearer [ 160.014025][ T7063] dvmrp0 (unregistering): left allmulticast mode [ 160.066247][ T7063] tipc: Disabling bearer [ 160.144264][ T7063] $Hÿ (unregistering): Released all slaves [ 160.152519][ T7063] bond1 (unregistering): Released all slaves [ 160.160583][ T7063] bond2 (unregistering): Released all slaves [ 160.214624][ T7063] tipc: Disabling bearer [ 160.219864][ T7063] tipc: Left network mode [ 160.226889][ T7063] hsr_slave_0: left promiscuous mode [ 160.276076][ T3383] dummy0 speed is unknown, defaulting to 1000 [ 160.282167][ T3383] infiniband syz2: ib_query_port failed (-19) [ 160.527001][ T7063] IPVS: stop unused estimator thread 0...