last executing test programs: 2.55137254s ago: executing program 2 (id=324): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2c5043, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00bd700005dbdf25b53ff145db5004000000080006000500000008eb03000200000004000180af41d13b442956d2a406ddfd008002063b3019778c12d2563386fcfe0aad33f8b33c38c64f3d1ece26d76aa72589d04249d15767b40000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8810) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000014c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x1000, 0x0, 0x7, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "44cb6d37c6818e519c60ca92b05c8ad4ae74ea79fdb58e2b7f29fa51c12f5cbb", "529ce0c19fb809804c2ff3c5412218a7d847fbc93cfef70c00506d947ea54e7f53d1fdc46c7f32f5461c69dbb12ae334", "93789889a9e2835b672961b74d925e86afc527fa482ea332ce27b8a5", {"2e5da89a0ace8edabc766b388285d39f", "375c5bef000000000d4600"}}}}}}}, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000040), 0x4) 1.891137782s ago: executing program 2 (id=332): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.384730043s ago: executing program 2 (id=339): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001280)="57b985cf0100000074acefa4bf596b1a2c0a696f367f9b43b9f44922bbc74f25e2ce0f3a34979e51d6526813e3627b941b67d30dd0ac97df9023657420c9eb2dd2b39db50cd7157708721991f24a5a6a63776714a663a05fc10ef07501ca0852b9fc3647eb5ce173a6ab4b408fd41739320637fae73a72ff76e497eb397dbc90eadc380ee3ed45731693450bfdb78b20f936812923bfa959d7dcadcc5a81402d9ccdf92b3d19e4689f8eb1240121d9a844d40e09ad0fbd419b7274ead52952df15947d93ad227227c858d799c1299dfb1f5df29b88262de67b60", 0xda}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x4a0240, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000002c0), 0x12) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1.384344433s ago: executing program 3 (id=340): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r2, 0x0, 0x0, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 1.382570062s ago: executing program 2 (id=342): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000280)=""/20, 0x14, 0x0, &(0x7f00000002c0)=""/7, 0x7}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0xa14b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r4, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) socket(0x1d, 0x2, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0x21800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r5, 0x0, &(0x7f0000000380)) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x2}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.232852785s ago: executing program 3 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r7}, 0x10) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000040)=@id, 0x10) shutdown(r8, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) sendmsg$NFT_MSG_GETFLOWTABLE(r10, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)={0x20, 0x17, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x8044) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x1}, @restrict={0x3, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x61, 0x2e]}}, &(0x7f0000000300)=""/95, 0x35, 0x5f, 0x1, 0xab13, 0x10000, @value=r11}, 0x28) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000700)={'ipvlan0\x00'}) 1.132228247s ago: executing program 3 (id=349): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1.088853988s ago: executing program 3 (id=350): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5953fdfffffffddbdf256b0000"], 0x28}}, 0x50) 1.069874358s ago: executing program 3 (id=351): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 921.077582ms ago: executing program 2 (id=354): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32], 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x0, 0xb, 0x0, @mcast2, @mcast1, 0x40, 0x700, 0x4, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x7800, 0x7800, 0xd, 0x2, {{0x1d, 0x4, 0x1, 0x3c, 0x74, 0x65, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xbf, [@dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010101, @loopback]}, @timestamp={0x44, 0x24, 0xcb, 0x0, 0xb, [0x6, 0x4, 0x10, 0xe, 0x5, 0x800, 0x3ff, 0x401]}, @lsrr={0x83, 0xf, 0xe0, [@remote, @multicast2, @remote]}, @noop, @timestamp={0x44, 0x8, 0xd, 0x0, 0x0, [0x9]}, @generic={0x44, 0x5, "914a47"}, @generic={0x44, 0xb, "5e0d53d9b46b80f25c"}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x4, r4, 0x30, r2}, 0x10) 708.002706ms ago: executing program 3 (id=355): prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='+\\{]\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be48381"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 679.167546ms ago: executing program 2 (id=356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r1, 0xffffffffffffffff, 0x33, 0x0, @val=@netfilter={0x0, 0x0, 0x2, 0x1}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000100)=@ax25={{0x3, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e1200002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x179}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) personality(0xfe47fef9f5ff7379) syz_io_uring_setup(0x77f8, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x3a5}, &(0x7f0000000300), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x4c894) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r6 = socket(0x1e, 0x4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) setitimer(0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@errors_continue}, {@data_err_abort}, {@nomblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks}, {@dioread_nolock}]}, 0x21, 0x553, &(0x7f0000000a40)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r8, 0x0, 0x5, 0x5) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r9 = signalfd(0xffffffffffffffff, &(0x7f0000000640)={[0x7fff]}, 0x8) ioctl$FS_IOC_MEASURE_VERITY(r9, 0xc0046686, &(0x7f0000000680)={0x0, 0xb3, "9c861e9d3f2e9ba2baf23a7d0509fec2713422886819b8025c9e02d1e0c9b6a4e5ef6237de6d6b24bfef8a3d8b05f3ac9f80459c435b68be685dd5098b3ca73c70b21d4f58efe994dde79a5eec955efaae4bd1b06e2aa368d7262bcb111cf2a9c66e5e77ae87d175ab66e65ce448757474542e8744bcc9dfb5aadff5fc3a1e650e70652fb2d94d1320ed77f749ca2435f7835fb5175529bffd244e46aaf02425697021d22d04f5b02d48564cf56a9840ed5895"}) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000004010) syz_open_dev$evdev(&(0x7f00000000c0), 0x8, 0x20101) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 407.493702ms ago: executing program 1 (id=363): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000200)=0x6e) connect$unix(r0, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) setrlimit(0x7, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@int=0xb, 0x4) r4 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000180)}, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000", 0x17}], 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 406.361912ms ago: executing program 4 (id=364): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter\x00') prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 405.356532ms ago: executing program 0 (id=365): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01c643c05b88850aec9365544d33aba8023b78cfd5479d0000"], 0x14}}, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000001280)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x8}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create(0x3ff) (async) r7 = epoll_create(0x3ff) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x0, 0xc, 0x303, 0x6, 0x0, 0x9, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "7f1d6c286a2b9149", "9dc74145b1e162b0d39ae51392fa9c3c9642a70a30ec15c64a4fd1c331b57a1e", "7e8199f5", "32baa44f8513fee1"}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r12}, 0x10) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) pwrite64(r3, &(0x7f0000000880)="a7", 0x1, 0x2e63) (async) pwrite64(r3, &(0x7f0000000880)="a7", 0x1, 0x2e63) 356.492303ms ago: executing program 4 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x6, 0x6, 0xf, 0xe}, {0x0, 0x0, 0x9, 0x44}, {0x1000, 0xc, 0x81, 0x1}, {0x2, 0x9, 0x2, 0xfffffff5}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x200000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 319.451823ms ago: executing program 1 (id=367): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32], 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x0, 0xb, 0x0, @mcast2, @mcast1, 0x40, 0x700, 0x4, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x7800, 0x7800, 0xd, 0x2, {{0x1d, 0x4, 0x1, 0x3c, 0x74, 0x65, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xbf, [@dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010101, @loopback]}, @timestamp={0x44, 0x24, 0xcb, 0x0, 0xb, [0x6, 0x4, 0x10, 0xe, 0x5, 0x800, 0x3ff, 0x401]}, @lsrr={0x83, 0xf, 0xe0, [@remote, @multicast2, @remote]}, @noop, @timestamp={0x44, 0x8, 0xd, 0x0, 0x0, [0x9]}, @generic={0x44, 0x5, "914a47"}, @generic={0x44, 0xb, "5e0d53d9b46b80f25c"}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}}, 0x24}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x4, r5, 0x30, r3}, 0x10) 289.996814ms ago: executing program 1 (id=368): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5953fdfffffffddbdf25"], 0x28}}, 0x50) 263.080504ms ago: executing program 0 (id=369): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x4c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x4c}}, 0x0) 262.466365ms ago: executing program 1 (id=370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r3, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000004c0)=@md0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 249.055205ms ago: executing program 4 (id=371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101900, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x365242, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) (async, rerun: 64) r6 = socket(0x28, 0x1, 0xfdfffffb) (rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r9 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0xf6c447fee59241f0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800200029bd0300fedbdf2502100007fd02c805002c000008000400", @ANYRES8=r5, @ANYBLOB="d3f2b758408fbffa895c40c5c0a1a220e3e3fd6b72b829059543285c58fae125ade746e68b39678a01e25e0e982bb10d32611af1d6ed5ce767d994293c771f91dd753e34912d5befb9f8a6b25bdd11618677ed", @ANYRES32=0x0, @ANYRES8=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x34040000) (async, rerun: 32) sendto$packet(r6, &(0x7f0000000180)="0b0312531d00538f0200475400f680a32ba00000bd90ca6dbf3e", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r10}, 0x14) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00', 0x9421}) socket$nl_sock_diag(0x10, 0x3, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002900000000000000010000000800", @ANYRES32=r13], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) (async, rerun: 32) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000200)={0x123, 0x9, 0x0, 0x80, 0x6, 0x3ff}) (rerun: 32) 168.973676ms ago: executing program 4 (id=372): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5953fdfffffffddbdf256b0000"], 0x28}}, 0x50) 168.492717ms ago: executing program 0 (id=373): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001280)="57b985cf0100000074acefa4bf596b1a2c0a696f367f9b43b9f44922bbc74f25e2ce0f3a34979e51d6526813e3627b941b67d30dd0ac97df9023657420c9eb2dd2b39db50cd7157708721991f24a5a6a63776714a663a05fc10ef07501ca0852b9fc3647eb5ce173a6ab4b408fd41739320637fae73a72ff76e497eb397dbc90eadc380ee3ed45731693450bfdb78b20f936812923bfa959d7dcadcc5a81402d9ccdf92b3d19e4689f8eb1240121d9a844d40e09ad0fbd419b7274ead52952df15947d93ad227227c858d799c1299dfb1f5df29b88262de67b60", 0xda}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x4a0240, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000002c0), 0x12) socket$kcm(0x2, 0xa, 0x2) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 152.054617ms ago: executing program 4 (id=374): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2c5043, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="00bd700005dbdf25b53ff145db5004000000080006000500000008eb03000200000004000180af41d13b442956d2a406ddfd008002063b3019778c12d2563386fcfe0aad33f8b33c38c64f3d1ece26d76aa72589d04249d15767b40000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8810) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f00000014c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x1000, 0x0, 0x7, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "44cb6d37c6818e519c60ca92b05c8ad4ae74ea79fdb58e2b7f29fa51c12f5cbb", "529ce0c19fb809804c2ff3c5412218a7d847fbc93cfef70c00506d947ea54e7f53d1fdc46c7f32f5461c69dbb12ae334", "93789889a9e2835b672961b74d925e86afc527fa482ea332ce27b8a5", {"2e5da89a0ace8edabc766b388285d39f", "375c5bef000000000d4600"}}}}}}}, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040), 0x4) 112.683947ms ago: executing program 0 (id=375): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000009c0)=[{0x0}], 0x1, 0x0, 0x0, 0x804c0c0}, 0x0) 46.116019ms ago: executing program 0 (id=376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 45.808949ms ago: executing program 1 (id=377): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter\x00') prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 26.142949ms ago: executing program 0 (id=378): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32], 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x40, 0x0, 0xb, 0x0, @mcast2, @mcast1, 0x40, 0x700, 0x4, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x7800, 0x7800, 0xd, 0x2, {{0x1d, 0x4, 0x1, 0x3c, 0x74, 0x65, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @remote, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xbf, [@dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010101, @loopback]}, @timestamp={0x44, 0x24, 0xcb, 0x0, 0xb, [0x6, 0x4, 0x10, 0xe, 0x5, 0x800, 0x3ff, 0x401]}, @lsrr={0x83, 0xf, 0xe0, [@remote, @multicast2, @remote]}, @noop, @timestamp={0x44, 0x8, 0xd, 0x0, 0x0, [0x9]}, @generic={0x44, 0x5, "914a47"}, @generic={0x44, 0xb, "5e0d53d9b46b80f25c"}]}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}}, 0x24}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x4, r5, 0x30, r3}, 0x10) 11.307739ms ago: executing program 4 (id=379): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4694}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[], 0x20) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000000) 0s ago: executing program 1 (id=380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 35.399606][ T29] audit: type=1400 audit(1759538666.839:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.422927][ T29] audit: type=1400 audit(1759538666.869:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.423962][ T3289] cgroup: Unknown subsys name 'net' [ 35.450898][ T29] audit: type=1400 audit(1759538666.889:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.592066][ T3289] cgroup: Unknown subsys name 'cpuset' [ 35.598334][ T3289] cgroup: Unknown subsys name 'rlimit' [ 35.789837][ T29] audit: type=1400 audit(1759538667.229:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.813356][ T29] audit: type=1400 audit(1759538667.229:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.833812][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.842449][ T29] audit: type=1400 audit(1759538667.239:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.846728][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.862819][ T29] audit: type=1400 audit(1759538667.239:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.862855][ T29] audit: type=1400 audit(1759538667.249:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.916912][ T29] audit: type=1400 audit(1759538667.249:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.940700][ T29] audit: type=1400 audit(1759538667.279:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.827861][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 37.912347][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.919513][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.926892][ T3299] bridge_slave_0: entered allmulticast mode [ 37.933562][ T3299] bridge_slave_0: entered promiscuous mode [ 37.940122][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 37.962000][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.969158][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.976471][ T3299] bridge_slave_1: entered allmulticast mode [ 37.983227][ T3299] bridge_slave_1: entered promiscuous mode [ 38.029628][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.044101][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.060184][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 38.126886][ T3299] team0: Port device team_slave_0 added [ 38.135574][ T3299] team0: Port device team_slave_1 added [ 38.141674][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.148826][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.156310][ T3300] bridge_slave_0: entered allmulticast mode [ 38.162762][ T3300] bridge_slave_0: entered promiscuous mode [ 38.179279][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.186423][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.193647][ T3300] bridge_slave_1: entered allmulticast mode [ 38.200162][ T3300] bridge_slave_1: entered promiscuous mode [ 38.230858][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 38.244982][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 38.253945][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.261027][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.268318][ T3308] bridge_slave_0: entered allmulticast mode [ 38.274801][ T3308] bridge_slave_0: entered promiscuous mode [ 38.281920][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.288877][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.314832][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.329548][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.346277][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.353381][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.360576][ T3308] bridge_slave_1: entered allmulticast mode [ 38.367255][ T3308] bridge_slave_1: entered promiscuous mode [ 38.373638][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.380814][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.406921][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.432227][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.453893][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.481064][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.501654][ T3300] team0: Port device team_slave_0 added [ 38.525215][ T3300] team0: Port device team_slave_1 added [ 38.532915][ T3299] hsr_slave_0: entered promiscuous mode [ 38.538992][ T3299] hsr_slave_1: entered promiscuous mode [ 38.567686][ T3308] team0: Port device team_slave_0 added [ 38.578587][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.585717][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.592997][ T3304] bridge_slave_0: entered allmulticast mode [ 38.599404][ T3304] bridge_slave_0: entered promiscuous mode [ 38.606496][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.613768][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.620910][ T3304] bridge_slave_1: entered allmulticast mode [ 38.627362][ T3304] bridge_slave_1: entered promiscuous mode [ 38.640447][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.647488][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.673572][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.685178][ T3308] team0: Port device team_slave_1 added [ 38.691141][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.698194][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.724218][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.757909][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.765034][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.772226][ T3305] bridge_slave_0: entered allmulticast mode [ 38.778681][ T3305] bridge_slave_0: entered promiscuous mode [ 38.785615][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.792886][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.800023][ T3305] bridge_slave_1: entered allmulticast mode [ 38.806465][ T3305] bridge_slave_1: entered promiscuous mode [ 38.814109][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.845770][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.860786][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.867899][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.894039][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.905483][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.912496][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.938577][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.965703][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.983224][ T3304] team0: Port device team_slave_0 added [ 38.996748][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.012753][ T3304] team0: Port device team_slave_1 added [ 39.023903][ T3300] hsr_slave_0: entered promiscuous mode [ 39.029879][ T3300] hsr_slave_1: entered promiscuous mode [ 39.036025][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 39.041905][ T3300] Cannot create hsr debugfs directory [ 39.073888][ T3305] team0: Port device team_slave_0 added [ 39.101535][ T3305] team0: Port device team_slave_1 added [ 39.109592][ T3308] hsr_slave_0: entered promiscuous mode [ 39.115738][ T3308] hsr_slave_1: entered promiscuous mode [ 39.121656][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 39.127386][ T3308] Cannot create hsr debugfs directory [ 39.133461][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.140416][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.166525][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.203642][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.210635][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.236641][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.253839][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.260801][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.286830][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.300496][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.307534][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.333472][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.382478][ T3304] hsr_slave_0: entered promiscuous mode [ 39.388651][ T3304] hsr_slave_1: entered promiscuous mode [ 39.395095][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 39.400854][ T3304] Cannot create hsr debugfs directory [ 39.430659][ T3305] hsr_slave_0: entered promiscuous mode [ 39.436809][ T3305] hsr_slave_1: entered promiscuous mode [ 39.442783][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 39.448516][ T3305] Cannot create hsr debugfs directory [ 39.523237][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.546746][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.566085][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.586389][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.620906][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.631525][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.643330][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.657220][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.675018][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.688175][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.700379][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.710230][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.747559][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.763158][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.787161][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.797662][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.812886][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.841042][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.853848][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.863283][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.883277][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.894687][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.910277][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.920831][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.934320][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.941572][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.965444][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.975998][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.983146][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.994388][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.010832][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.021334][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.038156][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.045260][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.055108][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.062222][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.096765][ T1700] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.103979][ T1700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.117323][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.124712][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.188176][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.199895][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.211198][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.225259][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.241466][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.248864][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.262030][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.270260][ T1700] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.277392][ T1700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.295771][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.304961][ T1700] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.312849][ T1700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.332843][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.357980][ T1700] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.365126][ T1700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.486657][ T3299] veth0_vlan: entered promiscuous mode [ 40.503420][ T3299] veth1_vlan: entered promiscuous mode [ 40.515738][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.537017][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.560461][ T3300] veth0_vlan: entered promiscuous mode [ 40.570889][ T3299] veth0_macvtap: entered promiscuous mode [ 40.604664][ T3300] veth1_vlan: entered promiscuous mode [ 40.612288][ T3299] veth1_macvtap: entered promiscuous mode [ 40.625933][ T3300] veth0_macvtap: entered promiscuous mode [ 40.653027][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.663732][ T3300] veth1_macvtap: entered promiscuous mode [ 40.677269][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.689975][ T3308] veth0_vlan: entered promiscuous mode [ 40.716782][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.725654][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.741075][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.750438][ T3304] veth0_vlan: entered promiscuous mode [ 40.760652][ T3308] veth1_vlan: entered promiscuous mode [ 40.768899][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.777888][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.792449][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.801203][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.812946][ T3304] veth1_vlan: entered promiscuous mode [ 40.822257][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.834937][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.852042][ T3305] veth0_vlan: entered promiscuous mode [ 40.860486][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 40.860501][ T29] audit: type=1400 audit(1759538672.299:81): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.8efhu2/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.860941][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.872096][ T29] audit: type=1400 audit(1759538672.309:82): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.921861][ T29] audit: type=1400 audit(1759538672.309:83): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.8efhu2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.947197][ T29] audit: type=1400 audit(1759538672.309:84): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.969657][ T29] audit: type=1400 audit(1759538672.309:85): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.8efhu2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.996255][ T29] audit: type=1400 audit(1759538672.309:86): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.8efhu2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 41.023773][ T29] audit: type=1400 audit(1759538672.309:87): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.044378][ T29] audit: type=1400 audit(1759538672.489:88): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.067464][ T29] audit: type=1400 audit(1759538672.489:89): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=3995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 41.070548][ T3305] veth1_vlan: entered promiscuous mode [ 41.102296][ T3304] veth0_macvtap: entered promiscuous mode [ 41.110113][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.125929][ T3305] veth0_macvtap: entered promiscuous mode [ 41.139009][ T3304] veth1_macvtap: entered promiscuous mode [ 41.146427][ T3305] veth1_macvtap: entered promiscuous mode [ 41.147566][ T29] audit: type=1400 audit(1759538672.589:90): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.161753][ T3308] veth0_macvtap: entered promiscuous mode [ 41.196889][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.214218][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.228914][ T3308] veth1_macvtap: entered promiscuous mode [ 41.235382][ T3472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 41.249157][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.257307][ T3471] 9pnet: Could not find request transport: f0xffffffffffffffff [ 41.258063][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.277018][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.286766][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.302413][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.310431][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.350255][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.390329][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.420118][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.474335][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.504868][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.570493][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.602608][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.675191][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.727551][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.743725][ T3491] loop2: detected capacity change from 0 to 8192 [ 41.757814][ T3493] loop0: detected capacity change from 0 to 8192 [ 41.789191][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.835464][ T3496] loop4: detected capacity change from 0 to 8192 [ 41.975833][ T3498] 9pnet_fd: Insufficient options for proto=fd [ 42.458875][ T3514] loop1: detected capacity change from 0 to 2048 [ 42.575912][ T3514] Alternate GPT is invalid, using primary GPT. [ 42.582260][ T3514] loop1: p1 p2 p3 [ 42.614670][ T3503] loop0: detected capacity change from 0 to 164 [ 42.792773][ T3505] loop4: detected capacity change from 0 to 164 [ 42.875145][ T3526] sctp: [Deprecated]: syz.0.18 (pid 3526) Use of int in max_burst socket option deprecated. [ 42.875145][ T3526] Use struct sctp_assoc_value instead [ 42.916202][ T3526] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 42.939145][ T3526] team0: Port device dummy0 added [ 43.032459][ T3526] syz.0.18 (3526) used greatest stack depth: 10640 bytes left [ 43.093403][ T3532] loop2: detected capacity change from 0 to 164 [ 43.127679][ T3535] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 43.374123][ T3541] sctp: [Deprecated]: syz.1.24 (pid 3541) Use of int in max_burst socket option deprecated. [ 43.374123][ T3541] Use struct sctp_assoc_value instead [ 43.411898][ T3541] netlink: 'syz.1.24': attribute type 10 has an invalid length. [ 43.423970][ T3541] team0: Port device dummy0 added [ 43.463969][ T3542] loop4: detected capacity change from 0 to 164 [ 43.566739][ T3545] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET) [ 43.622780][ T3545] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 43.634798][ T3545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.645348][ T3545] team0: Port device bond0 added [ 43.754829][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 43.795915][ T3545] team0 (unregistering): Port device team_slave_0 removed [ 43.824117][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 43.853564][ T3545] team0 (unregistering): Port device dummy0 removed [ 43.874496][ T3545] team0 (unregistering): Port device bond0 removed [ 43.902992][ T3554] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 44.034757][ T3559] 9pnet: Could not find request transport: f0xffffffffffffffff [ 44.164307][ T3563] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 44.216999][ T3555] mmap: syz.2.27 (3555) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.714260][ T3573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'. [ 44.950026][ T3576] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 45.023984][ T3582] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 45.033834][ T3577] loop1: detected capacity change from 0 to 8192 [ 45.136847][ T3586] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 45.165489][ T3572] loop0: detected capacity change from 0 to 164 [ 45.221766][ T3592] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 45.256537][ T3594] loop3: detected capacity change from 0 to 2048 [ 45.270794][ T3596] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 45.318508][ T3600] sctp: [Deprecated]: syz.4.47 (pid 3600) Use of int in max_burst socket option deprecated. [ 45.318508][ T3600] Use struct sctp_assoc_value instead [ 45.335585][ T3594] Alternate GPT is invalid, using primary GPT. [ 45.342012][ T3594] loop3: p1 p2 p3 [ 45.356863][ T3600] netlink: 'syz.4.47': attribute type 10 has an invalid length. [ 45.381374][ T3600] team0: Port device dummy0 added [ 45.391235][ T3602] loop1: detected capacity change from 0 to 2048 [ 45.418036][ T3604] loop2: detected capacity change from 0 to 8192 [ 45.434284][ T3607] process 'syz.0.50' launched './file1' with NULL argv: empty string added [ 45.449995][ T3607] loop0: detected capacity change from 0 to 1024 [ 45.466918][ T3602] Alternate GPT is invalid, using primary GPT. [ 45.473334][ T3602] loop1: p1 p2 p3 [ 45.488481][ T3607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.503344][ T3607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.527821][ T3616] sctp: [Deprecated]: syz.2.53 (pid 3616) Use of int in max_burst socket option deprecated. [ 45.527821][ T3616] Use struct sctp_assoc_value instead [ 45.552601][ T3616] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 45.580861][ T3622] loop0: detected capacity change from 0 to 2048 [ 45.589269][ T3616] team0: Port device dummy0 added [ 45.648245][ T3633] loop4: detected capacity change from 0 to 128 [ 45.655067][ T3622] Alternate GPT is invalid, using primary GPT. [ 45.661563][ T3622] loop0: p1 p2 p3 [ 45.675956][ T3633] 9pnet_fd: Insufficient options for proto=fd [ 45.797040][ T3641] loop2: detected capacity change from 0 to 128 [ 45.806511][ T3641] 9pnet_fd: Insufficient options for proto=fd [ 46.146154][ T3645] tipc: Started in network mode [ 46.151204][ T3645] tipc: Node identity d21ea9879c4f, cluster identity 4711 [ 46.158765][ T3645] tipc: Enabled bearer , priority 0 [ 46.167664][ T3645] tipc: Disabling bearer [ 46.217177][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 46.217195][ T29] audit: type=1400 audit(1759538677.659:274): avc: denied { create } for pid=3644 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.243105][ T3646] loop3: detected capacity change from 0 to 256 [ 46.243324][ T29] audit: type=1400 audit(1759538677.659:275): avc: denied { create } for pid=3644 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.270015][ T3646] vfat: Bad value for 'nonumtail' [ 46.316851][ T29] audit: type=1326 audit(1759538677.759:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19eec9 code=0x7ffc0000 [ 46.340372][ T29] audit: type=1326 audit(1759538677.759:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19eec9 code=0x7ffc0000 [ 46.365753][ T29] audit: type=1326 audit(1759538677.809:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f8a0e19eec9 code=0x7ffc0000 [ 46.389170][ T29] audit: type=1326 audit(1759538677.809:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19eec9 code=0x7ffc0000 [ 46.412938][ T29] audit: type=1326 audit(1759538677.809:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19eec9 code=0x7ffc0000 [ 46.437279][ T29] audit: type=1326 audit(1759538677.809:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f8a0e19eec9 code=0x7ffc0000 [ 46.460720][ T29] audit: type=1326 audit(1759538677.809:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0e19eec9 code=0x7ffc0000 [ 46.484162][ T29] audit: type=1326 audit(1759538677.809:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f8a0e19eec9 code=0x7ffc0000 [ 46.524006][ T3652] loop4: detected capacity change from 0 to 1024 [ 46.543354][ T3652] ======================================================= [ 46.543354][ T3652] WARNING: The mand mount option has been deprecated and [ 46.543354][ T3652] and is ignored by this kernel. Remove the mand [ 46.543354][ T3652] option from the mount to silence this warning. [ 46.543354][ T3652] ======================================================= [ 46.571236][ T3654] loop1: detected capacity change from 0 to 8192 [ 46.591423][ T3652] EXT4-fs: Ignoring removed orlov option [ 46.622363][ T3652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.634914][ T3656] loop2: detected capacity change from 0 to 2048 [ 46.641988][ T3652] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.659943][ T3658] tipc: Started in network mode [ 46.664880][ T3658] tipc: Node identity fa766269d857, cluster identity 4711 [ 46.672081][ T3658] tipc: Enabled bearer , priority 0 [ 46.683302][ T3658] tipc: Disabling bearer [ 46.694008][ T3656] Alternate GPT is invalid, using primary GPT. [ 46.700378][ T3656] loop2: p1 p2 p3 [ 46.712291][ T3662] loop1: detected capacity change from 0 to 8192 [ 46.738716][ T3663] loop0: detected capacity change from 0 to 256 [ 46.745518][ T3663] vfat: Bad value for 'nonumtail' [ 46.766654][ T3665] 9pnet_fd: Insufficient options for proto=fd [ 46.898958][ T3652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.908726][ T3652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.040267][ T3672] loop1: detected capacity change from 0 to 2048 [ 47.092071][ T3672] Alternate GPT is invalid, using primary GPT. [ 47.098388][ T3672] loop1: p1 p2 p3 [ 47.218708][ T3675] tipc: Enabled bearer , priority 0 [ 47.227725][ T3675] tipc: Disabling bearer [ 47.286107][ T3675] loop0: detected capacity change from 0 to 256 [ 47.293456][ T3675] vfat: Bad value for 'nonumtail' [ 47.464137][ T3678] loop2: detected capacity change from 0 to 1024 [ 47.470930][ T3678] EXT4-fs: Ignoring removed bh option [ 47.477095][ T3678] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 47.494074][ T3678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.516715][ T3680] tipc: Enabled bearer , priority 0 [ 47.525164][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.525415][ T3680] tipc: Disabling bearer [ 47.563380][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.588125][ T3685] loop3: detected capacity change from 0 to 256 [ 47.602567][ T3685] vfat: Bad value for 'nonumtail' [ 47.629617][ T3684] loop2: detected capacity change from 0 to 8192 [ 47.639398][ T3689] tipc: Enabled bearer , priority 0 [ 47.660130][ T3689] tipc: Disabling bearer [ 47.703593][ T3690] loop0: detected capacity change from 0 to 256 [ 47.721152][ T3690] vfat: Bad value for 'nonumtail' [ 47.811379][ T3694] loop2: detected capacity change from 0 to 1024 [ 47.835973][ T3694] EXT4-fs: Ignoring removed orlov option [ 47.882573][ T3694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.901053][ T3694] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.945336][ T3701] loop1: detected capacity change from 0 to 2048 [ 47.983916][ T3701] Alternate GPT is invalid, using primary GPT. [ 47.990385][ T3701] loop1: p1 p2 p3 [ 48.045480][ T3705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.79'. [ 48.127782][ T3694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.137287][ T3694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.162779][ T3716] loop0: detected capacity change from 0 to 1024 [ 48.178135][ T3716] EXT4-fs: Ignoring removed orlov option [ 48.200406][ T3721] loop3: detected capacity change from 0 to 2048 [ 48.212608][ T3716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.225003][ T3716] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.242742][ T3721] Alternate GPT is invalid, using primary GPT. [ 48.249073][ T3721] loop3: p1 p2 p3 [ 48.318338][ T3719] loop4: detected capacity change from 0 to 164 [ 48.423375][ T3727] loop4: detected capacity change from 0 to 8192 [ 48.440588][ T3716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.449192][ T3716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.627817][ T3733] loop4: detected capacity change from 0 to 128 [ 48.636225][ T3733] 9pnet_fd: Insufficient options for proto=fd [ 48.694921][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.783052][ T3743] loop2: detected capacity change from 0 to 256 [ 48.972837][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.982225][ T3753] loop1: detected capacity change from 0 to 1024 [ 48.989276][ T3753] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 49.000142][ T3753] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 49.008483][ T3753] EXT4-fs (loop1): failed to initialize system zone (-117) [ 49.008698][ T3756] loop0: detected capacity change from 0 to 256 [ 49.016446][ T3753] EXT4-fs (loop1): mount failed [ 49.036404][ T3753] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.092379][ T3759] loop3: detected capacity change from 0 to 256 [ 49.377912][ T3762] tipc: Started in network mode [ 49.382944][ T3762] tipc: Node identity 221467e33f12, cluster identity 4711 [ 49.390278][ T3762] tipc: Enabled bearer , priority 0 [ 49.398490][ T3762] tipc: Disabling bearer [ 49.438454][ T3762] loop4: detected capacity change from 0 to 256 [ 49.445289][ T3762] vfat: Bad value for 'nonumtail' [ 49.636506][ T3765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 49.662162][ T3767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 49.693975][ T3769] tipc: Started in network mode [ 49.698997][ T3769] tipc: Node identity 6a5b06c97ded, cluster identity 4711 [ 49.706346][ T3769] tipc: Enabled bearer , priority 0 [ 49.714443][ T3769] tipc: Disabling bearer [ 49.767999][ T3769] loop2: detected capacity change from 0 to 256 [ 49.777815][ T3769] vfat: Bad value for 'nonumtail' [ 49.814302][ T3774] loop4: detected capacity change from 0 to 2048 [ 49.872419][ T3774] Alternate GPT is invalid, using primary GPT. [ 49.878876][ T3774] loop4: p1 p2 p3 [ 49.937185][ T3777] loop1: detected capacity change from 0 to 8192 [ 49.951036][ T3785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 50.118458][ T3797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.117'. [ 50.179415][ T3793] loop1: detected capacity change from 0 to 8192 [ 50.193524][ T3805] loop3: detected capacity change from 0 to 256 [ 50.205131][ T3806] loop0: detected capacity change from 0 to 1024 [ 50.212935][ T3806] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 50.227121][ T3806] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 50.235415][ T3806] EXT4-fs (loop0): failed to initialize system zone (-117) [ 50.243207][ T3806] EXT4-fs (loop0): mount failed [ 50.705114][ T3812] loop4: detected capacity change from 0 to 1024 [ 50.706889][ T3814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.123'. [ 50.712537][ T3812] EXT4-fs: Ignoring removed orlov option [ 50.741179][ T3816] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 50.748730][ T3812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.748809][ T3812] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.792527][ T3821] 9pnet_fd: Insufficient options for proto=fd [ 50.927460][ T3824] tipc: Enabled bearer , priority 0 [ 50.928554][ T3826] 9pnet_fd: Insufficient options for proto=fd [ 50.942570][ T3824] tipc: Disabling bearer [ 50.985059][ T3812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.000286][ T3812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.023327][ T3824] loop2: detected capacity change from 0 to 256 [ 51.040250][ T3824] vfat: Bad value for 'nonumtail' [ 51.111764][ T3833] loop0: detected capacity change from 0 to 512 [ 51.127107][ T3833] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.140596][ T3833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.182144][ T3833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.190670][ T3833] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.212803][ T3833] EXT4-fs (loop0): failed to initialize system zone (-117) [ 51.224594][ T3833] EXT4-fs (loop0): mount failed [ 51.245483][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 51.245501][ T29] audit: type=1400 audit(1759538682.689:587): avc: denied { create } for pid=3832 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.304805][ T29] audit: type=1400 audit(1759538682.729:588): avc: denied { connect } for pid=3832 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.324777][ T29] audit: type=1326 audit(1759538682.749:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1166eeec9 code=0x7ffc0000 [ 51.348180][ T29] audit: type=1326 audit(1759538682.749:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1166eeec9 code=0x7ffc0000 [ 51.371536][ T29] audit: type=1326 audit(1759538682.749:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1166eeec9 code=0x7ffc0000 [ 51.395162][ T29] audit: type=1326 audit(1759538682.749:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1166eeec9 code=0x7ffc0000 [ 51.418715][ T29] audit: type=1326 audit(1759538682.749:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1166eeec9 code=0x7ffc0000 [ 51.442145][ T29] audit: type=1326 audit(1759538682.749:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1166eeec9 code=0x7ffc0000 [ 51.465381][ T29] audit: type=1326 audit(1759538682.749:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1166eeec9 code=0x7ffc0000 [ 51.488673][ T29] audit: type=1326 audit(1759538682.749:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1166eeec9 code=0x7ffc0000 [ 51.489109][ T3833] loop0: detected capacity change from 0 to 2048 [ 51.582594][ T3833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.606602][ T3842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.130'. [ 51.670131][ T3305] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 51.701714][ T3305] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 51.729725][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.760994][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.820128][ C1] hrtimer: interrupt took 68148 ns [ 51.868601][ T3867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.143'. [ 51.893030][ T3870] loop4: detected capacity change from 0 to 128 [ 51.895562][ T3850] vhci_hcd: invalid port number 253 [ 51.903660][ T3870] 9pnet_fd: Insufficient options for proto=fd [ 51.904826][ T3850] vhci_hcd: default hub control req: 2013 v0305 i00fd l0 [ 51.939662][ T3871] netlink: 'syz.0.142': attribute type 10 has an invalid length. [ 51.949909][ T3874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.957450][ T3874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.967532][ T3874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.975503][ T3874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.014720][ T3882] netlink: 'syz.1.147': attribute type 27 has an invalid length. [ 52.022712][ T3882] netlink: 'syz.1.147': attribute type 4 has an invalid length. [ 52.030411][ T3882] netlink: 152 bytes leftover after parsing attributes in process `syz.1.147'. [ 52.046021][ T3882] loop1: detected capacity change from 0 to 512 [ 52.064301][ T3884] 9pnet_fd: Insufficient options for proto=fd [ 52.067067][ T3882] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.147: casefold flag without casefold feature [ 52.085018][ T3882] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.147: couldn't read orphan inode 15 (err -117) [ 52.097752][ T3882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.122921][ T3887] loop0: detected capacity change from 0 to 1024 [ 52.131460][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.141986][ T3887] EXT4-fs: Ignoring removed orlov option [ 52.156696][ T3887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.170171][ T3887] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.260485][ T3898] 9pnet_fd: Insufficient options for proto=fd [ 52.390832][ T3887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.399656][ T3887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.436531][ T3903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.156'. [ 52.698269][ T3916] loop4: detected capacity change from 0 to 512 [ 52.712915][ T3916] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.724561][ T3916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.733335][ T3918] tipc: Started in network mode [ 52.738244][ T3918] tipc: Node identity 42b9c63561ee, cluster identity 4711 [ 52.745529][ T3918] tipc: Enabled bearer , priority 0 [ 52.761348][ T3916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.770040][ T3916] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.770237][ T3908] loop2: detected capacity change from 0 to 164 [ 52.786868][ T3918] tipc: Disabling bearer [ 52.811885][ T3924] loop1: detected capacity change from 0 to 256 [ 52.823313][ T3924] vfat: Bad value for 'nonumtail' [ 52.828661][ T3916] EXT4-fs (loop4): failed to initialize system zone (-117) [ 52.828862][ T3928] 9pnet_fd: Insufficient options for proto=fd [ 52.836251][ T3916] EXT4-fs (loop4): mount failed [ 52.936777][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.968411][ T3916] loop4: detected capacity change from 0 to 2048 [ 53.026631][ T3916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.127064][ T3948] netlink: 'syz.2.173': attribute type 10 has an invalid length. [ 53.171679][ T3948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.184682][ T3948] team0: Port device bond0 added [ 53.198081][ T3308] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 53.222116][ T3308] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 53.254374][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.327859][ T3966] loop4: detected capacity change from 0 to 1024 [ 53.368178][ T3966] EXT4-fs: Ignoring removed orlov option [ 53.392041][ T3974] 9pnet_fd: Insufficient options for proto=fd [ 53.398959][ T3970] __nla_validate_parse: 1 callbacks suppressed [ 53.398975][ T3970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 53.419803][ T3966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.473492][ T3980] netlink: 'syz.2.184': attribute type 27 has an invalid length. [ 53.481298][ T3980] netlink: 'syz.2.184': attribute type 4 has an invalid length. [ 53.482464][ T3966] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.489085][ T3980] netlink: 152 bytes leftover after parsing attributes in process `syz.2.184'. [ 53.527162][ T3978] loop3: detected capacity change from 0 to 8192 [ 53.567673][ T3983] loop2: detected capacity change from 0 to 512 [ 53.591002][ T3958] loop0: detected capacity change from 0 to 164 [ 53.610948][ T3983] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.184: casefold flag without casefold feature [ 53.636597][ T3983] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.184: couldn't read orphan inode 15 (err -117) [ 53.649793][ T3983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.681928][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.727572][ T3993] loop0: detected capacity change from 0 to 2048 [ 53.734830][ T3966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.743446][ T3966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.772100][ T3993] Alternate GPT is invalid, using primary GPT. [ 53.778412][ T3993] loop0: p1 p2 p3 [ 53.810128][ T4001] netlink: 'syz.2.191': attribute type 30 has an invalid length. [ 53.861619][ T4001] Zero length message leads to an empty skb [ 53.914527][ T4014] loop1: detected capacity change from 0 to 128 [ 53.923039][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 53.936434][ T4018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.196'. [ 54.268604][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.319961][ T4030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 54.378717][ T4030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.399968][ T4038] vlan2: entered allmulticast mode [ 54.405389][ T4038] bond1: entered allmulticast mode [ 54.539196][ T4050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.209'. [ 54.606926][ T4057] loop0: detected capacity change from 0 to 2048 [ 54.643667][ T4057] Alternate GPT is invalid, using primary GPT. [ 54.650050][ T4057] loop0: p1 p2 p3 [ 54.795627][ T4060] loop1: detected capacity change from 0 to 8192 [ 55.623672][ T4078] tipc: Enabled bearer , priority 10 [ 55.643132][ T4078] loop1: detected capacity change from 0 to 512 [ 55.667616][ T4080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.221'. [ 55.671493][ T4078] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 55.693738][ T4078] EXT4-fs (loop1): mount failed [ 55.736431][ T4078] netlink: 'syz.1.219': attribute type 1 has an invalid length. [ 55.744193][ T4078] netlink: 224 bytes leftover after parsing attributes in process `syz.1.219'. [ 55.800597][ T4093] loop0: detected capacity change from 0 to 512 [ 55.838854][ T4093] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.847042][ T4095] loop2: detected capacity change from 0 to 512 [ 55.854158][ T4093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.871376][ T4095] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.877922][ T4095] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.894658][ T4093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.903292][ T4093] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.921639][ T4095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.930457][ T4095] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.952846][ T4097] loop1: detected capacity change from 0 to 1024 [ 55.962243][ T4095] EXT4-fs (loop2): failed to initialize system zone (-117) [ 55.969663][ T4095] EXT4-fs (loop2): mount failed [ 55.975249][ T4097] EXT4-fs: Ignoring removed orlov option [ 55.985426][ T4093] EXT4-fs (loop0): failed to initialize system zone (-117) [ 55.993352][ T4093] EXT4-fs (loop0): mount failed [ 56.021922][ T4097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.087337][ T4097] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.197940][ T4108] loop0: detected capacity change from 0 to 8192 [ 56.264898][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 56.264958][ T29] audit: type=1400 audit(1759538687.679:831): avc: denied { ioctl } for pid=4115 comm="+\{]" path="socket:[7278]" dev="sockfs" ino=7278 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.295244][ T29] audit: type=1400 audit(1759538687.679:832): avc: denied { write } for pid=4115 comm="+\{]" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.301244][ T4097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.314631][ T29] audit: type=1326 audit(1759538687.689:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11c683eec9 code=0x7ffc0000 [ 56.326967][ T4116] netlink: '+\{]': attribute type 1 has an invalid length. [ 56.346207][ T29] audit: type=1326 audit(1759538687.689:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c683eec9 code=0x7ffc0000 [ 56.346243][ T29] audit: type=1326 audit(1759538687.689:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c683eec9 code=0x7ffc0000 [ 56.362872][ T4097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.377053][ T29] audit: type=1326 audit(1759538687.689:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11c683eec9 code=0x7ffc0000 [ 56.431314][ T29] audit: type=1326 audit(1759538687.689:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c683eec9 code=0x7ffc0000 [ 56.454672][ T29] audit: type=1326 audit(1759538687.689:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f11c683eec9 code=0x7ffc0000 [ 56.478062][ T29] audit: type=1326 audit(1759538687.689:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c683eec9 code=0x7ffc0000 [ 56.524880][ T4116] loop4: detected capacity change from 0 to 512 [ 56.534591][ T4116] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.550564][ T4122] capability: warning: `syz.2.236' uses deprecated v2 capabilities in a way that may be insecure [ 56.563864][ T4116] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 56.573967][ T4116] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm +\{]: Failed to acquire dquot type 1 [ 56.585961][ T4116] EXT4-fs (loop4): 1 truncate cleaned up [ 56.592585][ T4116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.620907][ T4116] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm +\{]: Failed to acquire dquot type 1 [ 56.639861][ T4116] 9pnet_fd: Insufficient options for proto=fd [ 56.681109][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.751783][ T3408] tipc: Node number set to 592954933 [ 56.779573][ T4146] 9pnet_fd: Insufficient options for proto=fd [ 56.878329][ T4155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.249'. [ 56.944840][ T4157] FAULT_INJECTION: forcing a failure. [ 56.944840][ T4157] name failslab, interval 1, probability 0, space 0, times 1 [ 56.957675][ T4157] CPU: 0 UID: 0 PID: 4157 Comm: syz.3.251 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.957706][ T4157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 56.957724][ T4157] Call Trace: [ 56.957730][ T4157] [ 56.957738][ T4157] __dump_stack+0x1d/0x30 [ 56.957840][ T4157] dump_stack_lvl+0xe8/0x140 [ 56.957931][ T4157] dump_stack+0x15/0x1b [ 56.957966][ T4157] should_fail_ex+0x265/0x280 [ 56.957999][ T4157] ? io_getxattr_prep+0x129/0x200 [ 56.958068][ T4157] should_failslab+0x8c/0xb0 [ 56.958096][ T4157] __kmalloc_cache_noprof+0x4c/0x4a0 [ 56.958128][ T4157] ? __io_alloc_req_refill+0x12e/0x1d0 [ 56.958158][ T4157] io_getxattr_prep+0x129/0x200 [ 56.958225][ T4157] io_submit_sqes+0x5ec/0x1060 [ 56.958262][ T4157] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 56.958370][ T4157] ? 0xffffffff81000000 [ 56.958385][ T4157] ? __rcu_read_unlock+0x4f/0x70 [ 56.958411][ T4157] ? get_pid_task+0x96/0xd0 [ 56.958480][ T4157] ? proc_fail_nth_write+0x13b/0x160 [ 56.958539][ T4157] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 56.958571][ T4157] ? vfs_write+0x7e8/0x960 [ 56.958596][ T4157] ? __rcu_read_unlock+0x4f/0x70 [ 56.958701][ T4157] ? __fget_files+0x184/0x1c0 [ 56.958732][ T4157] ? fput+0x8f/0xc0 [ 56.958767][ T4157] __x64_sys_io_uring_enter+0x78/0x90 [ 56.958852][ T4157] x64_sys_call+0x2df0/0x3000 [ 56.958968][ T4157] do_syscall_64+0xd2/0x200 [ 56.958991][ T4157] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.959020][ T4157] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.959057][ T4157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.959160][ T4157] RIP: 0033:0x7f65170aeec9 [ 56.959177][ T4157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.959198][ T4157] RSP: 002b:00007f6515b0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 56.959228][ T4157] RAX: ffffffffffffffda RBX: 00007f6517305fa0 RCX: 00007f65170aeec9 [ 56.959242][ T4157] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000004 [ 56.959256][ T4157] RBP: 00007f6515b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.959298][ T4157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.959311][ T4157] R13: 00007f6517306038 R14: 00007f6517305fa0 R15: 00007ffdc2b7b648 [ 56.959333][ T4157] [ 57.236416][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.268028][ T4166] loop1: detected capacity change from 0 to 256 [ 57.288023][ T4167] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 57.312312][ T4167] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 57.322607][ T4167] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 57.335383][ T4167] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 57.364976][ T4164] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 57.389281][ T4167] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 57.408025][ T4164] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 57.418134][ T4184] loop2: detected capacity change from 0 to 512 [ 57.418507][ T4184] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.431696][ T4167] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 57.448407][ T4167] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 57.469150][ T4184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.484454][ T4192] tipc: Enabled bearer , priority 0 [ 57.491926][ T4184] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.494393][ T4164] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 57.500582][ T4184] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.530999][ T4192] tipc: Disabling bearer [ 57.549694][ T4189] loop3: detected capacity change from 0 to 8192 [ 57.556314][ T4195] loop4: detected capacity change from 0 to 256 [ 57.564863][ T4195] vfat: Bad value for 'nonumtail' [ 57.580433][ T4184] EXT4-fs (loop2): failed to initialize system zone (-117) [ 57.598363][ T4184] EXT4-fs (loop2): mount failed [ 57.664907][ T4184] loop2: detected capacity change from 0 to 2048 [ 57.686194][ T4184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.713582][ T4204] netlink: 'syz.0.266': attribute type 1 has an invalid length. [ 57.915280][ T4208] loop0: detected capacity change from 0 to 164 [ 57.952449][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.230016][ T4246] FAULT_INJECTION: forcing a failure. [ 58.230016][ T4246] name failslab, interval 1, probability 0, space 0, times 0 [ 58.243012][ T4246] CPU: 1 UID: 0 PID: 4246 Comm: syz.4.278 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.243047][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.243130][ T4246] Call Trace: [ 58.243139][ T4246] [ 58.243149][ T4246] __dump_stack+0x1d/0x30 [ 58.243325][ T4246] dump_stack_lvl+0xe8/0x140 [ 58.243429][ T4246] dump_stack+0x15/0x1b [ 58.243471][ T4246] should_fail_ex+0x265/0x280 [ 58.243506][ T4246] should_failslab+0x8c/0xb0 [ 58.243583][ T4246] kmem_cache_alloc_noprof+0x50/0x480 [ 58.243650][ T4246] ? dst_alloc+0xbd/0x100 [ 58.243685][ T4246] dst_alloc+0xbd/0x100 [ 58.243716][ T4246] ? ip_vs_sip_fill_param+0x262/0x5f0 [ 58.243761][ T4246] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 58.243804][ T4246] ip_route_output_flow+0x65/0x110 [ 58.243901][ T4246] tcp_v4_connect+0x491/0xad0 [ 58.243926][ T4246] tcp_v6_connect+0x82c/0xc30 [ 58.243980][ T4246] __inet_stream_connect+0x169/0x7d0 [ 58.244039][ T4246] ? _raw_spin_unlock_bh+0x36/0x40 [ 58.244082][ T4246] ? release_sock+0x116/0x150 [ 58.244103][ T4246] ? _raw_spin_unlock_bh+0x36/0x40 [ 58.244151][ T4246] ? lock_sock_nested+0x112/0x140 [ 58.244178][ T4246] ? selinux_netlbl_socket_connect+0x115/0x130 [ 58.244203][ T4246] inet_stream_connect+0x44/0x70 [ 58.244233][ T4246] ? __pfx_inet_stream_connect+0x10/0x10 [ 58.244302][ T4246] __sys_connect+0x1f2/0x2b0 [ 58.244336][ T4246] __x64_sys_connect+0x3f/0x50 [ 58.244367][ T4246] x64_sys_call+0x2c0c/0x3000 [ 58.244454][ T4246] do_syscall_64+0xd2/0x200 [ 58.244481][ T4246] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.244548][ T4246] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.244593][ T4246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.244622][ T4246] RIP: 0033:0x7fc8695ceec9 [ 58.244680][ T4246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.244703][ T4246] RSP: 002b:00007fc868037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 58.244728][ T4246] RAX: ffffffffffffffda RBX: 00007fc869825fa0 RCX: 00007fc8695ceec9 [ 58.244744][ T4246] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 58.244796][ T4246] RBP: 00007fc868037090 R08: 0000000000000000 R09: 0000000000000000 [ 58.244813][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.244863][ T4246] R13: 00007fc869826038 R14: 00007fc869825fa0 R15: 00007fffd66970d8 [ 58.244888][ T4246] [ 58.257448][ T4249] FAULT_INJECTION: forcing a failure. [ 58.257448][ T4249] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.509462][ T4249] CPU: 0 UID: 0 PID: 4249 Comm: syz.2.279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.509499][ T4249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.509515][ T4249] Call Trace: [ 58.509524][ T4249] [ 58.509536][ T4249] __dump_stack+0x1d/0x30 [ 58.509587][ T4249] dump_stack_lvl+0xe8/0x140 [ 58.509633][ T4249] dump_stack+0x15/0x1b [ 58.509732][ T4249] should_fail_ex+0x265/0x280 [ 58.509787][ T4249] should_fail+0xb/0x20 [ 58.509828][ T4249] should_fail_usercopy+0x1a/0x20 [ 58.509861][ T4249] strncpy_from_user+0x25/0x230 [ 58.510003][ T4249] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 58.510044][ T4249] __se_sys_memfd_create+0x1ff/0x590 [ 58.510079][ T4249] __x64_sys_memfd_create+0x31/0x40 [ 58.510117][ T4249] x64_sys_call+0x2ac2/0x3000 [ 58.510146][ T4249] do_syscall_64+0xd2/0x200 [ 58.510253][ T4249] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.510290][ T4249] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.510333][ T4249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.510416][ T4249] RIP: 0033:0x7f11c683eec9 [ 58.510437][ T4249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.510462][ T4249] RSP: 002b:00007f11c52a6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 58.510487][ T4249] RAX: ffffffffffffffda RBX: 00000000000005c2 RCX: 00007f11c683eec9 [ 58.510504][ T4249] RDX: 00007f11c52a6dec RSI: 0000000000000000 RDI: 00007f11c68c2960 [ 58.510521][ T4249] RBP: 0000200000000000 R08: 00007f11c52a6b07 R09: 0000000000000000 [ 58.510538][ T4249] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 58.510563][ T4249] R13: 00007f11c52a6dec R14: 00007f11c52a6df0 R15: 00007ffd89c881a8 [ 58.510649][ T4249] [ 58.718329][ T4254] loop4: detected capacity change from 0 to 2048 [ 58.749987][ T4258] netlink: 140 bytes leftover after parsing attributes in process `syz.2.282'. [ 58.813461][ T4254] Alternate GPT is invalid, using primary GPT. [ 58.819827][ T4254] loop4: p1 p2 p3 [ 58.823654][ T4254] loop4: partition table partially beyond EOD, truncated [ 58.837034][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 58.845960][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 58.870677][ T4265] loop0: detected capacity change from 0 to 1024 [ 58.877372][ T4258] loop2: detected capacity change from 0 to 1024 [ 58.894647][ T4268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 58.913281][ T4258] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.922970][ T4268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 58.932217][ T4258] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.943396][ T4268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 58.944811][ T4265] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.286: Failed to acquire dquot type 0 [ 58.983665][ T4258] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.282: Freeing blocks not in datazone - block = 0, count = 4096 [ 58.997666][ T4265] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 59.041489][ T4265] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.286: corrupted inode contents [ 59.051480][ T4258] EXT4-fs (loop2): 1 orphan inode deleted [ 59.059789][ T4258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.081360][ T4265] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.286: mark_inode_dirty error [ 59.124286][ T4265] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.286: corrupted inode contents [ 59.137303][ T4258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 59.165995][ T4265] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.286: mark_inode_dirty error [ 59.183023][ T4277] FAULT_INJECTION: forcing a failure. [ 59.183023][ T4277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.196281][ T4277] CPU: 1 UID: 0 PID: 4277 Comm: syz.1.290 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.196326][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.196343][ T4277] Call Trace: [ 59.196350][ T4277] [ 59.196360][ T4277] __dump_stack+0x1d/0x30 [ 59.196406][ T4277] dump_stack_lvl+0xe8/0x140 [ 59.196503][ T4277] dump_stack+0x15/0x1b [ 59.196578][ T4277] should_fail_ex+0x265/0x280 [ 59.196617][ T4277] should_fail+0xb/0x20 [ 59.196668][ T4277] should_fail_usercopy+0x1a/0x20 [ 59.196710][ T4277] _copy_from_user+0x1c/0xb0 [ 59.196737][ T4277] __sys_bpf+0x183/0x7c0 [ 59.196802][ T4277] __x64_sys_bpf+0x41/0x50 [ 59.196838][ T4277] x64_sys_call+0x2aee/0x3000 [ 59.196936][ T4277] do_syscall_64+0xd2/0x200 [ 59.196964][ T4277] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.196998][ T4277] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.197105][ T4277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.197140][ T4277] RIP: 0033:0x7f8a0e19eec9 [ 59.197160][ T4277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.197186][ T4277] RSP: 002b:00007f8a0cc07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.197246][ T4277] RAX: ffffffffffffffda RBX: 00007f8a0e3f5fa0 RCX: 00007f8a0e19eec9 [ 59.197263][ T4277] RDX: 0000000000000018 RSI: 0000200000000040 RDI: 0000000000000007 [ 59.197280][ T4277] RBP: 00007f8a0cc07090 R08: 0000000000000000 R09: 0000000000000000 [ 59.197296][ T4277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.197312][ T4277] R13: 00007f8a0e3f6038 R14: 00007f8a0e3f5fa0 R15: 00007ffc92513128 [ 59.197356][ T4277] [ 59.372328][ T4265] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.286: corrupted inode contents [ 59.413394][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 59.418991][ T4282] loop1: detected capacity change from 0 to 2048 [ 59.422515][ T4265] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 59.433515][ T4280] loop3: detected capacity change from 0 to 164 [ 59.437616][ T4265] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.286: corrupted inode contents [ 59.455741][ T4265] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.286: mark_inode_dirty error [ 59.475114][ T4265] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 59.485682][ T4282] Alternate GPT is invalid, using primary GPT. [ 59.492008][ T4282] loop1: p1 p2 p3 [ 59.499772][ T4265] EXT4-fs (loop0): 1 truncate cleaned up [ 59.517894][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.523577][ T4265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.567065][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.626676][ T4288] loop0: detected capacity change from 0 to 8192 [ 59.639494][ T4294] sctp: [Deprecated]: syz.3.297 (pid 4294) Use of int in max_burst socket option deprecated. [ 59.639494][ T4294] Use struct sctp_assoc_value instead [ 59.661323][ T4295] loop4: detected capacity change from 0 to 1024 [ 59.670684][ T4295] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.295: Failed to acquire dquot type 0 [ 59.682423][ T4295] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 59.697281][ T4295] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.295: corrupted inode contents [ 59.709591][ T4295] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.295: mark_inode_dirty error [ 59.721338][ T4295] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.295: corrupted inode contents [ 59.740823][ T4295] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.295: mark_inode_dirty error [ 59.754316][ T4295] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.295: corrupted inode contents [ 59.769619][ T4295] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 59.779395][ T4295] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.295: corrupted inode contents [ 59.796956][ T4295] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.295: mark_inode_dirty error [ 59.808712][ T4295] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 59.818809][ T4295] EXT4-fs (loop4): 1 truncate cleaned up [ 59.824947][ T4295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.864354][ T4313] netlink: 'syz.3.303': attribute type 27 has an invalid length. [ 59.872395][ T4313] netlink: 'syz.3.303': attribute type 4 has an invalid length. [ 59.880043][ T4313] netlink: 152 bytes leftover after parsing attributes in process `syz.3.303'. [ 59.894037][ T4313] loop3: detected capacity change from 0 to 512 [ 59.905025][ T4313] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.303: casefold flag without casefold feature [ 59.919364][ T4313] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.303: couldn't read orphan inode 15 (err -117) [ 59.933032][ T4313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.961544][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.093561][ T4319] loop3: detected capacity change from 0 to 2048 [ 60.113954][ T4319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.183751][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.343699][ T4327] tipc: Enabled bearer , priority 0 [ 60.363615][ T4327] tipc: Disabling bearer [ 60.409502][ T4329] loop1: detected capacity change from 0 to 256 [ 60.424646][ T4329] vfat: Bad value for 'nonumtail' [ 60.493617][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.705329][ T4336] loop4: detected capacity change from 0 to 256 [ 60.859462][ T4328] loop3: detected capacity change from 0 to 164 [ 60.887144][ T4346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 60.985023][ T4346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.004352][ T4350] vlan2: entered allmulticast mode [ 61.009553][ T4350] bond1: entered allmulticast mode [ 61.087606][ T4362] sctp: [Deprecated]: syz.3.320 (pid 4362) Use of int in max_burst socket option deprecated. [ 61.087606][ T4362] Use struct sctp_assoc_value instead [ 61.121693][ T4367] loop2: detected capacity change from 0 to 512 [ 61.133250][ T4367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.145974][ T4367] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.176572][ T4372] 9pnet_fd: Insufficient options for proto=fd [ 61.285647][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 61.285666][ T29] audit: type=1400 audit(1759538692.729:990): avc: denied { read } for pid=4366 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.398071][ T4376] tipc: Enabled bearer , priority 0 [ 61.412898][ T4376] tipc: Disabling bearer [ 61.419619][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.448055][ T29] audit: type=1400 audit(1759538692.889:991): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.471835][ T4380] netlink: 'syz.2.324': attribute type 27 has an invalid length. [ 61.479636][ T4380] netlink: 'syz.2.324': attribute type 4 has an invalid length. [ 61.502419][ T4380] loop2: detected capacity change from 0 to 512 [ 61.558589][ T4376] loop3: detected capacity change from 0 to 256 [ 61.565540][ T4376] vfat: Bad value for 'nonumtail' [ 61.667557][ T29] audit: type=1400 audit(1759538693.079:992): avc: denied { mounton } for pid=4382 comm="syz.0.326" path="/58/bus" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.689922][ T29] audit: type=1326 audit(1759538693.099:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8695ceec9 code=0x7ffc0000 [ 61.713242][ T29] audit: type=1326 audit(1759538693.099:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8695ceec9 code=0x7ffc0000 [ 61.736521][ T29] audit: type=1326 audit(1759538693.099:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8695ceec9 code=0x7ffc0000 [ 61.760259][ T29] audit: type=1326 audit(1759538693.099:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8695ceec9 code=0x7ffc0000 [ 61.783565][ T29] audit: type=1326 audit(1759538693.099:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8695ceec9 code=0x7ffc0000 [ 61.806911][ T29] audit: type=1326 audit(1759538693.099:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8695ceec9 code=0x7ffc0000 [ 61.830757][ T29] audit: type=1326 audit(1759538693.099:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4386 comm="syz.4.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8695ceec9 code=0x7ffc0000 [ 61.860213][ T4380] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.324: casefold flag without casefold feature [ 61.888836][ T4380] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.324: couldn't read orphan inode 15 (err -117) [ 61.898988][ T4383] unsupported nlmsg_type 40 [ 61.944288][ T4380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.090213][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.125700][ T4403] 9pnet_fd: Insufficient options for proto=fd [ 62.276052][ T4401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.304436][ T4407] vlan2: entered allmulticast mode [ 62.309618][ T4407] bond2: entered allmulticast mode [ 62.510979][ T4411] syz.3.336 (4411) used greatest stack depth: 10176 bytes left [ 62.554156][ T4420] loop2: detected capacity change from 0 to 512 [ 62.574768][ T4426] netlink: 'syz.1.343': attribute type 27 has an invalid length. [ 62.577513][ T4422] loop3: detected capacity change from 0 to 8192 [ 62.582588][ T4426] netlink: 'syz.1.343': attribute type 4 has an invalid length. [ 62.602229][ T4426] loop1: detected capacity change from 0 to 512 [ 62.615482][ T4426] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.343: casefold flag without casefold feature [ 62.628052][ T4420] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.646330][ T4426] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.343: couldn't read orphan inode 15 (err -117) [ 62.646632][ T4420] EXT4-fs (loop2): mount failed [ 62.669819][ T4430] tipc: Enabled bearer , priority 0 [ 62.677217][ T4426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.691107][ T4430] tipc: Disabling bearer [ 62.734666][ T4430] loop4: detected capacity change from 0 to 256 [ 62.742830][ T4430] vfat: Bad value for 'nonumtail' [ 62.766486][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.139148][ T4454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.174511][ T4462] vlan2: entered allmulticast mode [ 63.179758][ T4462] bond2: entered allmulticast mode [ 63.336224][ T4474] syz.2.356 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.357365][ T4474] loop2: detected capacity change from 0 to 1024 [ 63.364338][ T4474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.371065][ T4474] EXT4-fs: Ignoring removed nobh option [ 63.392613][ T4474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.415206][ T4481] netlink: 'syz.1.358': attribute type 27 has an invalid length. [ 63.423066][ T4481] netlink: 'syz.1.358': attribute type 4 has an invalid length. [ 63.454225][ T4434] syz.0.347 (4434) used greatest stack depth: 9280 bytes left [ 63.466304][ T4481] loop1: detected capacity change from 0 to 512 [ 63.475322][ T4481] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.358: casefold flag without casefold feature [ 63.488176][ T4481] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.358: couldn't read orphan inode 15 (err -117) [ 63.500660][ T4481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.563045][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.585632][ T4494] loop0: detected capacity change from 0 to 1024 [ 63.589563][ T4498] sctp: [Deprecated]: syz.1.363 (pid 4498) Use of int in max_burst socket option deprecated. [ 63.589563][ T4498] Use struct sctp_assoc_value instead [ 63.593125][ T4494] EXT4-fs: Ignoring removed orlov option [ 63.624068][ T4494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 63.637582][ T4494] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.682874][ T4494] vhci_hcd: default hub control req: 000c v0303 i0006 l0 [ 63.719283][ T37] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 1) [ 63.735207][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 63.747611][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 63.747611][ T37] [ 63.757617][ T4509] loop1: detected capacity change from 0 to 1024 [ 63.765375][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 63.783601][ T4509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.785121][ T4516] __nla_validate_parse: 15 callbacks suppressed [ 63.785141][ T4516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.372'. [ 63.839127][ T4524] netlink: 'syz.4.374': attribute type 27 has an invalid length. [ 63.847050][ T4524] netlink: 'syz.4.374': attribute type 4 has an invalid length. [ 63.854829][ T4524] netlink: 152 bytes leftover after parsing attributes in process `syz.4.374'. [ 63.884275][ T4524] loop4: detected capacity change from 0 to 512 [ 63.892380][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.893218][ T4524] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.374: casefold flag without casefold feature [ 63.906764][ T4529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'. [ 63.914434][ T4524] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.374: couldn't read orphan inode 15 (err -117) [ 63.936209][ T4524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.970599][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.983185][ T3308] ================================================================== [ 63.991325][ T3308] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 63.998917][ T3308] [ 64.001250][ T3308] read-write to 0xffff888237d25ee8 of 1 bytes by task 4533 on cpu 1: [ 64.009410][ T3308] folio_add_lru+0xa5/0x1f0 [ 64.013956][ T3308] folio_add_lru_vma+0x49/0x70 [ 64.018740][ T3308] handle_mm_fault+0x27e2/0x2be0 [ 64.023695][ T3308] __get_user_pages+0x102a/0x1ed0 [ 64.028732][ T3308] __gup_longterm_locked+0x2fb/0xe60 [ 64.034028][ T3308] pin_user_pages+0x89/0xc0 [ 64.038547][ T3308] xdp_umem_pin_pages+0xc1/0x210 [ 64.043512][ T3308] xdp_umem_create+0x519/0x5c0 [ 64.048322][ T3308] xsk_setsockopt+0x5ea/0x640 [ 64.053106][ T3308] __sys_setsockopt+0x181/0x200 [ 64.057979][ T3308] __x64_sys_setsockopt+0x64/0x80 [ 64.063040][ T3308] x64_sys_call+0x20ec/0x3000 [ 64.067754][ T3308] do_syscall_64+0xd2/0x200 [ 64.072278][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.078180][ T3308] [ 64.080599][ T3308] read to 0xffff888237d25ee8 of 1 bytes by task 3308 on cpu 0: [ 64.088163][ T3308] __lru_add_drain_all+0x17e/0x450 [ 64.093299][ T3308] lru_add_drain_all+0x10/0x20 [ 64.098093][ T3308] invalidate_bdev+0x47/0x70 [ 64.102701][ T3308] ext4_put_super+0x624/0x7d0 [ 64.107386][ T3308] generic_shutdown_super+0xe3/0x210 [ 64.112686][ T3308] kill_block_super+0x2a/0x70 [ 64.117399][ T3308] ext4_kill_sb+0x42/0x80 [ 64.121769][ T3308] deactivate_locked_super+0x72/0x1c0 [ 64.127147][ T3308] deactivate_super+0x97/0xa0 [ 64.131842][ T3308] cleanup_mnt+0x269/0x2e0 [ 64.136288][ T3308] __cleanup_mnt+0x19/0x20 [ 64.140720][ T3308] task_work_run+0x12e/0x1a0 [ 64.145410][ T3308] exit_to_user_mode_loop+0xed/0x110 [ 64.150706][ T3308] do_syscall_64+0x1d6/0x200 [ 64.155309][ T3308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.161219][ T3308] [ 64.163541][ T3308] value changed: 0x12 -> 0x14 [ 64.168213][ T3308] [ 64.170535][ T3308] Reported by Kernel Concurrency Sanitizer on: [ 64.176684][ T3308] CPU: 0 UID: 0 PID: 3308 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.186675][ T3308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.196911][ T3308] ================================================================== [ 64.237039][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.