last executing test programs: 13.923288482s ago: executing program 0 (id=1): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) r0 = socket$caif_stream(0x25, 0x1, 0x3) accept4(r0, &(0x7f0000000380)=@l2, &(0x7f0000000240)=0x80, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4005b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000340)={0xec, 0x2c76f8f4, 0x5, 0x200c9cc}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r4}, 0x18) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.372258985s ago: executing program 0 (id=12): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181341, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4a) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)=0xff) readv(r0, &(0x7f00000003c0), 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x7, 0x2, "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"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r3, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r4, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) 11.168807349s ago: executing program 0 (id=32): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdd3) close(r0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], 0xf9, 0x121c, &(0x7f0000002180)="$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") sched_setscheduler(0x0, 0x5, &(0x7f0000000280)=0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000f964447f97c00e605bb00929b4e54c7d4fbbdcddd35aa5bf72417694e6acc71bd524fcd046b9dc4f591f00d05d2642f51ae350232307e3f70111be932d57acf761286a4647e87706903a5c9118c62871622410c5ff5e5b424ae14ba4f9b5bbd3cf5f64e2e0337b9b5ce9265ecdc8103d699593f5dc3abb217c7d566db9b5060c2c29b821da16d0fd9df3470dcbec68740fe17b14a8e931d7133fcd900fa9206bcc9004bb27278ccca15f61cb2ece", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff8}}, './file1\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRESOCT=r0, @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0xd1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x23, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @ldst={0x0, 0x0, 0x1, 0x1, 0x4, 0x40, 0x4}, @alu={0x7, 0x1, 0x1, 0xa, 0x3, 0x18, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') write$cgroup_int(r5, &(0x7f0000000080)=0x1001062a13d, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r7, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x800, 0x8000) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0xffffffffffffff4d) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10.297239415s ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000240)='./bus\x00', 0x21) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) flock(0xffffffffffffffff, 0x5) flock(0xffffffffffffffff, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18, 0x40008c1}, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x1ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100082, 0x10000, 0x1ff, 0x6, 0xe, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid}]}}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x9}, 0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) socket(0x400000000010, 0x3, 0x0) 6.28621736s ago: executing program 2 (id=107): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180095efc399b198000008000000000000000500000063110b00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000000000000000000000000029d517d971ff2cd2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000300)={0x2, 0xfff, 0x9, 0xffffffff, 0x4, "c9dd726b1d6ce0c4e87d81cad2c52af69b32c3", 0x6, 0x40}) sync() ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) alarm(0x8000000000000001) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.428786405s ago: executing program 2 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x4008800) 5.335783086s ago: executing program 2 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x80, 0x30, 0x20, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x16, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x4}, @TCA_CT_LABELS={0x14, 0x7, "0118aae167fe4bb4d318e45cb16cfc7a"}, @TCA_CT_ACTION={0x6, 0x3, 0x3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x34, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x1, 0xab0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='memory.numa_stat\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000380)={0x0, 0x27, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000000201030000000000000000000a000000180001801400018008000100ac141422085df9000200ac146401f2117f098f09ca77368308c9243ffde913f9104aa741658b4bb02b971ad4b8633b6805b60fc0b0ae219a79c95539096135a1b8873d78ec9e2a43e80719636a198e36cae614784562406dadccfeeb3c9712691ce1a026b6762f298319422551352a5d73bf2d2aaabc0a2fb05203e1f10c7595ff33f3047beb5a5b10c88b7fce15713427bcecf464d64b57c5a96f49e3c3367abeb264b439ace44677cf1ab724bd"], 0x2c}, 0x1, 0x0, 0x0, 0x10050}, 0x8c44) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000200000000000000004c9e357fb299c997af00800d03000000000000000000000905000000004000000000000a02000000000000000000000b000000000000000000"], 0x0, 0x56}, 0x20) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$P9_ROPEN(r0, &(0x7f00000003c0)={0x18, 0x71, 0x2, {{0x20, 0x2, 0x8}, 0x7fff}}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01001d00c9a44794696e13978e6f42784ab1000000000000020000000982010073797a30000000"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x3, 0x0, 0x71, @rand_addr=' \x01\x00', @mcast2, 0x700, 0x10, 0x3, 0x5ca5}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000070900010073797a310000000014000000020a01020000000000000000010000031c000000000a0103000000000000000002000004080002400000000120000000050a0102000000000000000001000006090001"], 0x98}}, 0x200000d4) semget$private(0x0, 0x2, 0x40) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000828bd700000000000040702000000030073797a3100000000"], 0x14}, 0x1, 0x40030000000000}, 0x4000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 5.092708158s ago: executing program 2 (id=119): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095", @ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000340)='./file0\x00', r1, 0x4000, r4}, 0x18) unlink(&(0x7f0000000140)='./file0\x00') stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef5837f29c1f7c93d183044aedbe283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e1d35d2aa4dca47a76704e578fdb41c47b476f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec", 0x90}) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r5, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@private=0xa010101, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r5}, {0xe61, 0x0, 0x0, 0x2, 0x9, 0x1, 0xffd, 0xc}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d4, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x43500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) r7 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r5, r7) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000401, r5, &(0x7f00000001c0)) getsockname$inet(r3, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") sched_setaffinity(r6, 0x8, &(0x7f0000000540)=0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xfffffffffffffdbd) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) 4.916130829s ago: executing program 2 (id=123): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)="aac84dd7bfeccc2fcdc1aa2f235b7a9063826b16222af1affed4d220a0579be4c45f1131130352b2b09e68ec4ba16b9bd1dfb3d2f8fb674f8858ed0c552adad051e63fa1406d3fbcce9af9adcea40f702e31b79fd3b1d2a81cba77eed366ffd3b1e29f9b25fd023b963d256e329e863323096649af021c7d41dc8eb36735c80c7981251e288b8aff2e61b3d235f9aca6a51bfb050c68432e6de6a18e4ad4005d9e8b3c967c6a8f97687848fed56ade72a8aeb1bca589bc", 0xb7}], 0x1, 0x1f) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000400)=0x101, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0xffff7ffc, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "ef842b2c205d5b8d", "ec9580400006000000ba6a6b247009d4", "be164209", '\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) listen(r2, 0x8) syz_open_dev$vcsu(&(0x7f00000003c0), 0x3, 0x640) recvmmsg(r3, 0x0, 0x0, 0x40000002, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000380)="aa", 0x1}], 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0xffff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="cc000000fcffffff000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES16=r6, @ANYBLOB="a0551bac276f8e0b67ff67062ac26ff3c2af2692b43dbe2dd6f70ac721b15d24cf0c1fc6986d7b59dcce53be010c26a9139bd537918334532818451de23e0463b4b5bb0d9eb9426a6f2b027701e20c3eecd8d8c61f668119c79ebef85557c40974d86fb71ef202a7b9bfdd2df47ac61525ddc9665f2c2c14b971d568ce1c14fce9ce133acb6d99eef6042acb6f1030127dcaa3c72ee834560f31a8279c61ff92771c1ce773932e1ebc25e3f29f38476028783b46375751d767e4baaceb3133dd", @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRESDEC=r8, @ANYRESOCT=0x0], 0x50) 4.75155893s ago: executing program 2 (id=124): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180095efc399b198000008000000000000000500000063110b00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000000000000000000000000029d517d971ff2cd2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000300)={0x2, 0xfff, 0x9, 0xffffffff, 0x4, "c9dd726b1d6ce0c4e87d81cad2c52af69b32c3", 0x6, 0x40}) sync() ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) alarm(0x8000000000000001) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.73076802s ago: executing program 32 (id=124): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180095efc399b198000008000000000000000500000063110b00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000000000000000000000000029d517d971ff2cd2"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000300)={0x2, 0xfff, 0x9, 0xffffffff, 0x4, "c9dd726b1d6ce0c4e87d81cad2c52af69b32c3", 0x6, 0x40}) sync() ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) alarm(0x8000000000000001) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.555837047s ago: executing program 1 (id=130): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) (fail_nth: 2) 2.723162423s ago: executing program 1 (id=131): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r1, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 2.550394394s ago: executing program 1 (id=134): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000880)={@dev={0xac, 0x14, 0x14, 0x42}, @loopback, 0x0, 0x2, [@empty, @private=0xa010101]}, 0x18) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x0, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7800000, 0x0}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f00000006c0)=""/127, 0x7f, 0x0, &(0x7f0000000280)=""/23, 0x17}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r7, &(0x7f0000001000)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000940)="b3fedd220a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a804000000000000005efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233", 0x97}, {&(0x7f0000000ec0)="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", 0x13a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8c0c3d1d67c8bb03bb8583a03c80782dc91b7645b65ba2116c9e64ddbb0545cdc56ee7374538a65fd04d97df001c29c9b087138af146ce11e88845bc9556ab54ea3af37d14905a6715cb3d95950e673158092189a4ff888056524a743276bdca4c98e171c7731c42fa63f4a589800a0bc1da8d669bab3f7e49551957c66ce65a558c84b2cf257a964904d659cd", 0x8d}, {&(0x7f0000000b00)="a00bbe8964015ccf9616aacc5d9de4666219aa0475408027c9b20913c991c5db7da107255f95e0ab52dea95f73826f2c2592849e8030cb8cfa2c6dbcea59e596abe7c1edab0794bf677d6bbc8d0a7a10f38a1bb002eca8cb377070b3ae0c953666fa2172faef79188b1efa2a1f173f5f575dbc0237694450049cd3957383e34e32d293fd78b453389d715f9f97f3445e58921785d1ae09279d91e4eeb4794fa70e9942ca6874c36c3e856136c6d180bfa9bdc3cd6f0449c256ffbbbec269d9c1a1489d18986b1f51bc6e4eff6042acf1e6dbd5c7146110bf35284f73d4234ce4917759c8966c7b68bc7da4bc17a59d885903bb52649a5e97507029c77f6d676d467cb57fbada14763002e911ca7ad63588da11e4b3c7cc5aab6f156e5f23901cdd50b8db43109a935e9c2b8301398f5123ec2cce0a00d526d7406cd59e9c50aa115a2a269d7d6b342f9ca8e972066ace378b52f0099b5ed909", 0x159}, {&(0x7f0000000740)="c319cf272fefa48c3b8cc08760fd9d24a8b12249fa4a45c25032799042725eecb77e0d2a0191df2cd9ae72b7da6d9e5c2fb728a282ff50f4fd50488884bc66311445e2a7478c886c290dd3c0872c392e0c8145fe311cd88e6bad9f26c22b283a9d4812c3a4a1325e19be229046f9e452e3332092e806b7341f3152580d5996c980ba838a87d89f312a9486d0e2e9c280ac59d1aeebfa73970b74729ffb4dfea35e2dca68b2c2373f50315f22e443738d303584816bd35dec87", 0xb9}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="ebd3f898a9f35f9f0687d56ed757eabb1ec4ae6ca742bca169389dc37b2bc6ea3018aaf5dde0b57f2e7c698da0de72d64894959dc5372a0defdf9d10a5fca8e5ec1a4813cc45e7a4a69bba49d31c2c40babd27642c8e81130cc35ee25ea5109a5b52ea11a044e158ed8f1d423847a9a497", 0x71}, {&(0x7f00000004c0)="7db538fba9d9a69edc1c8cdb7f78bdaf5a5b51158241af9a003eaca18f44be8ea83257d89d62f68cefad6c78998e0e2588b39df32d114b68c3e9f82c7c4343cd86efebf269f9c14356b1afc657700f6342ecec6cf6c24d82f412dcaac5cb0034955cf6b9292e554af52158fd559ebda9f2ded42beaa68dd1345376214fc553a3cae6dd55cc3b437e588ba64d7bf9f209a949d31a226860c14ced149be2ce4eb88b40b47e6970871824f4e1a98e9764588f0b178117a6d4d4471adbd30ba3e5a40de0ef50b307c318", 0xc8}], 0x2}}], 0x4, 0xc044) write$binfmt_misc(r7, &(0x7f0000000300), 0x5b0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r8}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010001f7f00000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0001000000000000200012800b0001006272696467650000100002800a001400"], 0x40}}, 0x84) 2.350444455s ago: executing program 1 (id=137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='net/psched\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) fchown(r3, r5, 0xee00) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3004066, &(0x7f0000000340)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@user_xattr}, {@oldalloc}, {@auto_da_alloc}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x0) setresgid(0x0, 0x0, 0xee00) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpgrp(0x0) kcmp(r8, r7, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) fallocate(r6, 0x20, 0x0, 0x8000) 2.310382625s ago: executing program 1 (id=139): timerfd_create(0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x81, &(0x7f0000000000)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x6b40, 0x3, 0x0, 0x8, 0x1, 0x4000006, 0x8, 0x8080}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000140), 0x0}, 0x20) signalfd(r5, &(0x7f0000000000)={[0x9]}, 0x8) 2.067524597s ago: executing program 1 (id=142): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4a) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)=0xff) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x7, 0x2, "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"}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r4, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r5, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000e5ffffff00040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$sock_bt_hci(r9, 0x400448cb, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 1.428605421s ago: executing program 5 (id=125): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1.393757481s ago: executing program 5 (id=147): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xf}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000003c0), 0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132fff000"}) write$sndseq(r5, &(0x7f00000000c0)=[{0x5, 0xc0, 0x0, 0x0, @time, {}, {0x0, 0x81}, @connect={{0x6, 0x3}, {0xf9, 0x8}}}], 0x1c) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4cff4ed56b2bc808}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000000840)=""/174, 0xae) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x26000400) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, &(0x7f0000000600)={0x1, 0x1, 0xae, 0x0, 0x81}, 0xc) 679.409675ms ago: executing program 4 (id=149): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) creat(0x0, 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sample_threshold\x00', r2, 0x0, 0x8000}, 0x18) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x1}, 0x18) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1) 665.563886ms ago: executing program 4 (id=150): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='softirq_noise\x00', 0xffffffffffffffff, 0x0, 0x8000000000000001}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000580)=""/4096, 0x1000, 0x0, &(0x7f0000000380)=""/149, 0x95}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x0, 0xb, &(0x7f0000002900)=ANY=[@ANYRESHEX=r1, @ANYBLOB="eb0424323610e6c3c0660b343eecacbcc797a4335e3d58dc3d1abf39d99dde2e5e07a67671c07c5bf5fee80087c4dcdd11d6f902d58025c01e33d848198cd4c562acc5f74c2b917799b6cccc5174ad2043217cacc4144c284e7c415d221866c4ac35cdaf53a75962d79984d924ab27f079c5a16c34e37e390046b8e6c37ec2af45f4e391ee07d9ec9b84f66e2490fb4267f8fb1473952c0f29cd252e743a2a3db03eb0f3075e4bdf741b", @ANYRES32=r1, @ANYBLOB="36ee0bbc656ad93efa2a030190e2c4c3fa04b3c7798a63b4cc94af036d2aca99252f7a6826100863f76ee2524853326ae80a243752442b900b9c", @ANYRES16=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0xa, '\x00', r1, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./bus\x00'}, 0x18) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x9, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x17, &(0x7f0000000280)=ANY=[@ANYBLOB="21964000fcffffff85200000020000006885100000ffffffffb7080000000000007b8af8dd0fccd7c505ff00000000b7080000021000007b8af0ff00000000bfa100000000095207010000f8ffffffbf0000000000000009040000f0ff2100b702000008000e00182300"/116, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000184200000700000000000000000000004259f0ff010000009d123000080000006f93f8ff01000000"], &(0x7f0000000080)='GPL\x00', 0xffffcc07, 0x1000, &(0x7f0000001900)=""/4096, 0x40f00, 0x3a, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x9, 0x6, 0xffff}, 0x10, r0, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r2, r3, 0xffffffffffffffff], &(0x7f0000000700)=[{0x3, 0x1, 0x10}], 0x10, 0xffffffff}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x18, &(0x7f00000003c0)=@req={0x0, 0x8003, 0x5, 0x3}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000500000000e882a88d75f3274d000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r8, 0x0, 0x4804}, 0x18) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = socket(0x11, 0x2, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket(0x11, 0x80803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$sock(r12, &(0x7f0000000600)={&(0x7f0000000180)=@xdp={0x2c, 0x9, r13, 0x3c}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@timestamping={{0xfffffe76, 0x1, 0x25, 0x3}}], 0x18}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) geteuid() setsockopt(r10, 0x107, 0x1, &(0x7f00000001c0)="110000000000060000071a80010061cc", 0x10) close_range(r9, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7, 0x0, 0x7}, 0x18) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 534.106896ms ago: executing program 5 (id=151): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) 521.194176ms ago: executing program 4 (id=153): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 498.606827ms ago: executing program 3 (id=154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xf}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x565c}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000003c0), 0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132fff000"}) write$sndseq(r5, &(0x7f00000000c0), 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4cff4ed56b2bc808}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000000840)=""/174, 0xae) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000600)={0x1, 0x1, 0xae, 0x0, 0x81}, 0xc) 494.347427ms ago: executing program 5 (id=155): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181341, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4a) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)=0xff) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x7, 0x2, "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"}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r4, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r5, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000e5ffffff00040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$sock_bt_hci(r9, 0x400448cb, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbdf8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d9447c4df6e21ee0e54f8be072e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 406.569077ms ago: executing program 4 (id=156): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="549f7ba8d6e402580cce0319f136956ad7762ad86df99201fa344e22486fac6120745b1a1bf5fb0819d9b67197a874ff4b0a83f34bc0afd7ed94b1ec7d34486748c9c6298b5c422b9a78e33bc57b7cf3818db9b8872b25fb1b5176ac02bc51e7612eff8d91d7aa55922c2c0bdd2be0ffc64effecb17f99a3654dd21d63bb103337866ac5df34b44c4fa59d8d62aed89a1b23d53f57d248f0448d0d46f6edc1686a09818dcc5794199d6b2f9ada3667ee2f1e986a8545e8e9f91154b3ba2b03f013d13fb68f", 0xc5}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5cbdf4a583f8", 0xe4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="bf6a5f7745dbd8b108c239f58ddfefec6e54d57686cb4333724311", 0x1b}, {&(0x7f0000000800)="9d33d16df4151a3ed1b0756b59f38a9549dc8e89d5a5c7c6d5d526585324a9ca624d58a373959efb0ed3143cc852e4fa68914b40ab79f0de1205eb2f8576b56eaa35e7874475e90970c75eb869b16de91a4fc518202c0e46284a986ee2fcffd2e7af58e4cd9c72bb2d9cf4d8744cb5dee10a1f00b4efe10b4fa5b23bfafae698ffc9c59bb5dbb9863c5bdbaaf8c9a8d8ba30a87da7a44027aadcea1f8a5fac87695e688d5dfd3f5b56772ceae3bf5210d5621cc0a627fbc5f1b92e6bfec77d82fe23ecd8a5d6753d308735adc899a622886787ccb7e1f37cc9261ef801e777da5da2", 0xe2}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653c", 0xf5}], 0x1}}], 0x3, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 390.017797ms ago: executing program 3 (id=157): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9d31}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (fail_nth: 1) 363.473538ms ago: executing program 4 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x40010) 130.423059ms ago: executing program 4 (id=159): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181341, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4a) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)=0xff) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x7, 0x2, "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"}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r3, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r4, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) 130.155969ms ago: executing program 3 (id=160): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 110.310329ms ago: executing program 3 (id=161): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x0, 0x4, 0x1, 0x7}], 0x10, 0x26}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") 25.72998ms ago: executing program 3 (id=162): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) rename(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0x3}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a0084210000"], 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r10, 0x5453, 0x0) 0s ago: executing program 3 (id=163): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x0, 0x4, 0x1, 0x7}], 0x10, 0x26}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 25.765906][ T29] audit: type=1400 audit(1762516602.925:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.788975][ T29] audit: type=1400 audit(1762516602.945:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.789713][ T3303] cgroup: Unknown subsys name 'net' [ 25.816623][ T29] audit: type=1400 audit(1762516602.975:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.911440][ T3303] cgroup: Unknown subsys name 'cpuset' [ 25.917529][ T3303] cgroup: Unknown subsys name 'rlimit' [ 26.056892][ T29] audit: type=1400 audit(1762516603.215:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.080155][ T29] audit: type=1400 audit(1762516603.215:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.100625][ T29] audit: type=1400 audit(1762516603.215:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.107865][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.120955][ T29] audit: type=1400 audit(1762516603.215:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.149739][ T29] audit: type=1400 audit(1762516603.225:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.174488][ T29] audit: type=1400 audit(1762516603.225:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.183610][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.197793][ T29] audit: type=1400 audit(1762516603.285:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.127388][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 28.139924][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 28.207932][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.240184][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.256533][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.263635][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.270796][ T3313] bridge_slave_0: entered allmulticast mode [ 28.277066][ T3313] bridge_slave_0: entered promiscuous mode [ 28.297006][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.304153][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.311267][ T3318] bridge_slave_0: entered allmulticast mode [ 28.317454][ T3318] bridge_slave_0: entered promiscuous mode [ 28.327706][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.334768][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.342068][ T3318] bridge_slave_1: entered allmulticast mode [ 28.348271][ T3318] bridge_slave_1: entered promiscuous mode [ 28.354458][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.361524][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.368666][ T3313] bridge_slave_1: entered allmulticast mode [ 28.375086][ T3313] bridge_slave_1: entered promiscuous mode [ 28.385730][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 28.422104][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.446816][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.458858][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.472333][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.479365][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.486460][ T3316] bridge_slave_0: entered allmulticast mode [ 28.492755][ T3316] bridge_slave_0: entered promiscuous mode [ 28.499259][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.506322][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.513586][ T3316] bridge_slave_1: entered allmulticast mode [ 28.519858][ T3316] bridge_slave_1: entered promiscuous mode [ 28.527192][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.574941][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.582086][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.589281][ T3312] bridge_slave_0: entered allmulticast mode [ 28.595898][ T3312] bridge_slave_0: entered promiscuous mode [ 28.602954][ T3313] team0: Port device team_slave_0 added [ 28.611857][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.621924][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.631693][ T3318] team0: Port device team_slave_0 added [ 28.637427][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.644494][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.651638][ T3312] bridge_slave_1: entered allmulticast mode [ 28.657873][ T3312] bridge_slave_1: entered promiscuous mode [ 28.664531][ T3313] team0: Port device team_slave_1 added [ 28.688612][ T3318] team0: Port device team_slave_1 added [ 28.700384][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.728466][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.742385][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.749442][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.756618][ T3320] bridge_slave_0: entered allmulticast mode [ 28.762931][ T3320] bridge_slave_0: entered promiscuous mode [ 28.769750][ T3316] team0: Port device team_slave_0 added [ 28.779852][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.786825][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.812762][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.827932][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.835088][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.842186][ T3320] bridge_slave_1: entered allmulticast mode [ 28.848405][ T3320] bridge_slave_1: entered promiscuous mode [ 28.855038][ T3316] team0: Port device team_slave_1 added [ 28.861028][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.867976][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.893884][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.904781][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.911736][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.937692][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.949102][ T3312] team0: Port device team_slave_0 added [ 28.964186][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.971137][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.997236][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.013549][ T3312] team0: Port device team_slave_1 added [ 29.034739][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.044185][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.051139][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.077047][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.101930][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.111191][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.118118][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.144113][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.154982][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.161952][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.187839][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.218447][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.225416][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.251312][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.274880][ T3318] hsr_slave_0: entered promiscuous mode [ 29.281225][ T3318] hsr_slave_1: entered promiscuous mode [ 29.289660][ T3313] hsr_slave_0: entered promiscuous mode [ 29.295530][ T3313] hsr_slave_1: entered promiscuous mode [ 29.301397][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 29.307097][ T3313] Cannot create hsr debugfs directory [ 29.326961][ T3320] team0: Port device team_slave_0 added [ 29.339253][ T3312] hsr_slave_0: entered promiscuous mode [ 29.345243][ T3312] hsr_slave_1: entered promiscuous mode [ 29.351056][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 29.356773][ T3312] Cannot create hsr debugfs directory [ 29.373251][ T3320] team0: Port device team_slave_1 added [ 29.381021][ T3316] hsr_slave_0: entered promiscuous mode [ 29.387085][ T3316] hsr_slave_1: entered promiscuous mode [ 29.392918][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 29.398628][ T3316] Cannot create hsr debugfs directory [ 29.437789][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.444799][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.470762][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.496336][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.503341][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.529287][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.602280][ T3320] hsr_slave_0: entered promiscuous mode [ 29.608216][ T3320] hsr_slave_1: entered promiscuous mode [ 29.614138][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 29.619849][ T3320] Cannot create hsr debugfs directory [ 29.713725][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.723242][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.732009][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.741971][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.764766][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.775278][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.793998][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.802583][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.827916][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.840931][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.854180][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.864527][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.881219][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.890932][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.903604][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.912308][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.924912][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.940195][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.949493][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.956546][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.967433][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.974483][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.999715][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.008787][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.020512][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.038366][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.047331][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.064203][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.077741][ T2135] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.084856][ T2135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.098481][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.105543][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.158014][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.172995][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.185586][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.198605][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.212871][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.219951][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.233802][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.240875][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.259547][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.270020][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.283395][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.290432][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.327763][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.338267][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.356005][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.363110][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.379845][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.400123][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.429901][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.446565][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.465697][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.482622][ T2135] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.489668][ T2135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.535669][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.542823][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.554461][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.570872][ T3312] veth0_vlan: entered promiscuous mode [ 30.601554][ T3312] veth1_vlan: entered promiscuous mode [ 30.619119][ T3320] veth0_vlan: entered promiscuous mode [ 30.627060][ T3320] veth1_vlan: entered promiscuous mode [ 30.642234][ T3316] veth0_vlan: entered promiscuous mode [ 30.654755][ T3316] veth1_vlan: entered promiscuous mode [ 30.664431][ T3312] veth0_macvtap: entered promiscuous mode [ 30.672315][ T3312] veth1_macvtap: entered promiscuous mode [ 30.688206][ T3316] veth0_macvtap: entered promiscuous mode [ 30.703807][ T3316] veth1_macvtap: entered promiscuous mode [ 30.723709][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.731822][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.740361][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.749630][ T3320] veth0_macvtap: entered promiscuous mode [ 30.757372][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.772413][ T3320] veth1_macvtap: entered promiscuous mode [ 30.784787][ T140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.794336][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.810072][ T140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.824565][ T140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.834318][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.846596][ T140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.857019][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.871999][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 30.872011][ T29] audit: type=1400 audit(1762516608.035:81): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.O8YJRr/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.878025][ T3313] veth0_vlan: entered promiscuous mode [ 30.891189][ T29] audit: type=1400 audit(1762516608.055:82): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.932197][ T29] audit: type=1400 audit(1762516608.065:83): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.O8YJRr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.932787][ T140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.957432][ T29] audit: type=1400 audit(1762516608.065:84): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.987860][ T29] audit: type=1400 audit(1762516608.065:85): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.O8YJRr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.014522][ T29] audit: type=1400 audit(1762516608.065:86): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.O8YJRr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.041869][ T29] audit: type=1400 audit(1762516608.065:87): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.061412][ T29] audit: type=1400 audit(1762516608.085:88): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.084100][ T29] audit: type=1400 audit(1762516608.095:89): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=3786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.112018][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.128388][ T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.148912][ T29] audit: type=1400 audit(1762516608.305:90): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.157389][ T140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.185627][ T3313] veth1_vlan: entered promiscuous mode [ 31.200265][ T3318] veth0_vlan: entered promiscuous mode [ 31.215836][ T140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.237358][ T3313] veth0_macvtap: entered promiscuous mode [ 31.245746][ T3313] veth1_macvtap: entered promiscuous mode [ 31.256128][ T3318] veth1_vlan: entered promiscuous mode [ 31.265904][ T414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.293579][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.302880][ T414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.311915][ T414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.320619][ T414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.335092][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.405721][ T3318] veth0_macvtap: entered promiscuous mode [ 31.413280][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.422029][ T414] Bluetooth: hci0: Frame reassembly failed (-84) [ 31.432110][ T3492] loop0: detected capacity change from 0 to 1024 [ 31.438556][ T3486] loop2: detected capacity change from 0 to 2048 [ 31.445529][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.455106][ T3492] ======================================================= [ 31.455106][ T3492] WARNING: The mand mount option has been deprecated and [ 31.455106][ T3492] and is ignored by this kernel. Remove the mand [ 31.455106][ T3492] option from the mount to silence this warning. [ 31.455106][ T3492] ======================================================= [ 31.463576][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.500506][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.509875][ T3486] /dev/loop2: Can't open blockdev [ 31.528429][ T3492] EXT4-fs: Ignoring removed nobh option [ 31.531007][ T3318] veth1_macvtap: entered promiscuous mode [ 31.534184][ T3492] EXT4-fs: Ignoring removed bh option [ 31.548933][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.573619][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.607488][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.629936][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.630454][ T3492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.645625][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.666785][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.748365][ T3511] loop4: detected capacity change from 0 to 8192 [ 31.756320][ T3511] vfat: Unknown parameter '0x0000000000000003' [ 31.794520][ T3492] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 31.836093][ T3492] EXT4-fs (loop0): Remounting filesystem read-only [ 31.848606][ T52] Bluetooth: hci1: Frame reassembly failed (-84) [ 31.871346][ T3522] netlink: 'syz.4.10': attribute type 39 has an invalid length. [ 31.881570][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.005837][ T52] Bluetooth: hci2: Frame reassembly failed (-84) [ 32.659557][ T3534] loop2: detected capacity change from 0 to 512 [ 32.674670][ T3534] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 32.689494][ T3534] EXT4-fs (loop2): mount failed [ 32.771899][ T3545] syzkaller0: entered promiscuous mode [ 32.777397][ T3545] syzkaller0: entered allmulticast mode [ 32.970749][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 33.410635][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.443598][ T3559] tmpfs: Unknown parameter 'nr_b' [ 33.513663][ T3563] loop1: detected capacity change from 0 to 8192 [ 33.520254][ T3563] vfat: Unknown parameter '0x0000000000000003' [ 33.635841][ T3566] netlink: 'syz.1.26': attribute type 39 has an invalid length. [ 33.732258][ T3573] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 33.890704][ T3494] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 33.890922][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 34.011142][ T3590] netlink: 'syz.3.31': attribute type 1 has an invalid length. [ 34.018723][ T3590] netlink: 224 bytes leftover after parsing attributes in process `syz.3.31'. [ 34.053847][ T3494] Bluetooth: hci2: command 0x1003 tx timeout [ 34.060038][ T3495] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 34.142467][ T3594] loop0: detected capacity change from 0 to 8192 [ 34.149031][ T3594] vfat: Unknown parameter '0x0000000000000003' [ 34.248694][ T3605] lo speed is unknown, defaulting to 1000 [ 34.255072][ T3605] lo speed is unknown, defaulting to 1000 [ 34.261416][ T3605] lo speed is unknown, defaulting to 1000 [ 34.267744][ T3606] netlink: 'syz.0.32': attribute type 39 has an invalid length. [ 34.292836][ T3605] infiniband sz1: set active [ 34.297603][ T3605] infiniband sz1: added lo [ 34.302149][ T3388] lo speed is unknown, defaulting to 1000 [ 34.317005][ T3605] RDS/IB: sz1: added [ 34.322629][ T3605] smc: adding ib device sz1 with port count 1 [ 34.328829][ T3605] smc: ib device sz1 port 1 has no pnetid [ 34.335720][ T3605] lo speed is unknown, defaulting to 1000 [ 34.341512][ T36] lo speed is unknown, defaulting to 1000 [ 34.363108][ T3611] loop1: detected capacity change from 0 to 128 [ 34.378433][ T3611] syz.1.38: attempt to access beyond end of device [ 34.378433][ T3611] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 34.380760][ T3605] lo speed is unknown, defaulting to 1000 [ 34.391626][ T3611] Buffer I/O error on dev loop1, logical block 2078, async page read [ 34.412832][ T3611] syz.1.38: attempt to access beyond end of device [ 34.412832][ T3611] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 34.422958][ T3605] lo speed is unknown, defaulting to 1000 [ 34.425921][ T3611] Buffer I/O error on dev loop1, logical block 2078, async page read [ 34.440105][ T3611] syz.1.38: attempt to access beyond end of device [ 34.440105][ T3611] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 34.453219][ T3611] Buffer I/O error on dev loop1, logical block 2078, async page read [ 34.458521][ T3605] lo speed is unknown, defaulting to 1000 [ 34.461868][ T3611] syz.1.38: attempt to access beyond end of device [ 34.461868][ T3611] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 34.480362][ T3611] Buffer I/O error on dev loop1, logical block 2078, async page read [ 34.489708][ T3611] syz.1.38: attempt to access beyond end of device [ 34.489708][ T3611] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 34.502795][ T3611] Buffer I/O error on dev loop1, logical block 2078, async page read [ 34.508805][ T3605] lo speed is unknown, defaulting to 1000 [ 34.511388][ T3611] syz.1.38: attempt to access beyond end of device [ 34.511388][ T3611] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 34.529748][ T3611] Buffer I/O error on dev loop1, logical block 2078, async page read [ 34.539537][ T3611] syz.1.38: attempt to access beyond end of device [ 34.539537][ T3611] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 34.552616][ T3611] Buffer I/O error on dev loop1, logical block 2078, async page read [ 34.561546][ T3611] syz.1.38: attempt to access beyond end of device [ 34.561546][ T3611] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 34.574682][ T3611] Buffer I/O error on dev loop1, logical block 2078, async page read [ 34.590727][ T3611] syz.1.38: attempt to access beyond end of device [ 34.590727][ T3611] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 34.603942][ T3611] Buffer I/O error on dev loop1, logical block 2078, async page read [ 34.612619][ T3611] syz.1.38: attempt to access beyond end of device [ 34.612619][ T3611] loop1: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 34.625689][ T3611] Buffer I/O error on dev loop1, logical block 2078, async page read [ 34.642356][ T3614] syzkaller0: entered promiscuous mode [ 34.647875][ T3614] syzkaller0: entered allmulticast mode [ 34.691484][ T3605] syz.3.37 (3605) used greatest stack depth: 10584 bytes left [ 34.795180][ T3623] netlink: 156 bytes leftover after parsing attributes in process `syz.3.43'. [ 34.804321][ T3623] netlink: 156 bytes leftover after parsing attributes in process `syz.3.43'. [ 34.931321][ T414] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.937867][ T414] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.020627][ T3494] Bluetooth: hci3: command 0x1003 tx timeout [ 35.026670][ T3528] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 35.222000][ T3642] loop4: detected capacity change from 0 to 8192 [ 35.252169][ T3642] vfat: Unknown parameter '0x0000000000000003' [ 35.362814][ T3649] netlink: 176 bytes leftover after parsing attributes in process `syz.1.51'. [ 35.369058][ T3650] netlink: 'syz.4.48': attribute type 39 has an invalid length. [ 35.468784][ T3652] loop1: detected capacity change from 0 to 8192 [ 35.501026][ T3652] loop1: p2 p4 [ 35.504717][ T3652] loop1: p2 start 930308 is beyond EOD, truncated [ 35.511241][ T3652] loop1: p4 size 262144 extends beyond EOD, truncated [ 35.539655][ T3652] bond0: (slave bond_slave_1): Releasing backup interface [ 35.584411][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 35.636219][ T3659] loop1: detected capacity change from 0 to 512 [ 35.652835][ T3659] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.667840][ T3659] EXT4-fs (loop1): mount failed [ 35.695120][ T3666] FAULT_INJECTION: forcing a failure. [ 35.695120][ T3666] name failslab, interval 1, probability 0, space 0, times 1 [ 35.707913][ T3666] CPU: 0 UID: 0 PID: 3666 Comm: syz.1.56 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.707942][ T3666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 35.707954][ T3666] Call Trace: [ 35.707960][ T3666] [ 35.707968][ T3666] __dump_stack+0x1d/0x30 [ 35.707997][ T3666] dump_stack_lvl+0xe8/0x140 [ 35.708074][ T3666] dump_stack+0x15/0x1b [ 35.708094][ T3666] should_fail_ex+0x265/0x280 [ 35.708116][ T3666] should_failslab+0x8c/0xb0 [ 35.708147][ T3666] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 35.708217][ T3666] ? __alloc_skb+0x101/0x320 [ 35.708265][ T3666] __alloc_skb+0x101/0x320 [ 35.708297][ T3666] netlink_alloc_large_skb+0xbf/0xf0 [ 35.708332][ T3666] netlink_sendmsg+0x3cf/0x6b0 [ 35.708403][ T3666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.708423][ T3666] __sock_sendmsg+0x145/0x180 [ 35.708449][ T3666] ____sys_sendmsg+0x31e/0x4e0 [ 35.708472][ T3666] ___sys_sendmsg+0x17b/0x1d0 [ 35.708504][ T3666] __x64_sys_sendmsg+0xd4/0x160 [ 35.708576][ T3666] x64_sys_call+0x191e/0x3000 [ 35.708601][ T3666] do_syscall_64+0xd2/0x200 [ 35.708666][ T3666] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 35.708751][ T3666] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 35.708782][ T3666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.708803][ T3666] RIP: 0033:0x7f8783e9f6c9 [ 35.708875][ T3666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.708892][ T3666] RSP: 002b:00007f87828ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.708912][ T3666] RAX: ffffffffffffffda RBX: 00007f87840f5fa0 RCX: 00007f8783e9f6c9 [ 35.708925][ T3666] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 35.708938][ T3666] RBP: 00007f87828ff090 R08: 0000000000000000 R09: 0000000000000000 [ 35.708950][ T3666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.709037][ T3666] R13: 00007f87840f6038 R14: 00007f87840f5fa0 R15: 00007ffc5566dc68 [ 35.709055][ T3666] [ 35.938254][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 35.938269][ T29] audit: type=1326 audit(1762516613.095:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8783e9f6c9 code=0x7ffc0000 [ 35.967663][ T29] audit: type=1326 audit(1762516613.095:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8783e9f6c9 code=0x7ffc0000 [ 35.991136][ T29] audit: type=1326 audit(1762516613.095:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f8783e9f6c9 code=0x7ffc0000 [ 36.014605][ T29] audit: type=1326 audit(1762516613.095:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8783e9f6c9 code=0x7ffc0000 [ 36.037913][ T29] audit: type=1326 audit(1762516613.095:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8783e9f6c9 code=0x7ffc0000 [ 36.061883][ T29] audit: type=1326 audit(1762516613.095:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8783e9f6c9 code=0x7ffc0000 [ 36.085408][ T29] audit: type=1326 audit(1762516613.095:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8783e9f6c9 code=0x7ffc0000 [ 36.108663][ T29] audit: type=1326 audit(1762516613.095:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8783e9f6c9 code=0x7ffc0000 [ 36.131803][ T29] audit: type=1326 audit(1762516613.095:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8783e9f6c9 code=0x7ffc0000 [ 36.155280][ T29] audit: type=1326 audit(1762516613.095:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.1.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8783e9f6c9 code=0x7ffc0000 [ 36.263042][ T3676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.57'. [ 36.271913][ T3676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.57'. [ 36.370177][ T3686] rdma_rxe: rxe_newlink: failed to add lo [ 36.440186][ T3692] loop4: detected capacity change from 0 to 8192 [ 36.490814][ T3306] loop4: p2 p4 [ 36.494409][ T3306] loop4: p2 start 930308 is beyond EOD, truncated [ 36.500909][ T3306] loop4: p4 size 262144 extends beyond EOD, truncated [ 36.510015][ T3692] loop4: p2 p4 [ 36.515605][ T3692] loop4: p2 start 930308 is beyond EOD, truncated [ 36.522048][ T3692] loop4: p4 size 262144 extends beyond EOD, truncated [ 36.586939][ T3692] bond0: (slave bond_slave_1): Releasing backup interface [ 36.757294][ T3702] infiniband v¯±­: set active [ 36.762046][ T3702] infiniband v¯±­: added bond0 [ 36.767245][ T3702] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 36.767463][ T3702] infiniband v¯±­: Couldn't open port 1 [ 36.794072][ T3702] RDS/IB: v¯±­: added [ 36.800200][ T3702] smc: adding ib device v¯±­ with port count 1 [ 36.824100][ T3702] smc: ib device v¯±­ port 1 has no pnetid [ 36.832696][ T3709] FAULT_INJECTION: forcing a failure. [ 36.832696][ T3709] name failslab, interval 1, probability 0, space 0, times 0 [ 36.845325][ T3709] CPU: 0 UID: 0 PID: 3709 Comm: syz.1.69 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.845366][ T3709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.845379][ T3709] Call Trace: [ 36.845385][ T3709] [ 36.845393][ T3709] __dump_stack+0x1d/0x30 [ 36.845417][ T3709] dump_stack_lvl+0xe8/0x140 [ 36.845439][ T3709] dump_stack+0x15/0x1b [ 36.845509][ T3709] should_fail_ex+0x265/0x280 [ 36.845527][ T3709] should_failslab+0x8c/0xb0 [ 36.845559][ T3709] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 36.845588][ T3709] ? sidtab_sid2str_get+0xa0/0x130 [ 36.845646][ T3709] kmemdup_noprof+0x2b/0x70 [ 36.845675][ T3709] sidtab_sid2str_get+0xa0/0x130 [ 36.845708][ T3709] security_sid_to_context_core+0x1eb/0x2e0 [ 36.845821][ T3709] security_sid_to_context+0x27/0x40 [ 36.845847][ T3709] selinux_lsmprop_to_secctx+0x67/0xf0 [ 36.845880][ T3709] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 36.845978][ T3709] audit_log_subj_ctx+0xa4/0x3e0 [ 36.846002][ T3709] ? skb_put+0xa9/0xf0 [ 36.846031][ T3709] audit_log_task_context+0x48/0x70 [ 36.846057][ T3709] audit_log_task+0xf4/0x250 [ 36.846090][ T3709] ? kstrtouint+0x76/0xc0 [ 36.846142][ T3709] audit_seccomp+0x61/0x100 [ 36.846188][ T3709] ? __seccomp_filter+0x82d/0x1250 [ 36.846268][ T3709] __seccomp_filter+0x83e/0x1250 [ 36.846354][ T3709] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 36.846385][ T3709] ? vfs_write+0x7e8/0x960 [ 36.846415][ T3709] __secure_computing+0x82/0x150 [ 36.846440][ T3709] syscall_trace_enter+0xcf/0x1e0 [ 36.846502][ T3709] do_syscall_64+0xac/0x200 [ 36.846525][ T3709] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.846554][ T3709] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.846656][ T3709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.846679][ T3709] RIP: 0033:0x7f8783e9f6c9 [ 36.846769][ T3709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.846786][ T3709] RSP: 002b:00007f87828ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 36.846807][ T3709] RAX: ffffffffffffffda RBX: 00007f87840f5fa0 RCX: 00007f8783e9f6c9 [ 36.846875][ T3709] RDX: 00000000000190da RSI: 0000200000000000 RDI: 0000000000000003 [ 36.846888][ T3709] RBP: 00007f87828ff090 R08: 0000000000000000 R09: 0000000000000000 [ 36.846903][ T3709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.846916][ T3709] R13: 00007f87840f6038 R14: 00007f87840f5fa0 R15: 00007ffc5566dc68 [ 36.847000][ T3709] [ 37.100063][ T3709] SELinux: failed to load policy [ 37.105468][ T3495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.111731][ T3528] Bluetooth: hci0: command 0x1003 tx timeout [ 37.132793][ T3709] mmap: syz.1.69 (3709) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.197065][ T3712] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 37.204807][ T3712] netlink: 224 bytes leftover after parsing attributes in process `syz.3.71'. [ 37.420280][ T3729] Zero length message leads to an empty skb [ 37.588117][ T140] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.784514][ T3736] netlink: 152 bytes leftover after parsing attributes in process `syz.3.76'. [ 37.954623][ T3752] loop3: detected capacity change from 0 to 4096 [ 37.961334][ T3752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.970431][ T3752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.998961][ T3752] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 38.028674][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.099643][ T3762] FAULT_INJECTION: forcing a failure. [ 38.099643][ T3762] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.112779][ T3762] CPU: 0 UID: 0 PID: 3762 Comm: syz.3.85 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.112809][ T3762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 38.112820][ T3762] Call Trace: [ 38.112833][ T3762] [ 38.112840][ T3762] __dump_stack+0x1d/0x30 [ 38.112860][ T3762] dump_stack_lvl+0xe8/0x140 [ 38.112879][ T3762] dump_stack+0x15/0x1b [ 38.112907][ T3762] should_fail_ex+0x265/0x280 [ 38.112927][ T3762] should_fail+0xb/0x20 [ 38.112944][ T3762] should_fail_usercopy+0x1a/0x20 [ 38.113024][ T3762] _copy_from_user+0x1c/0xb0 [ 38.113039][ T3762] ___sys_sendmsg+0xc1/0x1d0 [ 38.113056][ T3762] __x64_sys_sendmsg+0xd4/0x160 [ 38.113069][ T3762] x64_sys_call+0x191e/0x3000 [ 38.113087][ T3762] do_syscall_64+0xd2/0x200 [ 38.113158][ T3762] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 38.113174][ T3762] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 38.113192][ T3762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.113204][ T3762] RIP: 0033:0x7f0b294ff6c9 [ 38.113246][ T3762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.113256][ T3762] RSP: 002b:00007f0b27f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.113268][ T3762] RAX: ffffffffffffffda RBX: 00007f0b29755fa0 RCX: 00007f0b294ff6c9 [ 38.113275][ T3762] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 38.113353][ T3762] RBP: 00007f0b27f67090 R08: 0000000000000000 R09: 0000000000000000 [ 38.113360][ T3762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.113367][ T3762] R13: 00007f0b29756038 R14: 00007f0b29755fa0 R15: 00007ffeb4da6f78 [ 38.113377][ T3762] [ 38.346206][ T3766] loop1: detected capacity change from 0 to 128 [ 38.355615][ T3766] EXT4-fs: Ignoring removed nobh option [ 38.366897][ T3766] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.379555][ T3766] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.403475][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.461795][ T3774] loop1: detected capacity change from 0 to 8192 [ 38.469391][ T3774] vfat: Unknown parameter '0x0000000000000003' [ 38.500796][ T3776] tipc: Started in network mode [ 38.505701][ T3776] tipc: Node identity 024219d0a91e, cluster identity 4711 [ 38.512890][ T3776] tipc: Enabled bearer , priority 0 [ 38.519859][ T3776] syzkaller0: entered promiscuous mode [ 38.525345][ T3776] syzkaller0: entered allmulticast mode [ 38.535521][ T3776] tipc: Resetting bearer [ 38.542180][ T3775] tipc: Resetting bearer [ 38.549069][ T3775] tipc: Disabling bearer [ 38.589073][ T3778] netlink: 'syz.1.88': attribute type 39 has an invalid length. [ 38.660848][ T3788] loop2: detected capacity change from 0 to 512 [ 38.673340][ T3788] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 38.689998][ T3788] EXT4-fs (loop2): 1 truncate cleaned up [ 38.696189][ T3788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.711545][ T3788] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 4: comm syz.2.95: lblock 0 mapped to illegal pblock 4 (length 1) [ 38.725580][ T3788] EXT4-fs (loop2): Remounting filesystem read-only [ 38.744792][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.774337][ T3791] syz.3.96 (3791) used greatest stack depth: 10160 bytes left [ 38.792643][ T3800] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 38.800208][ T3800] netlink: 224 bytes leftover after parsing attributes in process `syz.3.99'. [ 39.019872][ T3825] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 39.026615][ T3825] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 39.034763][ T3825] vhci_hcd vhci_hcd.0: Device attached [ 39.042687][ T3826] vhci_hcd: connection closed [ 39.042815][ T31] vhci_hcd: stop threads [ 39.051775][ T31] vhci_hcd: release socket [ 39.056232][ T31] vhci_hcd: disconnect device [ 39.357423][ T140] Bluetooth: hci1: Frame reassembly failed (-84) [ 39.575859][ T3833] FAULT_INJECTION: forcing a failure. [ 39.575859][ T3833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.588960][ T3833] CPU: 1 UID: 0 PID: 3833 Comm: syz.3.111 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.588986][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.588997][ T3833] Call Trace: [ 39.589003][ T3833] [ 39.589016][ T3833] __dump_stack+0x1d/0x30 [ 39.589037][ T3833] dump_stack_lvl+0xe8/0x140 [ 39.589113][ T3833] dump_stack+0x15/0x1b [ 39.589123][ T3833] should_fail_ex+0x265/0x280 [ 39.589135][ T3833] should_fail+0xb/0x20 [ 39.589205][ T3833] should_fail_usercopy+0x1a/0x20 [ 39.589216][ T3833] _copy_from_user+0x1c/0xb0 [ 39.589329][ T3833] simple_transaction_get+0xe2/0x130 [ 39.589363][ T3833] selinux_transaction_write+0x9d/0x110 [ 39.589376][ T3833] ? __pfx_selinux_transaction_write+0x10/0x10 [ 39.589448][ T3833] vfs_write+0x269/0x960 [ 39.589478][ T3833] ? __rcu_read_unlock+0x4f/0x70 [ 39.589493][ T3833] ? __fget_files+0x184/0x1c0 [ 39.589509][ T3833] ksys_write+0xda/0x1a0 [ 39.589654][ T3833] __x64_sys_write+0x40/0x50 [ 39.589668][ T3833] x64_sys_call+0x2802/0x3000 [ 39.589680][ T3833] do_syscall_64+0xd2/0x200 [ 39.589692][ T3833] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.589722][ T3833] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.589742][ T3833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.589824][ T3833] RIP: 0033:0x7f0b294ff6c9 [ 39.589834][ T3833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.589844][ T3833] RSP: 002b:00007f0b27f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 39.589855][ T3833] RAX: ffffffffffffffda RBX: 00007f0b29755fa0 RCX: 00007f0b294ff6c9 [ 39.589862][ T3833] RDX: 0000000000000041 RSI: 0000200000000740 RDI: 0000000000000004 [ 39.589869][ T3833] RBP: 00007f0b27f67090 R08: 0000000000000000 R09: 0000000000000000 [ 39.589876][ T3833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.589955][ T3833] R13: 00007f0b29756038 R14: 00007f0b29755fa0 R15: 00007ffeb4da6f78 [ 39.589965][ T3833] [ 39.791276][ T3494] Bluetooth: hci0: command 0x1003 tx timeout [ 39.797387][ T3495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.809955][ T3835] sz1: rxe_newlink: already configured on lo [ 39.864563][ T3841] __nla_validate_parse: 2 callbacks suppressed [ 39.864579][ T3841] netlink: 156 bytes leftover after parsing attributes in process `syz.3.115'. [ 39.879791][ T3841] netlink: 156 bytes leftover after parsing attributes in process `syz.3.115'. [ 39.937501][ T3849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 39.956733][ T3847] FAULT_INJECTION: forcing a failure. [ 39.956733][ T3847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.969977][ T3847] CPU: 0 UID: 0 PID: 3847 Comm: syz.4.117 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.970009][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.970023][ T3847] Call Trace: [ 39.970030][ T3847] [ 39.970086][ T3847] __dump_stack+0x1d/0x30 [ 39.970110][ T3847] dump_stack_lvl+0xe8/0x140 [ 39.970132][ T3847] dump_stack+0x15/0x1b [ 39.970243][ T3847] should_fail_ex+0x265/0x280 [ 39.970262][ T3847] should_fail+0xb/0x20 [ 39.970278][ T3847] should_fail_usercopy+0x1a/0x20 [ 39.970324][ T3847] _copy_to_user+0x20/0xa0 [ 39.970355][ T3847] copy_siginfo_to_user+0x22/0xb0 [ 39.970385][ T3847] x64_setup_rt_frame+0x2b5/0x580 [ 39.970411][ T3847] arch_do_signal_or_restart+0x23e/0x440 [ 39.970428][ T3847] exit_to_user_mode_loop+0x77/0x110 [ 39.970478][ T3847] do_syscall_64+0x1d6/0x200 [ 39.970491][ T3847] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.970506][ T3847] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.970591][ T3847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.970612][ T3847] RIP: 0033:0x7f9f0125f6c9 [ 39.970626][ T3847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.970643][ T3847] RSP: 002b:00007f9effcbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 39.970709][ T3847] RAX: fffffffffffffffc RBX: 00007f9f014b5fa0 RCX: 00007f9f0125f6c9 [ 39.970722][ T3847] RDX: 00000000000000ca RSI: 0000200000000200 RDI: 0000000000000003 [ 39.970743][ T3847] RBP: 00007f9effcbf090 R08: 0000000000000000 R09: 0000000000000000 [ 39.970755][ T3847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.970766][ T3847] R13: 00007f9f014b6038 R14: 00007f9f014b5fa0 R15: 00007ffc03ee5838 [ 39.970780][ T3847] [ 40.190458][ T3857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 40.205904][ T3856] loop2: detected capacity change from 0 to 512 [ 40.214187][ T3857] SELinux: Context Ü is not valid (left unmapped). [ 40.221093][ T3853] loop4: detected capacity change from 0 to 8192 [ 40.233551][ T3853] vfat: Unknown parameter '0x0000000000000003' [ 40.281742][ T3856] EXT4-fs (loop2): too many log groups per flexible block group [ 40.289797][ T3856] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 40.296979][ T3856] EXT4-fs (loop2): mount failed [ 40.329957][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 40.375105][ T3866] netlink: 'syz.4.120': attribute type 39 has an invalid length. [ 40.515373][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.574271][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.623802][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.643190][ T3868] lo speed is unknown, defaulting to 1000 [ 40.674107][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.748918][ T31] bridge_slave_1: left allmulticast mode [ 40.754659][ T31] bridge_slave_1: left promiscuous mode [ 40.760337][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.768896][ T31] bridge_slave_0: left allmulticast mode [ 40.774674][ T31] bridge_slave_0: left promiscuous mode [ 40.780401][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.853045][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.863260][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.872978][ T31] bond0 (unregistering): Released all slaves [ 40.882637][ T3868] chnl_net:caif_netlink_parms(): no params data found [ 40.920938][ T3868] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.927998][ T3868] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.935547][ T3868] bridge_slave_0: entered allmulticast mode [ 40.942686][ T3868] bridge_slave_0: entered promiscuous mode [ 40.950208][ T3868] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.957412][ T3868] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.965057][ T3868] bridge_slave_1: entered allmulticast mode [ 40.972149][ T3868] bridge_slave_1: entered promiscuous mode [ 40.990399][ T31] hsr_slave_0: left promiscuous mode [ 40.999885][ T31] hsr_slave_1: left promiscuous mode [ 41.005523][ T29] kauditd_printk_skb: 555 callbacks suppressed [ 41.005534][ T29] audit: type=1400 audit(1762516618.165:889): avc: denied { read open } for pid=3885 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.005861][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.016146][ T29] audit: type=1400 audit(1762516618.175:890): avc: denied { getattr } for pid=3885 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.037211][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.099662][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.107110][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.120650][ T29] audit: type=1400 audit(1762516618.275:891): avc: denied { mount } for pid=3893 comm="syz.4.126" name="/" dev="ramfs" ino=6522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 41.120700][ T31] veth1_macvtap: left promiscuous mode [ 41.127611][ T29] audit: type=1400 audit(1762516618.285:892): avc: denied { add_name } for pid=3884 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.143071][ T31] veth0_macvtap: left promiscuous mode [ 41.148253][ T29] audit: type=1400 audit(1762516618.285:893): avc: denied { create } for pid=3884 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.178065][ T31] veth1_vlan: left promiscuous mode [ 41.204114][ T31] veth0_vlan: left promiscuous mode [ 41.207417][ T29] audit: type=1400 audit(1762516618.335:894): avc: denied { write } for pid=3884 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1361 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.235342][ T29] audit: type=1400 audit(1762516618.335:895): avc: denied { append } for pid=3884 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1361 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.260083][ T29] audit: type=1400 audit(1762516618.405:896): avc: denied { remove_name } for pid=3897 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1361 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.283389][ T29] audit: type=1400 audit(1762516618.405:897): avc: denied { unlink } for pid=3897 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1361 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.361759][ T31] team0 (unregistering): Port device team_slave_1 removed [ 41.371557][ T31] team0 (unregistering): Port device team_slave_0 removed [ 41.407447][ T3868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.420886][ T3495] Bluetooth: hci1: command 0x1003 tx timeout [ 41.430803][ T3900] bond1: entered allmulticast mode [ 41.436145][ T3900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.447020][ T3868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.448281][ T3528] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 41.474108][ T3900] FAULT_INJECTION: forcing a failure. [ 41.474108][ T3900] name failslab, interval 1, probability 0, space 0, times 0 [ 41.486838][ T3900] CPU: 1 UID: 0 PID: 3900 Comm: syz.4.127 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.486892][ T3900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.486899][ T3900] Call Trace: [ 41.486903][ T3900] [ 41.486908][ T3900] __dump_stack+0x1d/0x30 [ 41.486922][ T3900] dump_stack_lvl+0xe8/0x140 [ 41.486996][ T3900] dump_stack+0x15/0x1b [ 41.487006][ T3900] should_fail_ex+0x265/0x280 [ 41.487093][ T3900] should_failslab+0x8c/0xb0 [ 41.487110][ T3900] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 41.487127][ T3900] ? __alloc_skb+0x101/0x320 [ 41.487274][ T3900] __alloc_skb+0x101/0x320 [ 41.487312][ T3900] netlink_alloc_large_skb+0xbf/0xf0 [ 41.487330][ T3900] netlink_sendmsg+0x3cf/0x6b0 [ 41.487341][ T3900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.487405][ T3900] __sock_sendmsg+0x145/0x180 [ 41.487485][ T3900] ____sys_sendmsg+0x31e/0x4e0 [ 41.487497][ T3900] ___sys_sendmsg+0x17b/0x1d0 [ 41.487562][ T3900] __x64_sys_sendmsg+0xd4/0x160 [ 41.487637][ T3900] x64_sys_call+0x191e/0x3000 [ 41.487650][ T3900] do_syscall_64+0xd2/0x200 [ 41.487661][ T3900] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.487677][ T3900] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.487740][ T3900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.487794][ T3900] RIP: 0033:0x7f9f0125f6c9 [ 41.487804][ T3900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.487813][ T3900] RSP: 002b:00007f9effcbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.487825][ T3900] RAX: ffffffffffffffda RBX: 00007f9f014b5fa0 RCX: 00007f9f0125f6c9 [ 41.487832][ T3900] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d [ 41.487839][ T3900] RBP: 00007f9effcbf090 R08: 0000000000000000 R09: 0000000000000000 [ 41.487846][ T3900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.487909][ T3900] R13: 00007f9f014b6038 R14: 00007f9f014b5fa0 R15: 00007ffc03ee5838 [ 41.487919][ T3900] [ 41.716464][ T3868] team0: Port device team_slave_0 added [ 41.717971][ T3909] FAULT_INJECTION: forcing a failure. [ 41.717971][ T3909] name failslab, interval 1, probability 0, space 0, times 0 [ 41.723214][ T3868] team0: Port device team_slave_1 added [ 41.734697][ T3909] CPU: 1 UID: 0 PID: 3909 Comm: syz.1.130 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.734769][ T3909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.734781][ T3909] Call Trace: [ 41.734788][ T3909] [ 41.734796][ T3909] __dump_stack+0x1d/0x30 [ 41.734820][ T3909] dump_stack_lvl+0xe8/0x140 [ 41.734844][ T3909] dump_stack+0x15/0x1b [ 41.734862][ T3909] should_fail_ex+0x265/0x280 [ 41.734883][ T3909] should_failslab+0x8c/0xb0 [ 41.734970][ T3909] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 41.735003][ T3909] ? __get_vm_area_node+0x106/0x1d0 [ 41.735152][ T3909] __get_vm_area_node+0x106/0x1d0 [ 41.735196][ T3909] __vmalloc_node_range_noprof+0x28c/0xed0 [ 41.735263][ T3909] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 41.735354][ T3909] ? __rcu_read_unlock+0x4f/0x70 [ 41.735383][ T3909] ? cred_has_capability+0x210/0x280 [ 41.735445][ T3909] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 41.735482][ T3909] __vmalloc_noprof+0x83/0xc0 [ 41.735514][ T3909] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 41.735549][ T3909] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 41.735640][ T3909] ? bpf_prog_alloc+0x2a/0x150 [ 41.735704][ T3909] bpf_prog_alloc+0x3c/0x150 [ 41.735737][ T3909] bpf_prog_load+0x506/0x1100 [ 41.735765][ T3909] ? security_bpf+0x2b/0x90 [ 41.735793][ T3909] __sys_bpf+0x469/0x7c0 [ 41.735823][ T3909] __x64_sys_bpf+0x41/0x50 [ 41.735898][ T3909] x64_sys_call+0x2aee/0x3000 [ 41.735921][ T3909] do_syscall_64+0xd2/0x200 [ 41.735942][ T3909] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.735971][ T3909] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.736054][ T3909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.736073][ T3909] RIP: 0033:0x7f8783e9f6c9 [ 41.736087][ T3909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.736158][ T3909] RSP: 002b:00007f87828ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 41.736213][ T3909] RAX: ffffffffffffffda RBX: 00007f87840f5fa0 RCX: 00007f8783e9f6c9 [ 41.736227][ T3909] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 41.736240][ T3909] RBP: 00007f87828ff090 R08: 0000000000000000 R09: 0000000000000000 [ 41.736252][ T3909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.736264][ T3909] R13: 00007f87840f6038 R14: 00007f87840f5fa0 R15: 00007ffc5566dc68 [ 41.736282][ T3909] [ 41.736347][ T3909] syz.1.130: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 41.992418][ T3909] CPU: 1 UID: 0 PID: 3909 Comm: syz.1.130 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.992521][ T3909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.992534][ T3909] Call Trace: [ 41.992540][ T3909] [ 41.992583][ T3909] __dump_stack+0x1d/0x30 [ 41.992605][ T3909] dump_stack_lvl+0xe8/0x140 [ 41.992623][ T3909] dump_stack+0x15/0x1b [ 41.992639][ T3909] warn_alloc+0x12b/0x1a0 [ 41.992675][ T3909] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 41.992721][ T3909] ? __rcu_read_unlock+0x4f/0x70 [ 41.992751][ T3909] ? cred_has_capability+0x210/0x280 [ 41.992815][ T3909] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 41.992852][ T3909] __vmalloc_noprof+0x83/0xc0 [ 41.992945][ T3909] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 41.992978][ T3909] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 41.993009][ T3909] ? bpf_prog_alloc+0x2a/0x150 [ 41.993059][ T3909] bpf_prog_alloc+0x3c/0x150 [ 41.993091][ T3909] bpf_prog_load+0x506/0x1100 [ 41.993187][ T3909] ? security_bpf+0x2b/0x90 [ 41.993215][ T3909] __sys_bpf+0x469/0x7c0 [ 41.993239][ T3909] __x64_sys_bpf+0x41/0x50 [ 41.993269][ T3909] x64_sys_call+0x2aee/0x3000 [ 41.993354][ T3909] do_syscall_64+0xd2/0x200 [ 41.993376][ T3909] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.993404][ T3909] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.993458][ T3909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.993479][ T3909] RIP: 0033:0x7f8783e9f6c9 [ 41.993502][ T3909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.993518][ T3909] RSP: 002b:00007f87828ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 41.993615][ T3909] RAX: ffffffffffffffda RBX: 00007f87840f5fa0 RCX: 00007f8783e9f6c9 [ 41.993629][ T3909] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 41.993641][ T3909] RBP: 00007f87828ff090 R08: 0000000000000000 R09: 0000000000000000 [ 41.993653][ T3909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.993685][ T3909] R13: 00007f87840f6038 R14: 00007f87840f5fa0 R15: 00007ffc5566dc68 [ 41.993703][ T3909] [ 41.993720][ T3909] Mem-Info: [ 42.206526][ T3909] active_anon:6744 inactive_anon:0 isolated_anon:0 [ 42.206526][ T3909] active_file:8947 inactive_file:2246 isolated_file:0 [ 42.206526][ T3909] unevictable:0 dirty:44 writeback:0 [ 42.206526][ T3909] slab_reclaimable:3293 slab_unreclaimable:16487 [ 42.206526][ T3909] mapped:29297 shmem:182 pagetables:1141 [ 42.206526][ T3909] sec_pagetables:0 bounce:0 [ 42.206526][ T3909] kernel_misc_reclaimable:0 [ 42.206526][ T3909] free:1892025 free_pcp:12327 free_cma:0 [ 42.251210][ T3909] Node 0 active_anon:26976kB inactive_anon:0kB active_file:35788kB inactive_file:8984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117188kB dirty:176kB writeback:0kB shmem:728kB kernel_stack:3536kB pagetables:4564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 42.278319][ T3909] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 42.307893][ T3909] lowmem_reserve[]: 0 2881 7859 7859 [ 42.313292][ T3909] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 42.344615][ T3909] lowmem_reserve[]: 0 0 4978 4978 [ 42.349652][ T3909] Node 0 Normal free:4606116kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26976kB inactive_anon:0kB active_file:35788kB inactive_file:8984kB unevictable:0kB writepending:176kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:45680kB local_pcp:9496kB free_cma:0kB [ 42.382461][ T3909] lowmem_reserve[]: 0 0 0 0 [ 42.387050][ T3909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 42.399747][ T3909] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 42.415739][ T3909] Node 0 Normal: 387*4kB (M) 103*8kB (ME) 48*16kB (M) 37*32kB (M) 49*64kB (UME) 21*128kB (ME) 9*256kB (UME) 4*512kB (ME) 12*1024kB (UME) 4*2048kB (UM) 1116*4096kB (M) = 4606116kB [ 42.433618][ T3909] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 42.442903][ T3909] 11371 total pagecache pages [ 42.447546][ T3909] 0 pages in swap cache [ 42.451763][ T3909] Free swap = 124996kB [ 42.455938][ T3909] Total swap = 124996kB [ 42.460070][ T3909] 2097051 pages RAM [ 42.463875][ T3909] 0 pages HighMem/MovableOnly [ 42.468532][ T3909] 81087 pages reserved [ 42.496097][ T3868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.503114][ T3868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.529069][ T3868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.542198][ T3868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.549140][ T3868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.575112][ T3868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.590162][ T3915] loop4: detected capacity change from 0 to 512 [ 42.621736][ T3868] hsr_slave_0: entered promiscuous mode [ 42.628935][ T3868] hsr_slave_1: entered promiscuous mode [ 42.634977][ T3868] debugfs: 'hsr0' already exists in 'hsr' [ 42.640730][ T3868] Cannot create hsr debugfs directory [ 42.654154][ T3915] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 42.664289][ T3915] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.687745][ T3915] EXT4-fs (loop4): mount failed [ 42.792576][ T3939] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.828975][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 42.841563][ T3868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.870093][ T3868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.884304][ T3948] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.885965][ T3868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.905984][ T3868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.967371][ T3963] FAULT_INJECTION: forcing a failure. [ 42.967371][ T3963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.976670][ T3960] lo speed is unknown, defaulting to 1000 [ 42.980603][ T3963] CPU: 0 UID: 0 PID: 3963 Comm: syz.3.138 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.980704][ T3963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.980716][ T3963] Call Trace: [ 42.980722][ T3963] [ 42.980729][ T3963] __dump_stack+0x1d/0x30 [ 42.980752][ T3963] dump_stack_lvl+0xe8/0x140 [ 42.980804][ T3963] dump_stack+0x15/0x1b [ 42.980822][ T3963] should_fail_ex+0x265/0x280 [ 42.980843][ T3963] should_fail+0xb/0x20 [ 42.980860][ T3963] should_fail_usercopy+0x1a/0x20 [ 42.980882][ T3963] _copy_from_user+0x1c/0xb0 [ 42.980961][ T3963] __sys_bpf+0x183/0x7c0 [ 42.980999][ T3963] __x64_sys_bpf+0x41/0x50 [ 42.981031][ T3963] x64_sys_call+0x2aee/0x3000 [ 42.981055][ T3963] do_syscall_64+0xd2/0x200 [ 42.981084][ T3963] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.981173][ T3963] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.981207][ T3963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.981248][ T3963] RIP: 0033:0x7f0b294ff6c9 [ 42.981263][ T3963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.981290][ T3963] RSP: 002b:00007f0b27f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.981373][ T3963] RAX: ffffffffffffffda RBX: 00007f0b29755fa0 RCX: 00007f0b294ff6c9 [ 42.981386][ T3963] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000001 [ 42.981399][ T3963] RBP: 00007f0b27f67090 R08: 0000000000000000 R09: 0000000000000000 [ 42.981411][ T3963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.981477][ T3963] R13: 00007f0b29756038 R14: 00007f0b29755fa0 R15: 00007ffeb4da6f78 [ 42.981495][ T3963] [ 43.085199][ T3868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.219678][ T3868] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.228766][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.235882][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.272497][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.303047][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.310111][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.384836][ T3868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.413638][ T3990] loop3: detected capacity change from 0 to 512 [ 43.462515][ T3990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.477124][ T3990] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.489194][ T3990] capability: warning: `syz.3.143' uses deprecated v2 capabilities in a way that may be insecure [ 43.511254][ T3868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.541442][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.600802][ T4017] loop3: detected capacity change from 0 to 512 [ 43.623695][ T4017] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.638643][ T4017] EXT4-fs (loop3): mount failed [ 43.642972][ T3868] veth0_vlan: entered promiscuous mode [ 43.658698][ T3868] veth1_vlan: entered promiscuous mode [ 43.677432][ T3868] veth0_macvtap: entered promiscuous mode [ 43.684455][ T3868] veth1_macvtap: entered promiscuous mode [ 43.701333][ T3868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.717844][ T3868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.748453][ T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.770382][ T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.787287][ T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.804060][ T42] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.851675][ T4049] rdma_rxe: rxe_newlink: failed to add lo [ 44.610789][ T4066] loop4: detected capacity change from 0 to 2048 [ 44.622386][ T4066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.749210][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.775600][ T4074] netlink: 156 bytes leftover after parsing attributes in process `syz.3.154'. [ 44.784865][ T4074] netlink: 156 bytes leftover after parsing attributes in process `syz.3.154'. [ 44.812731][ T4078] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 44.820444][ T4078] netlink: 224 bytes leftover after parsing attributes in process `syz.4.153'. [ 44.827177][ T414] Bluetooth: hci1: Frame reassembly failed (-84) [ 44.885348][ T4088] FAULT_INJECTION: forcing a failure. [ 44.885348][ T4088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.898654][ T4088] CPU: 0 UID: 0 PID: 4088 Comm: syz.3.157 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.898685][ T4088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 44.898698][ T4088] Call Trace: [ 44.898704][ T4088] [ 44.898712][ T4088] __dump_stack+0x1d/0x30 [ 44.898739][ T4088] dump_stack_lvl+0xe8/0x140 [ 44.898762][ T4088] dump_stack+0x15/0x1b [ 44.898782][ T4088] should_fail_ex+0x265/0x280 [ 44.898803][ T4088] should_fail+0xb/0x20 [ 44.898821][ T4088] should_fail_usercopy+0x1a/0x20 [ 44.898843][ T4088] _copy_from_user+0x1c/0xb0 [ 44.898967][ T4088] ___sys_sendmsg+0xc1/0x1d0 [ 44.898996][ T4088] __x64_sys_sendmsg+0xd4/0x160 [ 44.899017][ T4088] x64_sys_call+0x191e/0x3000 [ 44.899052][ T4088] do_syscall_64+0xd2/0x200 [ 44.899091][ T4088] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.899176][ T4088] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.899207][ T4088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.899236][ T4088] RIP: 0033:0x7f0b294ff6c9 [ 44.899250][ T4088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.899266][ T4088] RSP: 002b:00007f0b27f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.899284][ T4088] RAX: ffffffffffffffda RBX: 00007f0b29755fa0 RCX: 00007f0b294ff6c9 [ 44.899296][ T4088] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000005 [ 44.899379][ T4088] RBP: 00007f0b27f67090 R08: 0000000000000000 R09: 0000000000000000 [ 44.899391][ T4088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.899403][ T4088] R13: 00007f0b29756038 R14: 00007f0b29755fa0 R15: 00007ffeb4da6f78 [ 44.899421][ T4088] [ 45.099127][ T4094] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 45.106888][ T4094] netlink: 224 bytes leftover after parsing attributes in process `syz.3.160'. [ 45.173930][ T4099] loop3: detected capacity change from 0 to 512 [ 45.198416][ T140] Bluetooth: hci2: Frame reassembly failed (-84) [ 45.205861][ T4099] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.220935][ T4099] EXT4-fs (loop3): mount failed [ 45.274750][ T4105] loop3: detected capacity change from 0 to 512 [ 45.288647][ T3003] ================================================================== [ 45.296753][ T3003] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 45.303932][ T3003] [ 45.306234][ T3003] write to 0xffff8881191fd3f0 of 8 bytes by task 3879 on cpu 1: [ 45.313834][ T3003] dentry_unlink_inode+0x65/0x260 [ 45.318856][ T3003] d_delete+0x164/0x180 [ 45.322997][ T3003] d_delete_notify+0x32/0x100 [ 45.327650][ T3003] vfs_unlink+0x30b/0x420 [ 45.331953][ T3003] do_unlinkat+0x24e/0x480 [ 45.336346][ T3003] __x64_sys_unlink+0x2e/0x40 [ 45.340660][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 45.341003][ T3003] x64_sys_call+0x2dcf/0x3000 [ 45.350250][ T3528] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.351606][ T3003] do_syscall_64+0xd2/0x200 [ 45.351629][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.368098][ T3003] [ 45.370410][ T3003] read to 0xffff8881191fd3f0 of 8 bytes by task 3003 on cpu 0: [ 45.377936][ T3003] step_into+0x122/0x7f0 [ 45.382178][ T3003] walk_component+0x162/0x220 [ 45.386850][ T3003] path_lookupat+0xfe/0x2a0 [ 45.391350][ T3003] filename_lookup+0x147/0x340 [ 45.396128][ T3003] do_readlinkat+0x7d/0x320 [ 45.400615][ T3003] __x64_sys_readlink+0x47/0x60 [ 45.405449][ T3003] x64_sys_call+0x28de/0x3000 [ 45.410117][ T3003] do_syscall_64+0xd2/0x200 [ 45.414634][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.420514][ T3003] [ 45.422822][ T3003] value changed: 0xffff8881047f8368 -> 0x0000000000000000 [ 45.429996][ T3003] [ 45.432304][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 45.438434][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.447704][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 45.457743][ T3003] ================================================================== [ 45.481505][ T4105] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.496579][ T4105] EXT4-fs (loop3): mount failed [ 46.860635][ T3528] Bluetooth: hci1: command 0x1003 tx timeout [ 46.860694][ T3495] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 47.250623][ T3495] Bluetooth: hci2: command 0x1003 tx timeout [ 47.250634][ T3494] Bluetooth: hci2: Opcode 0x1003 failed: -110