last executing test programs: 3.926398733s ago: executing program 0 (id=92): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) 3.75812268s ago: executing program 0 (id=93): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRESOCT], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) bind$can_raw(r3, &(0x7f0000000080), 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mlock(&(0x7f0000e1d000/0xe000)=nil, 0xe000) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000380), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0xffffffffffffff5c, 0x16, 0x0) 2.796026501s ago: executing program 0 (id=105): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 2.552029111s ago: executing program 3 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x5}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48084}, 0x0) 2.551574961s ago: executing program 3 (id=109): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)={0x30, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x30}}, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x8, 0x10000, 0x0, 0x18bb, 0x2, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000000)='cpu>00||!') 2.449758346s ago: executing program 3 (id=111): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 2.397079718s ago: executing program 3 (id=112): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x4, 0x5, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4a22, 0x0, @dev, 0x5}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f0000000340)="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", 0xfc) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x10, r2, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708820a625c2f902f67220000020900010073797a31000000002c000000030a010100000000000000000a0900030073797a3200000000140094e46de001"], 0x7c}, 0x1, 0x0, 0x0, 0x48810}, 0x2000c4c1) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a320000007b0ad0001c0004f7e6cc4d800d00010073796e70726f787900000000040202800900010073797a3100000000140000001100010000000000000000000e"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x24000840) syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYRES16=r6], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000059739b196e66e3f171d4000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000b7030000e8fffdc123fd7f876e9f0e80c7950bbebc568a9e1597cd7b640e67f7308abb21993785fba2ffde19156ad4cee061dd7ae0fc5147817d5bb7298b80cf2228732a4e4757cc0ee094144e2dfffc9b85000000000000df952a549f8a68d5032baee3e692dc05f306fd90afb372d32af2fe99bac8cc01dda2bf2ab3d40ff8edb64003b290de846f564faa9b78f46acdc85b687c6146b84f72e020e70c00", @ANYBLOB="8d5b8640f53acf30ad86862bd113db14949c78f2406436761b31a943fe4e319058f7a4467324fde57882fa50d65bd161ad5259e27e5e6956450cc44f510ec2fa549dac5644bf62aaea6a383a3620a1c75944c437d561994e90a631c86639c6c20878b2023b2db9544e46a7ec609539bebe04d93a78dff8dae625ca6a679189b10d259f1da53cbf07236420981554c86b3e50a6f2c87bf81c253de73baa244ffbadca34"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$getregset(0x4204, 0x0, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 2.396676608s ago: executing program 0 (id=113): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000080)={[{@inlinecrypt}, {@acl}, {@i_version}, {@grpquota}, {@nombcache}, {@noinit_itable}]}, 0x0, 0x481, &(0x7f0000001300)="$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") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) 1.959866806s ago: executing program 1 (id=114): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x40, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="c90cb33127c95db62a359868be74f92ca9ae5e8f61b43066c83cb71f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000002f80)='task_rename\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000100000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0xff, r7, 0x5}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00'}, 0x18) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_read_part_table(0x5d6, &(0x7f0000000600)="$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") 1.868167261s ago: executing program 1 (id=115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0, 0x1000000}, 0x32) 1.804230274s ago: executing program 1 (id=116): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1bc, 0x65, 0x100, 0x170bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x17c, 0x2, [@TCA_BPF_ACT={0x140, 0x1, [@m_skbedit={0x13c, 0x11, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4b0, 0x29, 0x10000000, 0x9, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa1}]}, {0xd5, 0x6, "30cbb705b416ba0830f20a58294437adf387be2c5c0be289398c099b2e0fad0a4e749a52e1f5a75d291f8d128db69182792fc2d2dbf61c190aa5138085d5d1951d7457c5c0b4920793d96054893043f112825e710e6e179fa7d28f3c6acd5d743d405349005c0f6844ffcfe048e388a1892a78b93651bb59aba27cca473a0b429df512055b4c2f60e2129626ee8e15fb1bf13e9eee7666aeb8dbadabba9390558fb564b10d8157063b659e8fef7826919e49eb188a131ccb59a77af84e69b3494839567e5e29a2241bc2664912b1c349e9"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_ACT={0x38, 0x1, [@m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x200400a0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1ff}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.796242924s ago: executing program 1 (id=117): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.64995441s ago: executing program 4 (id=122): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000240)=0x9, 0xa, 0x5) io_uring_setup(0x22625, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000001040)={0x20400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0x0], 0x1}, 0x58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10007) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}, {0x2}], 0xee01}, 0x18, 0x0) 1.524312395s ago: executing program 3 (id=123): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000240)=0x9, 0xa, 0x5) io_uring_setup(0x22625, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000001040)={0x20400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0x0], 0x1}, 0x58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10007) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}, {0x2}], 0xee01}, 0x18, 0x0) 1.388799661s ago: executing program 0 (id=124): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x40, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="c90cb33127c95db62a359868be74f92ca9ae5e8f61b43066c83cb71f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000002f80)='task_rename\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000100000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0xff, r7, 0x5}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00'}, 0x18) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_read_part_table(0x5d6, &(0x7f0000000600)="$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") 1.388074641s ago: executing program 2 (id=125): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) (fail_nth: 5) 1.106851883s ago: executing program 2 (id=126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0, 0x1000000}, 0x32) 1.106380173s ago: executing program 2 (id=127): bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000200000400000000000000000200"/51], 0x0, 0x4e, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"6b3bfb24a49cb307ac6500", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) timer_create(0x1, &(0x7f0000000280)={0x0, 0x2d, 0x4, @thr={&(0x7f0000000340)="f0c3343709711771791abbfaca85b53036cd530d6bab9c8242d1c4ec1befa7b80c831ad29d93b9f8fa9ffdc2dbaa24c361f7feac36387962499343dec85065f27204b3014627271074b0e26bd78d3e50b492227d93f52d5e836039f5cbecbb3bf00c1aa6f998f7bbd67863753b", &(0x7f0000000200)="d8dbfdf1ddfe5f45bbd3c9c3c0eae280f7f09d470d52ca6979969e20dc3e88ea59c98afdffbff4216bb1b3e625"}}, &(0x7f00000003c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000440)={{0x77359400}}, &(0x7f0000000540)) recvmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0, 0x0, 0x0, 0x40000}, 0x5}], 0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="4ba5048000"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100ec0001000000ddff0000000000e6ffffff0000000000000000008c05b8c5334168ace542e9ed6cc584d304000000000001009740e4"], 0x50) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{0x1000}], 0x1, 0xe4, 0x0, 0x0, 0x50, 0x2}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1.003130547s ago: executing program 0 (id=128): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xb9, 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 855.855584ms ago: executing program 1 (id=129): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x0, 0x2, {0xa, 0x4e23, 0x6, @private2}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000000300)="b6e312ed00cdb45cc7299b49ac728e5065c11f351a6d92ece465c9d21935df22fa70f91e0a082d9ac5dfb8c9ac55e81dbb0f6898d828901014e06c12773e20912d4bc6567b6c51f63d67557be8975687e65238f7072ec1cb9adb7b6f4957757ff1aeaff34067b3914db55aad9a50b78d4d0d24a47f468210601857e1260491cce1054aed3f4f9d1ae2289fd6f5fb3f452c29b658764db237a988aaeae3f72d094a38d7b6a88b331733b31fe970d6a1508be6b71b6100e1547b9a909730929c8f4d995ee9bb99655f8193a18e09487457bb372312aa34be877348cc7a8252856bed264d67", 0xe4}, {&(0x7f0000000400)="f85a33553003530becda3d0801eee07dddb00a278a41024189c15157f54f10eb0343b7d1a14aea1963a0e05c33b92451305394eb60b372fbf7d9ac3a6a263f9e3f0eda3f8d7de97b68381a7a95725e3d84a58701d597e2321ed1bd81ccce87886efd393bd6bf3a79c6df8f2fb0c906f3bffe4480402b0d781f7ee066843717c890fd77ed6bfcc638781c2cdcb179c9ae2cf8bbb32ddbec79d45e29b8aae3c0f1ea", 0xa1}], 0x3, &(0x7f0000003240)=ANY=[@ANYBLOB="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"], 0x1280}, 0x41) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000f80)=@req={0x3408, 0xfffffffe, 0x0, 0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2000) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, 0x0, 0x0) 788.440076ms ago: executing program 4 (id=130): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000010008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) 700.08319ms ago: executing program 4 (id=131): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x5}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48084}, 0x0) 689.317761ms ago: executing program 4 (id=132): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000002000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mount$9p_tcp(0x0, &(0x7f0000001040)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=tcp']) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x720, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10) 641.563923ms ago: executing program 3 (id=133): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f0000000240)=0x9, 0xa, 0x5) io_uring_setup(0x22625, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000001040)={0x20400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000001000)=[0x0], 0x1}, 0x58) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r2, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) fcntl$setsig(0xffffffffffffffff, 0xa, 0x10007) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="835b52229b288f9c730ff2fdcca1d9faa1c01548872c4c703cc684fc735376a5ae23df5b93ade647296287400056aeb8318150623b6be04a36f0f704"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x44, 0x0, 0x6, 0x6, 0x3, 0x2}, {0x3, 0x2, 0x7, 0x4, 0x0, 0x6}, 0x90000000, 0x82b8ca3e, 0x1d24}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9b4e7c312ffd1ff5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 581.717675ms ago: executing program 4 (id=134): mount$cgroup(0x0, 0x0, 0x0, 0x2008000, &(0x7f0000000180)={[{}]}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) kexec_load(0x4, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xa, &(0x7f0000000500)=@raw=[@jmp={0x5, 0x1, 0x8, 0xa, 0x2, 0x36, 0x10}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1259}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x19c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1c4}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) syz_pidfd_open(0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r1, 0x25, 0x1c, @val=@uprobe_multi={&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0, 0x4, 0xf96a], &(0x7f0000000400), 0x2, 0x3, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$nvram(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0xffffffffffffffff, 0x0, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) 532.690597ms ago: executing program 4 (id=135): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000080)={[{@inlinecrypt}, {@acl}, {@i_version}, {@grpquota}, {@nombcache}, {@noinit_itable}]}, 0x0, 0x481, &(0x7f0000001300)="$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") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) 89.659097ms ago: executing program 2 (id=136): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1ac, 0x65, 0x100, 0x170bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x16c, 0x2, [@TCA_BPF_ACT={0x124, 0x1, [@m_skbedit={0x120, 0x11, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4b0, 0x29, 0x10000000, 0x9, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa1}]}, {0xb9, 0x6, "30cbb705b416ba0830f20a58294437adf387be2c5c0be289398c099b2e0fad0a4e749a52e1f5a75d291f8d128db69182792fc2d2dbf61c190aa5138085d5d1951d7457c5c0b4920793d96054893043f112825e710e6e179fa7d28f3c6acd5d743d405349005c0f6844ffcfe048e388a1892a78b93651bb59aba27cca473a0b429df512055b4c2f60e2129626ee8e15fb1bf13e9eee7666aeb8dbadabba9390558fb564b10d8157063b659e8fef7826919e49eb188a"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_ACT={0x44, 0x1, [@m_connmark={0x40, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0xd, 0x6, "0fdc401c94aa908312"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x200400a0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x40000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 24.013689ms ago: executing program 2 (id=137): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x6, 0x6}, 0x800, 0x0, 0x800000, 0x0, 0x7fff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) (async) removexattr(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000400)=@known='user.incfs.size\x00') (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x25, 0x40}}, './cgroup.cpu/cgroup.procs\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000440)={0xfffffffd, {{0xa, 0x4e20, 0xc, @loopback, 0x9}}}, 0x88) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r8, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000600)={0x5, 0x101, 0x1, 'queue0\x00', 0x2c}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 23.811459ms ago: executing program 2 (id=138): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) exit(0x1f52b4ba) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/88, 0x58, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) creat(0x0, 0xecf86c37d53049cc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x4}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r9, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000380)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 0s ago: executing program 1 (id=139): clock_adjtime(0x0, &(0x7f0000000040)={0xf4f, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x201, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x100, 0x0, 0x1000000000, 0x104}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="adec5336481c39579c436c2deeaacd454d81e9528af3ce28f82d4403442623810dd38dbade4d06027eb4f84fe067ef3ff777a687ac24a808585a6e670d1876df893102289154d48fa0347b1a5142b2d74d49b9d93259c13635b27ae27109ea2e6b4d4d4ca795fc86505b97257da2b430c46d120705396d1120558105d6b9f40f853a4a6b039b776a59d414b25d982d8634fb990a16808900465724d5e2ab62756e37271b0da61f8c2548cccd0c4c116aacacb72b01684db7326eb58c3676c28d09429c92c9bf409feca74b989d4d8f02ceac138e52a52e6d43f929486a5b9013fe877eac94b27ea87443", @ANYRES16, @ANYRESDEC], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1, &(0x7f0000000780)={[{@nobh}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@norecovery}]}, 0x2, 0x484, &(0x7f0000001500)="$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") r2 = accept4$tipc(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f00000004c0)=0x10, 0x800) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000500), &(0x7f0000000580)=0x4) r3 = syz_io_uring_setup(0x73b2, 0x0, &(0x7f00000005c0), &(0x7f00000001c0)) syz_io_uring_setup(0x363f, &(0x7f0000000840)={0x0, 0x8f3c, 0x10010, 0xfffffffe, 0x0, 0x0, r3}, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x80, 0x7, 0x7, 0x7fff, 0x2, 0x5, 0xe, 0x2, 0x100000000, 0x10, 0x7, 0xee, 0x1, 0x2, 0x4, 0x5, 0x1, 0x3, 0x546, 0x0, 0x5, 0x4, 0xa41, 0x2, 0x5, 0x4e1}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000d82b9b00000000009500000000"], 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x44) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r6) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7, {0x10001}}, './file0\x00'}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmmsg$inet(r8, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r8, &(0x7f0000000300), 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.243' (ED25519) to the list of known hosts. [ 27.084303][ T29] audit: type=1400 audit(1764056738.649:62): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.107801][ T29] audit: type=1400 audit(1764056738.679:63): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.108776][ T3298] cgroup: Unknown subsys name 'net' [ 27.135530][ T29] audit: type=1400 audit(1764056738.709:64): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.247622][ T3298] cgroup: Unknown subsys name 'cpuset' [ 27.253952][ T3298] cgroup: Unknown subsys name 'rlimit' [ 27.385424][ T29] audit: type=1400 audit(1764056738.949:65): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.408785][ T29] audit: type=1400 audit(1764056738.949:66): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.425281][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.429331][ T29] audit: type=1400 audit(1764056738.949:67): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.458348][ T29] audit: type=1400 audit(1764056738.949:68): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.461071][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.478723][ T29] audit: type=1400 audit(1764056738.949:69): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.512130][ T29] audit: type=1400 audit(1764056738.949:70): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.536261][ T29] audit: type=1400 audit(1764056739.009:71): avc: denied { relabelto } for pid=3303 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.691329][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 28.797933][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.809659][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.818630][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.825708][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.832972][ T3310] bridge_slave_0: entered allmulticast mode [ 28.839578][ T3310] bridge_slave_0: entered promiscuous mode [ 28.846283][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.853454][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.860617][ T3310] bridge_slave_1: entered allmulticast mode [ 28.867146][ T3310] bridge_slave_1: entered promiscuous mode [ 28.889214][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.902498][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.916579][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 28.931689][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.968662][ T3310] team0: Port device team_slave_0 added [ 28.988484][ T3310] team0: Port device team_slave_1 added [ 29.037415][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.044569][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.051880][ T3316] bridge_slave_0: entered allmulticast mode [ 29.058636][ T3316] bridge_slave_0: entered promiscuous mode [ 29.074229][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.081235][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.107227][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.118504][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.125485][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.151394][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.162157][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.169309][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.176588][ T3316] bridge_slave_1: entered allmulticast mode [ 29.183042][ T3316] bridge_slave_1: entered promiscuous mode [ 29.216585][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.223803][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.230959][ T3312] bridge_slave_0: entered allmulticast mode [ 29.237342][ T3312] bridge_slave_0: entered promiscuous mode [ 29.244027][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.251276][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.258414][ T3312] bridge_slave_1: entered allmulticast mode [ 29.264849][ T3312] bridge_slave_1: entered promiscuous mode [ 29.297500][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.304643][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.311840][ T3314] bridge_slave_0: entered allmulticast mode [ 29.318200][ T3314] bridge_slave_0: entered promiscuous mode [ 29.325652][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.335014][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.342169][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.349329][ T3319] bridge_slave_0: entered allmulticast mode [ 29.355693][ T3319] bridge_slave_0: entered promiscuous mode [ 29.368603][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.377774][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.385013][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.392419][ T3314] bridge_slave_1: entered allmulticast mode [ 29.399155][ T3314] bridge_slave_1: entered promiscuous mode [ 29.406462][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.415712][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.423007][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.430220][ T3319] bridge_slave_1: entered allmulticast mode [ 29.436526][ T3319] bridge_slave_1: entered promiscuous mode [ 29.448534][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.474954][ T3310] hsr_slave_0: entered promiscuous mode [ 29.481044][ T3310] hsr_slave_1: entered promiscuous mode [ 29.508473][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.523114][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.533053][ T3312] team0: Port device team_slave_0 added [ 29.539486][ T3316] team0: Port device team_slave_0 added [ 29.546619][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.556608][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.571438][ T3312] team0: Port device team_slave_1 added [ 29.582567][ T3316] team0: Port device team_slave_1 added [ 29.618651][ T3314] team0: Port device team_slave_0 added [ 29.624936][ T3319] team0: Port device team_slave_0 added [ 29.640202][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.647216][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.673133][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.685046][ T3314] team0: Port device team_slave_1 added [ 29.691655][ T3319] team0: Port device team_slave_1 added [ 29.697659][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.704760][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.730826][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.743970][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.750953][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.776976][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.807186][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.814163][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.840279][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.885942][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.892973][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.918955][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.930082][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.937159][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.963081][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.983110][ T3312] hsr_slave_0: entered promiscuous mode [ 29.989146][ T3312] hsr_slave_1: entered promiscuous mode [ 29.995097][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 30.000856][ T3312] Cannot create hsr debugfs directory [ 30.007015][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.014043][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.039980][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.053870][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.060974][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.087038][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.102121][ T3316] hsr_slave_0: entered promiscuous mode [ 30.108276][ T3316] hsr_slave_1: entered promiscuous mode [ 30.114092][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 30.119884][ T3316] Cannot create hsr debugfs directory [ 30.187542][ T3314] hsr_slave_0: entered promiscuous mode [ 30.193747][ T3314] hsr_slave_1: entered promiscuous mode [ 30.199653][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 30.205384][ T3314] Cannot create hsr debugfs directory [ 30.213000][ T3319] hsr_slave_0: entered promiscuous mode [ 30.219093][ T3319] hsr_slave_1: entered promiscuous mode [ 30.225350][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 30.231108][ T3319] Cannot create hsr debugfs directory [ 30.378377][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.387310][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.396218][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.418634][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.447163][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.458140][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.470628][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.479980][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.511929][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.523433][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.534399][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.543559][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.569841][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.581244][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.590302][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.599591][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.637563][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.662789][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.672390][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.681059][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.692152][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.721674][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.738422][ T2443] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.745656][ T2443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.758802][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.772233][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.779323][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.807135][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.823390][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.836405][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.845506][ T1720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.852623][ T1720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.864667][ T2443] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.871845][ T2443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.893928][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.905939][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.918317][ T2443] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.925391][ T2443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.940046][ T2443] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.947281][ T2443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.978071][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.985150][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.995468][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.002701][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.027483][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.050534][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.068111][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.088241][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.095339][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.104184][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.111290][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.155206][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.165691][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.225808][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.248696][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.291516][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.300492][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.326371][ T3310] veth0_vlan: entered promiscuous mode [ 31.354273][ T3310] veth1_vlan: entered promiscuous mode [ 31.419541][ T3310] veth0_macvtap: entered promiscuous mode [ 31.425917][ T3319] veth0_vlan: entered promiscuous mode [ 31.437878][ T3310] veth1_macvtap: entered promiscuous mode [ 31.451354][ T3319] veth1_vlan: entered promiscuous mode [ 31.478354][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.492353][ T3316] veth0_vlan: entered promiscuous mode [ 31.500567][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.520809][ T3319] veth0_macvtap: entered promiscuous mode [ 31.529447][ T3316] veth1_vlan: entered promiscuous mode [ 31.541761][ T3314] veth0_vlan: entered promiscuous mode [ 31.551752][ T3314] veth1_vlan: entered promiscuous mode [ 31.568356][ T3319] veth1_macvtap: entered promiscuous mode [ 31.577588][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.586445][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.596161][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.605333][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.627133][ T3312] veth0_vlan: entered promiscuous mode [ 31.638826][ T3312] veth1_vlan: entered promiscuous mode [ 31.652173][ T3316] veth0_macvtap: entered promiscuous mode [ 31.660133][ T3316] veth1_macvtap: entered promiscuous mode [ 31.676332][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.687498][ T3314] veth0_macvtap: entered promiscuous mode [ 31.698457][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.704378][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.722445][ T3314] veth1_macvtap: entered promiscuous mode [ 31.730039][ T3312] veth0_macvtap: entered promiscuous mode [ 31.740499][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.759742][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.770696][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.780687][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.790294][ T3312] veth1_macvtap: entered promiscuous mode [ 31.798525][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.818083][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.833906][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.849289][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.866500][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.882612][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.892468][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.912061][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.920472][ T2443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.929589][ T2443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.945435][ T2443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.955804][ T2443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.996923][ T2443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.021950][ T2443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.097625][ T3492] loop3: detected capacity change from 0 to 128 [ 32.100097][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 32.100115][ T29] audit: type=1400 audit(1764056743.649:99): avc: denied { read } for pid=3486 comm="syz.0.6" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.132410][ T29] audit: type=1400 audit(1764056743.649:100): avc: denied { open } for pid=3486 comm="syz.0.6" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.132443][ T29] audit: type=1400 audit(1764056743.649:101): avc: denied { ioctl } for pid=3486 comm="syz.0.6" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.180249][ T2443] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.180292][ T2443] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.180324][ T2443] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.180371][ T2443] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.188108][ T29] audit: type=1400 audit(1764056743.749:102): avc: denied { mount } for pid=3490 comm="syz.3.4" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 32.449415][ T3501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.567342][ T3506] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 32.721956][ T3492] syz.3.4: attempt to access beyond end of device [ 32.721956][ T3492] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 32.737204][ T3492] syz.3.4: attempt to access beyond end of device [ 32.737204][ T3492] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 32.763074][ T29] audit: type=1400 audit(1764056744.329:103): avc: denied { kexec_image_load } for pid=3511 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 32.782944][ T3492] syz.3.4: attempt to access beyond end of device [ 32.782944][ T3492] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 32.787256][ T29] audit: type=1400 audit(1764056744.329:104): avc: denied { create } for pid=3511 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.807532][ T3492] syz.3.4: attempt to access beyond end of device [ 32.807532][ T3492] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 32.816374][ T29] audit: type=1400 audit(1764056744.329:105): avc: denied { write } for pid=3511 comm="syz.1.10" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 32.831068][ T3492] syz.3.4: attempt to access beyond end of device [ 32.831068][ T3492] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 32.852335][ T29] audit: type=1400 audit(1764056744.329:106): avc: denied { open } for pid=3511 comm="syz.1.10" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 32.852373][ T29] audit: type=1400 audit(1764056744.329:107): avc: denied { ioctl } for pid=3511 comm="syz.1.10" path="socket:[3917]" dev="sockfs" ino=3917 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.914320][ T29] audit: type=1400 audit(1764056744.329:108): avc: denied { write } for pid=3511 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.930751][ T3516] netem: incorrect ge model size [ 32.939587][ T3516] netem: change failed [ 32.970936][ T3492] syz.3.4: attempt to access beyond end of device [ 32.970936][ T3492] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 32.997136][ T3492] syz.3.4: attempt to access beyond end of device [ 32.997136][ T3492] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 33.027056][ T3492] syz.3.4: attempt to access beyond end of device [ 33.027056][ T3492] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 33.047707][ T3492] syz.3.4: attempt to access beyond end of device [ 33.047707][ T3492] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 33.072863][ T3492] syz.3.4: attempt to access beyond end of device [ 33.072863][ T3492] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 33.121593][ T3524] netem: incorrect ge model size [ 33.126757][ T3524] netem: change failed [ 33.225513][ T3531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 33.234441][ T3531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 33.299740][ T3542] loop2: detected capacity change from 0 to 2048 [ 33.335968][ T3548] loop1: detected capacity change from 0 to 512 [ 33.343698][ T3496] loop2: p1 p2 p3 [ 33.353337][ T3548] EXT4-fs: inline encryption not supported [ 33.359239][ T3548] EXT4-fs: Ignoring removed i_version option [ 33.385512][ T3542] loop2: p1 p2 p3 [ 33.396242][ T3548] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.23: inode has both inline data and extents flags [ 33.413073][ T3548] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.23: couldn't read orphan inode 15 (err -117) [ 33.433027][ T3548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.456890][ T3557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.28'. [ 33.484986][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.504872][ T3561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'. [ 33.514266][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 33.528956][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 33.540263][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 33.552340][ T3557] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3557 comm=syz.3.28 [ 33.582848][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 33.594226][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 33.611718][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 33.626590][ T3514] syz.4.11 (3514) used greatest stack depth: 10080 bytes left [ 33.672836][ C1] hrtimer: interrupt took 28127 ns [ 33.689589][ T3577] FAULT_INJECTION: forcing a failure. [ 33.689589][ T3577] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.702841][ T3577] CPU: 1 UID: 0 PID: 3577 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.702874][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.702889][ T3577] Call Trace: [ 33.702940][ T3577] [ 33.702949][ T3577] __dump_stack+0x1d/0x30 [ 33.702978][ T3577] dump_stack_lvl+0xe8/0x140 [ 33.703003][ T3577] dump_stack+0x15/0x1b [ 33.703041][ T3577] should_fail_ex+0x265/0x280 [ 33.703094][ T3577] should_fail+0xb/0x20 [ 33.703122][ T3577] should_fail_usercopy+0x1a/0x20 [ 33.703148][ T3577] _copy_from_user+0x1c/0xb0 [ 33.703245][ T3577] load_msg+0x173/0x2f0 [ 33.703274][ T3577] do_mq_timedsend+0x23e/0x6b0 [ 33.703303][ T3577] __x64_sys_mq_timedsend+0xd1/0x160 [ 33.703402][ T3577] x64_sys_call+0x1d10/0x3000 [ 33.703424][ T3577] do_syscall_64+0xd2/0x200 [ 33.703450][ T3577] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 33.703482][ T3577] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 33.703596][ T3577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.703617][ T3577] RIP: 0033:0x7f512827f749 [ 33.703631][ T3577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.703650][ T3577] RSP: 002b:00007f5126cdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 33.703680][ T3577] RAX: ffffffffffffffda RBX: 00007f51284d5fa0 RCX: 00007f512827f749 [ 33.703765][ T3577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 33.703781][ T3577] RBP: 00007f5126cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 33.703796][ T3577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.703812][ T3577] R13: 00007f51284d6038 R14: 00007f51284d5fa0 R15: 00007ffd5266f508 [ 33.703834][ T3577] [ 33.954806][ T3588] loop4: detected capacity change from 0 to 512 [ 33.963024][ T3588] EXT4-fs: inline encryption not supported [ 33.969030][ T3588] EXT4-fs: Ignoring removed i_version option [ 34.031667][ T3597] pim6reg: entered allmulticast mode [ 34.067803][ T3593] pim6reg: left allmulticast mode [ 34.102503][ T3588] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.39: inode has both inline data and extents flags [ 34.140655][ T3585] loop3: detected capacity change from 0 to 128 [ 34.147988][ T3588] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.39: couldn't read orphan inode 15 (err -117) [ 34.169432][ T3588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.198056][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.311176][ T3607] capability: warning: `syz.0.43' uses deprecated v2 capabilities in a way that may be insecure [ 34.357675][ T3585] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 34.365550][ T3585] FAT-fs (loop3): Filesystem has been set read-only [ 34.554704][ T3585] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 34.562672][ T3585] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 34.686472][ T3620] loop4: detected capacity change from 0 to 8192 [ 34.752292][ T3304] loop4: p1 < > p2 p4 < p5 > [ 34.757066][ T3304] loop4: partition table partially beyond EOD, truncated [ 34.764564][ T3304] loop4: p1 start 134217728 is beyond EOD, truncated [ 34.771493][ T3304] loop4: p2 size 591360 extends beyond EOD, truncated [ 34.794061][ T3304] loop4: p5 size 591360 extends beyond EOD, truncated [ 34.811977][ T3620] loop4: p1 < > p2 p4 < p5 > [ 34.816745][ T3620] loop4: partition table partially beyond EOD, truncated [ 34.840084][ T3620] loop4: p1 start 134217728 is beyond EOD, truncated [ 34.846936][ T3620] loop4: p2 size 591360 extends beyond EOD, truncated [ 34.963871][ T3620] loop4: p5 size 591360 extends beyond EOD, truncated [ 35.133621][ T3629] loop0: detected capacity change from 0 to 2048 [ 35.167105][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 35.173359][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 35.188433][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 35.218303][ T3294] loop0: p1 p2 p3 [ 35.224836][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 35.245545][ T3629] loop0: p1 p2 p3 [ 35.477597][ T3640] mmap: syz.0.55 (3640) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.520890][ T3642] loop2: detected capacity change from 0 to 512 [ 35.546021][ T3642] EXT4-fs: inline encryption not supported [ 35.552204][ T3642] EXT4-fs: Ignoring removed i_version option [ 35.598465][ T3642] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.56: inode has both inline data and extents flags [ 35.626172][ T3642] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.56: couldn't read orphan inode 15 (err -117) [ 35.669412][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.715584][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.763389][ T3645] netem: incorrect ge model size [ 35.768456][ T3645] netem: change failed [ 35.810489][ T3647] pim6reg1: entered promiscuous mode [ 35.815972][ T3647] pim6reg1: entered allmulticast mode [ 36.017511][ T3661] loop2: detected capacity change from 0 to 2048 [ 36.163196][ T3661] loop2: p1 p2 p3 [ 36.249070][ T3666] loop4: detected capacity change from 0 to 512 [ 36.381005][ T3666] EXT4-fs: inline encryption not supported [ 36.387084][ T3666] EXT4-fs: Ignoring removed i_version option [ 36.583785][ T3666] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.65: inode has both inline data and extents flags [ 36.617487][ T3676] FAULT_INJECTION: forcing a failure. [ 36.617487][ T3676] name failslab, interval 1, probability 0, space 0, times 1 [ 36.630178][ T3676] CPU: 0 UID: 0 PID: 3676 Comm: syz.1.68 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.630208][ T3676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.630222][ T3676] Call Trace: [ 36.630230][ T3676] [ 36.630239][ T3676] __dump_stack+0x1d/0x30 [ 36.630301][ T3676] dump_stack_lvl+0xe8/0x140 [ 36.630324][ T3676] dump_stack+0x15/0x1b [ 36.630345][ T3676] should_fail_ex+0x265/0x280 [ 36.630386][ T3676] should_failslab+0x8c/0xb0 [ 36.630437][ T3676] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 36.630472][ T3676] ? alloc_vmap_area+0x236/0xe80 [ 36.630567][ T3676] alloc_vmap_area+0x236/0xe80 [ 36.630632][ T3676] ? should_failslab+0x8c/0xb0 [ 36.630659][ T3676] ? __kmalloc_cache_node_noprof+0x2b2/0x4a0 [ 36.630788][ T3676] __get_vm_area_node+0x173/0x1d0 [ 36.630859][ T3676] __vmalloc_node_range_noprof+0x28c/0xed0 [ 36.630889][ T3676] ? copy_process+0x399/0x2000 [ 36.630951][ T3676] ? obj_cgroup_charge_account+0xba/0x1a0 [ 36.630985][ T3676] __vmalloc_node_noprof+0x89/0xc0 [ 36.631040][ T3676] ? copy_process+0x399/0x2000 [ 36.631076][ T3676] ? copy_process+0x399/0x2000 [ 36.631103][ T3676] dup_task_struct+0x433/0x6b0 [ 36.631143][ T3676] ? _parse_integer+0x27/0x40 [ 36.631184][ T3676] copy_process+0x399/0x2000 [ 36.631216][ T3676] ? trace_reschedule_exit+0xd/0xc0 [ 36.631250][ T3676] ? trace_reschedule_exit+0xd/0xc0 [ 36.631275][ T3676] kernel_clone+0x16c/0x5c0 [ 36.631313][ T3676] __x64_sys_clone+0xe6/0x120 [ 36.631379][ T3676] x64_sys_call+0x119c/0x3000 [ 36.631408][ T3676] do_syscall_64+0xd2/0x200 [ 36.631472][ T3676] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.631578][ T3676] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.631617][ T3676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.631707][ T3676] RIP: 0033:0x7fcd02e8f749 [ 36.631725][ T3676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.631746][ T3676] RSP: 002b:00007fcd018f6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 36.631764][ T3676] RAX: ffffffffffffffda RBX: 00007fcd030e5fa0 RCX: 00007fcd02e8f749 [ 36.631777][ T3676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 36.631792][ T3676] RBP: 00007fcd018f7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.631806][ T3676] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 36.631854][ T3676] R13: 00007fcd030e6038 R14: 00007fcd030e5fa0 R15: 00007ffd81a90108 [ 36.631876][ T3676] [ 36.631891][ T3676] syz.1.68: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 36.897098][ T3676] CPU: 0 UID: 0 PID: 3676 Comm: syz.1.68 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.897219][ T3676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.897234][ T3676] Call Trace: [ 36.897242][ T3676] [ 36.897252][ T3676] __dump_stack+0x1d/0x30 [ 36.897285][ T3676] dump_stack_lvl+0xe8/0x140 [ 36.897318][ T3676] dump_stack+0x15/0x1b [ 36.897339][ T3676] warn_alloc+0x12b/0x1a0 [ 36.897386][ T3676] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 36.897493][ T3676] ? obj_cgroup_charge_account+0xba/0x1a0 [ 36.897530][ T3676] __vmalloc_node_noprof+0x89/0xc0 [ 36.897692][ T3676] ? copy_process+0x399/0x2000 [ 36.897784][ T3676] ? copy_process+0x399/0x2000 [ 36.897816][ T3676] dup_task_struct+0x433/0x6b0 [ 36.897871][ T3676] ? _parse_integer+0x27/0x40 [ 36.897984][ T3676] copy_process+0x399/0x2000 [ 36.898019][ T3676] ? trace_reschedule_exit+0xd/0xc0 [ 36.898052][ T3676] ? trace_reschedule_exit+0xd/0xc0 [ 36.898086][ T3676] kernel_clone+0x16c/0x5c0 [ 36.898126][ T3676] __x64_sys_clone+0xe6/0x120 [ 36.898171][ T3676] x64_sys_call+0x119c/0x3000 [ 36.898256][ T3676] do_syscall_64+0xd2/0x200 [ 36.898277][ T3676] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.898320][ T3676] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.898434][ T3676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.898469][ T3676] RIP: 0033:0x7fcd02e8f749 [ 36.898486][ T3676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.898508][ T3676] RSP: 002b:00007fcd018f6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 36.898548][ T3676] RAX: ffffffffffffffda RBX: 00007fcd030e5fa0 RCX: 00007fcd02e8f749 [ 36.898563][ T3676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 36.898578][ T3676] RBP: 00007fcd018f7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.898592][ T3676] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 36.898606][ T3676] R13: 00007fcd030e6038 R14: 00007fcd030e5fa0 R15: 00007ffd81a90108 [ 36.898686][ T3676] [ 36.898706][ T3676] Mem-Info: [ 36.909761][ T3678] IPv6: NLM_F_CREATE should be specified when creating new route [ 36.919487][ T3676] active_anon:10266 inactive_anon:0 isolated_anon:0 [ 36.919487][ T3676] active_file:8962 inactive_file:2232 isolated_file:0 [ 36.919487][ T3676] unevictable:25 dirty:138 writeback:0 [ 36.919487][ T3676] slab_reclaimable:3116 slab_unreclaimable:14207 [ 36.919487][ T3676] mapped:34112 shmem:3133 pagetables:1144 [ 36.919487][ T3676] sec_pagetables:0 bounce:0 [ 36.919487][ T3676] kernel_misc_reclaimable:0 [ 36.919487][ T3676] free:1889797 free_pcp:13849 free_cma:0 [ 36.975090][ T3666] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.65: couldn't read orphan inode 15 (err -117) [ 36.978319][ T3676] Node 0 active_anon:41064kB inactive_anon:0kB active_file:35848kB inactive_file:8928kB unevictable:100kB isolated(anon):0kB isolated(file):0kB mapped:136448kB dirty:552kB writeback:0kB shmem:12532kB kernel_stack:3440kB pagetables:4692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 36.983840][ T3666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.988387][ T3676] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 37.234385][ T3689] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 37.251752][ T3676] lowmem_reserve[]: 0 2881 7859 7859 [ 37.264447][ T3676] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 37.295878][ T3676] lowmem_reserve[]: 0 0 4978 4978 [ 37.301257][ T3676] Node 0 Normal free:4652424kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40948kB inactive_anon:0kB active_file:35848kB inactive_file:8928kB unevictable:100kB writepending:548kB zspages:0kB present:5242880kB managed:5098240kB mlocked:100kB bounce:0kB free_pcp:5096kB local_pcp:96kB free_cma:0kB [ 37.335073][ T3676] lowmem_reserve[]: 0 0 0 0 [ 37.340127][ T3676] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 37.352989][ T3676] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 37.369260][ T3676] Node 0 Normal: 3*4kB (UE) 271*8kB (UME) 172*16kB (UME) 134*32kB (UME) 87*64kB (UME) 60*128kB (UME) 39*256kB (UM) 29*512kB (UM) 23*1024kB (UME) 9*2048kB (UME) 1114*4096kB (M) = 4652228kB [ 37.388531][ T3676] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 37.398381][ T3676] 14324 total pagecache pages [ 37.403069][ T3676] 1 pages in swap cache [ 37.407243][ T3676] Free swap = 124996kB [ 37.411400][ T3676] Total swap = 124996kB [ 37.415543][ T3676] 2097051 pages RAM [ 37.419375][ T3676] 0 pages HighMem/MovableOnly [ 37.424065][ T3676] 81087 pages reserved [ 37.447650][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.513384][ T3680] netem: incorrect ge model size [ 37.518412][ T3680] netem: change failed [ 37.582944][ T3693] loop1: detected capacity change from 0 to 8192 [ 37.650982][ T3496] loop1: p1 < > p2 p4 < p5 > [ 37.655713][ T3496] loop1: partition table partially beyond EOD, truncated [ 37.665100][ T3705] loop2: detected capacity change from 0 to 1024 [ 37.672965][ T3496] loop1: p1 start 134217728 is beyond EOD, truncated [ 37.679723][ T3496] loop1: p2 size 591360 extends beyond EOD, truncated [ 37.692609][ T3705] EXT4-fs: Ignoring removed bh option [ 37.699484][ T3705] EXT4-fs: inline encryption not supported [ 37.705865][ T3705] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.718509][ T3705] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 37.729093][ T3705] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.77: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.743241][ T3705] __quota_error: 99 callbacks suppressed [ 37.743260][ T3705] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 37.757729][ T3705] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.77: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.773813][ T3705] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 37.782793][ T3705] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.77: Failed to acquire dquot type 0 [ 37.794431][ T3705] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 37.804106][ T3705] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.77: mark_inode_dirty error [ 37.816696][ T3705] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 37.818457][ T3496] loop1: p5 size 591360 extends beyond EOD, truncated [ 37.827215][ T3705] EXT4-fs (loop2): 1 orphan inode deleted [ 37.840121][ T3705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.852788][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.867959][ T31] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 37.876408][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 37.891994][ T3693] loop1: p1 < > p2 p4 < p5 > [ 37.896711][ T3693] loop1: partition table partially beyond EOD, truncated [ 37.908108][ T3693] loop1: p1 start 134217728 is beyond EOD, truncated [ 37.914871][ T3693] loop1: p2 size 591360 extends beyond EOD, truncated [ 37.923156][ T3693] loop1: p5 size 591360 extends beyond EOD, truncated [ 37.943168][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.957255][ T3316] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 37.973170][ T3316] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 37.983795][ T3316] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 38.067705][ T29] audit: type=1400 audit(1764056749.639:208): avc: denied { create } for pid=3708 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 38.169448][ T3719] loop2: detected capacity change from 0 to 2048 [ 38.189364][ T29] audit: type=1400 audit(1764056749.759:209): avc: denied { bind } for pid=3710 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.218222][ T3304] loop2: p1 p2 p3 [ 38.232014][ T3719] loop2: p1 p2 p3 [ 38.235943][ T3723] loop1: detected capacity change from 0 to 1024 [ 38.251171][ T3723] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 38.337333][ T29] audit: type=1400 audit(1764056749.909:210): avc: denied { create } for pid=3718 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.383304][ T29] audit: type=1400 audit(1764056749.909:211): avc: denied { create } for pid=3726 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 38.402715][ T29] audit: type=1400 audit(1764056749.909:212): avc: denied { setopt } for pid=3726 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 38.429538][ T3729] loop1: detected capacity change from 0 to 512 [ 38.438083][ T29] audit: type=1326 audit(1764056750.009:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.2.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95da8f749 code=0x7ffc0000 [ 38.461333][ T29] audit: type=1326 audit(1764056750.009:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3726 comm="syz.2.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb95da8f749 code=0x7ffc0000 [ 38.484911][ T3729] ======================================================= [ 38.484911][ T3729] WARNING: The mand mount option has been deprecated and [ 38.484911][ T3729] and is ignored by this kernel. Remove the mand [ 38.484911][ T3729] option from the mount to silence this warning. [ 38.484911][ T3729] ======================================================= [ 38.528763][ T3729] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 38.538629][ T3729] EXT4-fs (loop1): group descriptors corrupted! [ 38.602733][ T3733] netem: incorrect ge model size [ 38.607806][ T3733] netem: change failed [ 38.692595][ T3741] loop4: detected capacity change from 0 to 1024 [ 38.713181][ T3741] EXT4-fs: Ignoring removed bh option [ 38.718892][ T3741] EXT4-fs: inline encryption not supported [ 38.725303][ T3741] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.736550][ T3741] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 38.746075][ T3741] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.90: lblock 2 mapped to illegal pblock 2 (length 1) [ 38.760447][ T3741] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.90: lblock 0 mapped to illegal pblock 48 (length 1) [ 38.774786][ T3741] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.90: Failed to acquire dquot type 0 [ 38.786114][ T3741] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 38.795626][ T3741] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.90: mark_inode_dirty error [ 38.807255][ T3741] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 38.818038][ T3741] EXT4-fs (loop4): 1 orphan inode deleted [ 38.824013][ T3748] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 38.824281][ T3741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.844541][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 38.860722][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 38.895136][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.928215][ T3312] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 38.941537][ T3312] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 38.951540][ T3312] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 39.601617][ T3785] netem: incorrect ge model size [ 39.606646][ T3785] netem: change failed [ 39.642342][ T3791] loop1: detected capacity change from 0 to 128 [ 39.695499][ T3750] syz.0.93 (3750) used greatest stack depth: 9984 bytes left [ 39.738235][ T3791] bio_check_eod: 1118 callbacks suppressed [ 39.738256][ T3791] syz.1.104: attempt to access beyond end of device [ 39.738256][ T3791] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 39.758929][ T3791] syz.1.104: attempt to access beyond end of device [ 39.758929][ T3791] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 39.782664][ T3791] syz.1.104: attempt to access beyond end of device [ 39.782664][ T3791] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 39.801136][ T3791] syz.1.104: attempt to access beyond end of device [ 39.801136][ T3791] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 39.827985][ T3791] syz.1.104: attempt to access beyond end of device [ 39.827985][ T3791] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 39.834851][ T3807] loop0: detected capacity change from 0 to 1024 [ 39.853515][ T3791] syz.1.104: attempt to access beyond end of device [ 39.853515][ T3791] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 39.865628][ T3807] EXT4-fs: Ignoring removed bh option [ 39.867062][ T3791] syz.1.104: attempt to access beyond end of device [ 39.867062][ T3791] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 39.895743][ T3807] EXT4-fs: inline encryption not supported [ 39.903174][ T3791] syz.1.104: attempt to access beyond end of device [ 39.903174][ T3791] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 39.924284][ T3791] syz.1.104: attempt to access beyond end of device [ 39.924284][ T3791] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 39.938081][ T3791] syz.1.104: attempt to access beyond end of device [ 39.938081][ T3791] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 39.954357][ T3807] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.975062][ T3807] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 39.992932][ T3807] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.105: lblock 2 mapped to illegal pblock 2 (length 1) [ 40.014379][ T3807] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.105: lblock 0 mapped to illegal pblock 48 (length 1) [ 40.049197][ T3807] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.105: Failed to acquire dquot type 0 [ 40.067739][ T3807] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 40.086009][ T3807] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.105: mark_inode_dirty error [ 40.116981][ T3807] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 40.135015][ T3807] EXT4-fs (loop0): 1 orphan inode deleted [ 40.143988][ T3807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.156674][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.186928][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 40.202835][ T3825] loop3: detected capacity change from 0 to 164 [ 40.214869][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.227298][ T3825] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.236440][ T3310] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 40.245644][ T3825] pimreg: entered allmulticast mode [ 40.255907][ T3310] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 40.260232][ T3825] pimreg: left allmulticast mode [ 40.265536][ T3310] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 40.333881][ T3829] loop0: detected capacity change from 0 to 512 [ 40.341260][ T3829] EXT4-fs: inline encryption not supported [ 40.347200][ T3829] EXT4-fs: Ignoring removed i_version option [ 40.355078][ T3829] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.113: inode has both inline data and extents flags [ 40.368950][ T3829] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.113: couldn't read orphan inode 15 (err -117) [ 40.374771][ T3825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.112'. [ 40.381562][ T3829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.642556][ T3832] loop1: detected capacity change from 0 to 2048 [ 40.666975][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.678345][ T3304] loop1: p1 p2 p3 [ 40.688099][ T3832] loop1: p1 p2 p3 [ 40.744800][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 40.755680][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 40.767122][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 41.173149][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.206328][ T3859] FAULT_INJECTION: forcing a failure. [ 41.206328][ T3859] name failslab, interval 1, probability 0, space 0, times 0 [ 41.219139][ T3859] CPU: 0 UID: 0 PID: 3859 Comm: syz.2.125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.219166][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.219177][ T3859] Call Trace: [ 41.219184][ T3859] [ 41.219192][ T3859] __dump_stack+0x1d/0x30 [ 41.219221][ T3859] dump_stack_lvl+0xe8/0x140 [ 41.219266][ T3859] dump_stack+0x15/0x1b [ 41.219285][ T3859] should_fail_ex+0x265/0x280 [ 41.219429][ T3859] should_failslab+0x8c/0xb0 [ 41.219464][ T3859] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 41.219506][ T3859] ? security_context_to_sid_core+0x69/0x3b0 [ 41.219547][ T3859] kmemdup_nul+0x36/0xc0 [ 41.219573][ T3859] security_context_to_sid_core+0x69/0x3b0 [ 41.219606][ T3859] security_context_to_sid_force+0x30/0x40 [ 41.219722][ T3859] selinux_inode_setxattr+0x4e8/0x6e0 [ 41.219795][ T3859] ? mntput+0x4b/0x80 [ 41.219825][ T3859] security_inode_setxattr+0x13a/0x1b0 [ 41.219901][ T3859] __vfs_setxattr_locked+0x83/0x1d0 [ 41.219937][ T3859] vfs_setxattr+0x132/0x270 [ 41.219974][ T3859] file_setxattr+0x139/0x1b0 [ 41.220049][ T3859] path_setxattrat+0x290/0x310 [ 41.220107][ T3859] __x64_sys_fsetxattr+0x6b/0x80 [ 41.220144][ T3859] x64_sys_call+0x1ced/0x3000 [ 41.220173][ T3859] do_syscall_64+0xd2/0x200 [ 41.220254][ T3859] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.220283][ T3859] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.220338][ T3859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.220359][ T3859] RIP: 0033:0x7fb95da8f749 [ 41.220411][ T3859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.220435][ T3859] RSP: 002b:00007fb95c4ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 41.220459][ T3859] RAX: ffffffffffffffda RBX: 00007fb95dce5fa0 RCX: 00007fb95da8f749 [ 41.220475][ T3859] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 41.220490][ T3859] RBP: 00007fb95c4ef090 R08: 0000000000000000 R09: 0000000000000000 [ 41.220568][ T3859] R10: 00000000000003c8 R11: 0000000000000246 R12: 0000000000000001 [ 41.220646][ T3859] R13: 00007fb95dce6038 R14: 00007fb95dce5fa0 R15: 00007ffcee1734b8 [ 41.220669][ T3859] [ 41.453923][ T3858] loop0: detected capacity change from 0 to 2048 [ 41.528815][ T3496] loop0: p1 p2 p3 [ 41.539009][ T3858] loop0: p1 p2 p3 [ 41.601634][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.611542][ T3868] loop0: detected capacity change from 0 to 512 [ 41.632322][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 41.632600][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 41.643131][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 41.662262][ T3868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.697050][ T3868] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.018981][ T3891] netem: incorrect ge model size [ 42.024019][ T3891] netem: change failed [ 42.058279][ T3895] loop4: detected capacity change from 0 to 512 [ 42.065164][ T3895] EXT4-fs: inline encryption not supported [ 42.071093][ T3895] EXT4-fs: Ignoring removed i_version option [ 42.079273][ T3895] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.135: inode has both inline data and extents flags [ 42.093309][ T3895] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.135: couldn't read orphan inode 15 (err -117) [ 42.097383][ T3897] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 42.106474][ T3895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.591562][ T3908] loop1: detected capacity change from 0 to 512 [ 42.598322][ T3908] EXT4-fs: Ignoring removed nobh option [ 42.604495][ T3003] ================================================================== [ 42.612620][ T3003] BUG: KCSAN: data-race in d_delete / step_into [ 42.618892][ T3003] [ 42.621221][ T3003] read-write to 0xffff88811a097cc0 of 4 bytes by task 3304 on cpu 1: [ 42.629285][ T3003] d_delete+0x15a/0x180 [ 42.633443][ T3003] d_delete_notify+0x32/0x100 [ 42.638131][ T3003] vfs_unlink+0x30b/0x420 [ 42.642468][ T3003] do_unlinkat+0x24e/0x480 [ 42.646907][ T3003] __x64_sys_unlink+0x2e/0x40 [ 42.651594][ T3003] x64_sys_call+0x2dcf/0x3000 [ 42.656302][ T3003] do_syscall_64+0xd2/0x200 [ 42.660812][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.666717][ T3003] [ 42.669053][ T3003] read to 0xffff88811a097cc0 of 4 bytes by task 3003 on cpu 0: [ 42.676603][ T3003] step_into+0xe3/0x7f0 [ 42.680779][ T3003] walk_component+0x162/0x220 [ 42.685474][ T3003] path_lookupat+0xfe/0x2a0 [ 42.689998][ T3003] filename_lookup+0x147/0x340 [ 42.694778][ T3003] do_readlinkat+0x7d/0x320 [ 42.699310][ T3003] __x64_sys_readlink+0x47/0x60 [ 42.704164][ T3003] x64_sys_call+0x28de/0x3000 [ 42.708865][ T3003] do_syscall_64+0xd2/0x200 [ 42.713373][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.719292][ T3003] [ 42.721616][ T3003] value changed: 0x00300180 -> 0x00004080 [ 42.727333][ T3003] [ 42.729653][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 42.735805][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.745101][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.755173][ T3003] ================================================================== [ 42.768476][ T3908] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.775434][ T3908] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.788806][ T3908] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.139: corrupted inode contents [ 42.800918][ T3908] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.139: mark_inode_dirty error [ 42.813523][ T3908] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.139: corrupted inode contents [ 42.827851][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 42.827872][ T29] audit: type=1400 audit(1764056754.399:262): avc: denied { bind } for pid=3904 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.828049][ T3908] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.139: mark_inode_dirty error [ 42.841157][ T29] audit: type=1400 audit(1764056754.399:263): avc: denied { write } for pid=3904 comm="syz.2.138" path="socket:[5634]" dev="sockfs" ino=5634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.854147][ T3908] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.139: mark inode dirty (error -117) [ 42.865592][ T29] audit: type=1400 audit(1764056754.399:264): avc: denied { write } for pid=3904 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.865626][ T29] audit: type=1400 audit(1764056754.399:265): avc: denied { write } for pid=3904 comm="syz.2.138" path="socket:[6551]" dev="sockfs" ino=6551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.944736][ T3908] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 42.945662][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.954344][ T3908] EXT4-fs (loop1): 1 orphan inode deleted [ 42.969121][ T3908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.009948][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.626862][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.626868][ T3736] Bluetooth: hci0: command 0x1003 tx timeout [ 44.150581][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.