last executing test programs: 32.619123695s ago: executing program 1 (id=2): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) sendfile(r1, r0, 0x0, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000004c0)="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"}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000007dbe00000008000a", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newtaction={0x44, 0x58, 0x284f, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='usrjquota=') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 31.922753956s ago: executing program 1 (id=20): ftruncate(0xffffffffffffffff, 0xc17a) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1, 0x0, 0x4}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 28.627796209s ago: executing program 1 (id=32): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0xbdf7, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 28.620597199s ago: executing program 32 (id=32): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0xbdf7, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7.184857985s ago: executing program 0 (id=187): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sync() syz_usb_connect(0x6, 0xb43, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r2, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/135, 0x87}], 0x2, &(0x7f0000000640)=""/139, 0x8b}, 0x6}], 0x1, 0x40002012, &(0x7f0000000980)={0x0, 0x3938700}) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002d00)={r1, 0x0, 0x81, 0x80, &(0x7f0000002b00)="4c592feed90a7518317b06c3b690c49cf52ea8d26a49261e6f703f861c9486c798205de8f46efe2a164b30323e15e76703104bf636a93898557ef955d06c58a8ec88e2f05a14304623c03cc16ed5e1bae9a0beffcf3ecef5045f62bcb75a105931f377dd72c66dfca5a15d33a177d189b6b615961f1951eae6675f1fe03c82a948", &(0x7f0000002bc0)=""/128, 0xffff655e, 0x0, 0x9e, 0x18, &(0x7f0000002c40)="52ae43e0f1d3f6ebbb9ba385393650234adcaeea9829a6141b4c4a9576d6f7ff3b0ba14264417812e499e30151241bb75edd45ac548f6cda8eb150dce657a8fcc3edb330f2b26547b1c925946c48183276adb559bcf3a03964f3a2780b5295c737049e7a99348dc80434b4c6603d902cdac09af2dd1c80e738e2b98e4dd14745486043de4b345885ac26a66b9be5ba1dc23d50d9b3c7f3f7cd1239b1b63f", &(0x7f00000009c0)="2356402ad269710466b0b23516af6a006209f3f18a9b6704", 0x2, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000240)={@mcast1, 0x30, r4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getcwd(&(0x7f0000000140)=""/237, 0xfffffee1) socket$inet_udp(0x2, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x1, &(0x7f0000000300)=[{0x9, 0x40, 0xe, 0x4}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000000)=0x6, 0x4) setns(0xffffffffffffffff, 0x66020000) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000003100)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000002dc0)={0x228, 0x12, 0xb05, 0x70bd28, 0x25dfdbfb, {0x23, 0x10, 0x6, 0x8, {0x4e22, 0x4e22, [0x10001, 0x5, 0x1, 0x4], [0x7fff, 0x1, 0x8001, 0x6], r4, [0x7, 0x6]}, 0x3c, 0xeb7}, [@INET_DIAG_REQ_BYTECODE={0xf8, 0x1, "60a901e909ffaf54e65fbba54cc29a92230164df2dcff37a94c12cc3332976bdbf32785bd91a09993e259cdeb3fb71b330c513d9288ad95e0bd37e33d6bc8ffc8873217aea94aca558f99466fd8a16c8c827a778d83626445ed3c65a730abaef5fb190fcb3d3591dafa735eb5aba560d2072d8eb86d4254adc6eea127e833f25dd0e7de30f85c6f2c7d0d23c91ff92066f163409bb87775febf03441e4b51e871786db5aafeb811b45463789d0e717bca1dec71ee8ee6c92e51b9ec9124cecb0a51d6be6e97b40b3ce4059843e1ed8edc5cacd7821760d1b47516305762ea510ad788d38dfea6b91144628f5e55caa6b3d936072"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "9148f8151f7c6c8a50a875b8f5e8b5a6e742d34ad6e510881b2b1cd5f6153f65060f70619bf1b08701807677a9388e23e7b79037bd"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "cd4f8d4df41aceb9afa40725c124f48351f2b3d56ba9c7c1e9747730a15af2b7aaa9f246b5745854e20a978b7c50fcf7500d0e494cdbfc9325460a55c32c2e4c1c6f1576a91aa8bf2f16e5b76982a5c696cb9dee19d1bad585683ce03ee2de9eee5295b1f62491d0f3b1af137848d03b7631be3765e5e8b7334c382781bfe9df3199cd1efcaa69d8a682f679292a3055a165fdffc2af89d0f0bdc50d1051d9"}]}, 0x228}, 0x1, 0x0, 0x0, 0x1}, 0x40040) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 6.810424932s ago: executing program 2 (id=192): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) sendfile(r1, r0, 0x0, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000004c0)}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000007dbe00000008000a", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newtaction={0x44, 0x58, 0x284f, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$eJzs3U9vI2cZAPBnHHvZ7GabFDhAJUqhRdkVrJ00tI04lCIhOFUCyr2ExImiOHEUO+0mqtis+ABICAESJ7hwQeIDIKFKXDgipEpwBgECIdjCgQN00NjjNJv4X7tOnE1+P2ky78y8M8/zOprxvJ7RTACX1lMR8VJEvJOm6a2ImM7nF/IhDtpDVu/t+28sZ0MSafrKP5JI8nmdbSX5+Hq+2tWI+NqXI76ZnIzb2NvfWKrVqjv5dKW5uV1p7O3fXt9cWquuVbcWFuafX3xh8bnFuZG080ZEvPjFv3z/Oz/90ou//Mzrf3z1bze/laU1lS8/2o73qNhvYbvppdZncXSFnfcZ7DwqtlqYm+xWY+LEnHunnBMAAN1l5/gfjIhPRsStmI6J/qezAAAAwCMo/fxU/DeJSLu70mM+AAAA8AgptO6BTQrl/F6AqSgUyuX2PbwfjmuFWr3R/PRqfXdrpX2v7EyUCqvrtepcfq/wTJSSbHq+VX53+tlj0wsR8XhEfG96sjVdXq7XVsb94wcAAABcEteP9f//Pd3u/3fcHWdyAAAAwOjMjDsBAAAA4NQN2/+/dsp5AAAAAKfH9X8AAAC40L7y8svZkHbef73y2t7uRv212yvVxkZ5c3e5vFzf2S6v1etrrWf2bQ7aXq1e3/5sbO3eqTSrjWalsXc1Nuu7W81X1x94BTYAAABwhh7/+Ju/TyLi4HOTrSFzZbhVh6wGnFfFw1KSj7vs1n94rD3+8xklBZyJiXEnAIxNcdwJAGNTGncCwNglA5b3vHnnN/n4E6PNBwAAGL3Zj/a+/l/ou+ZB/8XAuWcnhsvL9X+4vFrX/4e9k7fgbeBwkZQGnQH07SA4HsBF8NDX/wdK0/eUEAAAMHJTrSEplIud6UKhXI640XotQClZXa9V5yLisYj43XTpA9n0fKtmMrDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pWkSKQAAAHChRRT+mvyq/Sz/2elnpo7/PnAl+c905K8Iff1Hr/zgzlKzuTOfzf/n4fzmD/P5z47jFwwAAAC4FAa8wP9BnX56px8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP09v03ljvDWcb9+xciYqZb/GJcbY2vRikirv0rieKR9ZKImBhB/Mnsz0e6xU+ytA5Ddos/OYL4B/f6xo+D/FPoFv/6COLDZfZmdvx5qdv+V4inWuPu+18x4oHp96v38S8Oj38TPfb/G0PGeOKtn1d6xr8X8UTxRPy7WYRO/KRH/KeHjP+Nr+/v91qW/jhituv3T9Kpkh0ho9Lc3K409vZvr28urVXXqlsLC/PPL76w+NziXGV1vVbN/3aN8d2P/eKdfu2/1iP+zID2P3Nia1e6xvjfW3fuf6hdLHWLf/PpLvF//ZO8xsn4hfy771N5OVs+2ykftMtHPfmz3z7Zr/0rPdo/6P9/s9dGj7n11W//aciqAMAZaOztbyzVatWdC1vIeulDVs7Ozs5FzgpDFCYefjt3R5pYmqZptk89xHaSGPenelgY95EJAAAYtXdP+sedCQAAAAAAAAAAAAAAAAAAAFxeZ/E4seMxDw5LySgeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL/DwAA//9t9tlI") r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='usrjquota=') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 6.560799543s ago: executing program 5 (id=195): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100000000"], 0x64}}, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.265443946s ago: executing program 0 (id=197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 6.15405523s ago: executing program 0 (id=199): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r1, 0xb}}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000700000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000000)=""/62, 0x3e) 5.907136621s ago: executing program 4 (id=200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) connect$phonet_pipe(r1, &(0x7f0000000140)={0x23, 0xf, 0x8, 0x7}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0x1ffffdc1, &(0x7f0000000180)=ANY=[@ANYBLOB="0225378d3beb59c7e63569f98be4874a16b19847fc05b83fdcda770a92eb081d5af9cf64bec9668dcb88f9a192fca0457f94347e6dbc93", @ANYRES32=r1], 0x0, 0x40000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$rds(0x15, 0x5, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) 5.906478522s ago: executing program 2 (id=201): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x4886) 4.834144138s ago: executing program 2 (id=203): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x9, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000040)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="7f454c4603040000ff7f08000000000002003e00ecffffff98030000000000004000000000000000560000000000000007000000000038000100000002000000030000000500000004000000000000000d20000000400000c8010000000000000c"], 0x678) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) 3.449764898s ago: executing program 3 (id=205): socketpair$unix(0x1, 0x2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x6f4000) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) unshare(0x2040400) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000200), 0x10) (fail_nth: 3) 3.211984929s ago: executing program 3 (id=206): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$eJzs3MtvG8UfAPDvOo82fcW/qj+gDyAIEKVA0qSl9MAFBBIHkJDgUI4hSatSt0FNkEhVQUCoHFElTlwQRyT+Ak5wQcAJCQ4c4I4qVaiXFk5Gm91NHdfOw3Xstv58pHVmdtee+Xpn7NmdeAPoWSPpQxKxIyL+iIjhLLtyh5Hsz41rF6f+uXZxKolq9Y2/k/508/VrF6eKXYvnbS8y/RGlT5LY36DcuYULZyYrlZnzeX5s/uy7Y3MLF545fXby1MypmXMTx48fPTL+3LGJZ9sSZxrX9X0fzB7Y+8pbl1+bOnH57Z++SYr46+K4xW8tFTmy2sbHq9WWXvQONJg+7KxZkbUM7gZ9WTeNgaX+Pxx9cfPgDcfLH3e1csCmqlar1fuab16sAvewJLpdA6A7ii/69Py3WDo09LgjXH0hOwFK476RL9mW/ijl+wzUnd+200hEnFj898t0ibWuQwAAtMF36fjn6Ubjv1LUXhfalc+hlCPifxGxOyKORcSeiPh/xNK+90fEAxssv36S5NbxT+lKS4GtUzr+ez6f21o5/itGf1Huy3M7l+IfSE6erswczt+TgzGwJc2Pr1LG9y/9+lmzbbXjv3RJyy/Ggnk9rvRvWfmc6cn5yduJudbVjyL29TeKP1meCUgiYm9E7GuxjNOHvj7QbNva8a+iDfNM1a8insiO/2LUxV9IsvnJcpP5ybGtUZk5PFa0ihiqefnF9ND9/Mul15uVf1vxt0F6/Lc1bP/L8ZeT2vnauY28+hdPpo+X/vy06TlNq+1/MHlzxbr3J+fnz49HDCavZpWuXT9Rt9/Ezf3T+A8+2rj/746b78T+iEgb8YMR8VBEPJzX/ZHfd635Lvz44mPvtB7/5krjn17/8a8ORxQNYWEw8sTymsaJvjM/fLui0HLj+Hc1Pf5Hl1IH8zXr+fxbT7022poBAADgblWKiB2RlEaX06XS6Gj2P/x7YlupMjs3/9TJ2ffOTWe/ESjHQKm40jVccz10PD+tL/ITdfkj+XXjz/uGlvKjU7OV6W4HDz1ue5P+n/qrr9u1Azad32tB79L/oXfp/9C7sv5fe7a/tWt1ATqrwff/UDfqAXReo/H/h+t54o721wXorLr+b9oPeojrf9C7Wun/PjPg3tC/2i2bBztaFaBz5oZi7R/J32uJrRu4QcDdlyjuXLMZRQykreVQRCxciFLXI5XYxES3P5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD//9OC4M8=") 3.159118551s ago: executing program 3 (id=207): socketpair$unix(0x1, 0x2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x6f4000) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) unshare(0x2040400) fgetxattr(r0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0x1075}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000200), 0x10) 3.098704184s ago: executing program 2 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) 3.098007225s ago: executing program 5 (id=209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 3.078523335s ago: executing program 0 (id=210): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@unspec, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="e80c0000ecffffff0000000000deb9a8711697d4dfd49cbf1500151fa266a04cac60a3f1accc4948b323164bdfc00c000018e86b38f20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@ipv6header={{0x28}, {0x0, 0x80}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x18, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b8) stat(&(0x7f0000000580)='./mnt\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000cc0)=0x1ff) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000bc0)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x2, 0x4e21, 0x3864, 0xa, 0x20, 0x0, 0xff, 0x0, r4}, {0x5, 0x5d, 0x16, 0x3, 0x6, 0x2cd2, 0x200, 0x2}, {0x6, 0x6, 0x2, 0x8000}, 0x7, 0x6e6bb9, 0x1, 0x1, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x4d2, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x34ff, 0x2, 0x0, 0x4, 0x2, 0xe8, 0x5}}, 0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) socket$caif_stream(0x25, 0x1, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000000)=""/152) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 3.065430855s ago: executing program 2 (id=211): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) sendfile(r1, r0, 0x0, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000004c0)}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000007dbe00000008000a", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newtaction={0x44, 0x58, 0x284f, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='usrjquota=') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.972602159s ago: executing program 3 (id=212): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) sendfile(r1, r0, 0x0, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f00000004c0)="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"}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000007dbe00000008000a", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newtaction={0x44, 0x58, 0x284f, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$eJzs3U9vI2cZAPBnHHvZ7GabFDhAJUqhRdkVrJ00tI04lCIhOFUCyr2ExImiOHEUO+0mqtis+ABICAESJ7hwQeIDIKFKXDgipEpwBgECIdjCgQN00NjjNJv4X7tOnE1+P2ky78y8M8/zOprxvJ7RTACX1lMR8VJEvJOm6a2ImM7nF/IhDtpDVu/t+28sZ0MSafrKP5JI8nmdbSX5+Hq+2tWI+NqXI76ZnIzb2NvfWKrVqjv5dKW5uV1p7O3fXt9cWquuVbcWFuafX3xh8bnFuZG080ZEvPjFv3z/Oz/90ou//Mzrf3z1bze/laU1lS8/2o73qNhvYbvppdZncXSFnfcZ7DwqtlqYm+xWY+LEnHunnBMAAN1l5/gfjIhPRsStmI6J/qezAAAAwCMo/fxU/DeJSLu70mM+AAAA8AgptO6BTQrl/F6AqSgUyuX2PbwfjmuFWr3R/PRqfXdrpX2v7EyUCqvrtepcfq/wTJSSbHq+VX53+tlj0wsR8XhEfG96sjVdXq7XVsb94wcAAABcEteP9f//Pd3u/3fcHWdyAAAAwOjMjDsBAAAA4NQN2/+/dsp5AAAAAKfH9X8AAAC40L7y8svZkHbef73y2t7uRv212yvVxkZ5c3e5vFzf2S6v1etrrWf2bQ7aXq1e3/5sbO3eqTSrjWalsXc1Nuu7W81X1x94BTYAAABwhh7/+Ju/TyLi4HOTrSFzZbhVh6wGnFfFw1KSj7vs1n94rD3+8xklBZyJiXEnAIxNcdwJAGNTGncCwNglA5b3vHnnN/n4E6PNBwAAGL3Zj/a+/l/ou+ZB/8XAuWcnhsvL9X+4vFrX/4e9k7fgbeBwkZQGnQH07SA4HsBF8NDX/wdK0/eUEAAAMHJTrSEplIud6UKhXI640XotQClZXa9V5yLisYj43XTpA9n0fKtmMrDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pWkSKQAAAHChRRT+mvyq/Sz/2elnpo7/PnAl+c905K8Iff1Hr/zgzlKzuTOfzf/n4fzmD/P5z47jFwwAAAC4FAa8wP9BnX56px8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP09v03ljvDWcb9+xciYqZb/GJcbY2vRikirv0rieKR9ZKImBhB/Mnsz0e6xU+ytA5Ddos/OYL4B/f6xo+D/FPoFv/6COLDZfZmdvx5qdv+V4inWuPu+18x4oHp96v38S8Oj38TPfb/G0PGeOKtn1d6xr8X8UTxRPy7WYRO/KRH/KeHjP+Nr+/v91qW/jhituv3T9Kpkh0ho9Lc3K409vZvr28urVXXqlsLC/PPL76w+NziXGV1vVbN/3aN8d2P/eKdfu2/1iP+zID2P3Nia1e6xvjfW3fuf6hdLHWLf/PpLvF//ZO8xsn4hfy771N5OVs+2ykftMtHPfmz3z7Zr/0rPdo/6P9/s9dGj7n11W//aciqAMAZaOztbyzVatWdC1vIeulDVs7Ozs5FzgpDFCYefjt3R5pYmqZptk89xHaSGPenelgY95EJAAAYtXdP+sedCQAAAAAAAAAAAAAAAAAAAFxeZ/E4seMxDw5LySgeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL/DwAA//9t9tlI") r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='usrjquota=') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 2.832112475s ago: executing program 4 (id=213): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='filemap_set_wb_err\x00', r5}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x40000000) close(r7) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000500)='loginuid\x00') r10 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="76ea0900bce10087b68b0000c13c", 0x0, 0x63ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) pread64(r9, 0x0, 0x0, 0x4007) socket$nl_netfilter(0x10, 0x3, 0xc) lsm_set_self_attr(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="6600000000000000070000000000000023000000000000450300000000000000f1c3f32dae845a619d6120ea39afdb55a08fde6432044890b934ee5dfa6cea2fc3be"], 0x23, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) 2.74524613s ago: executing program 5 (id=214): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) (fail_nth: 2) 2.672748963s ago: executing program 4 (id=215): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=""/201, 0xc9, 0x0, &(0x7f0000000200)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xa, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000700)={{0x62, @multicast1, 0x4e20, 0x4, 'sh\x00', 0x10, 0x75b3, 0x7}, {@private=0xa010102, 0x4e24, 0x3, 0x4, 0x100, 0x834d}}, 0x44) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000000)=0x5c, &(0x7f00000000c0)=0x4) syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000880)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@lazytime}, {@norecovery}, {@nogrpid}, {@dioread_lock}]}, 0x13, 0x545, &(0x7f0000000a00)="$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") sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="740000000406010100000000000000000a00000305000100070000000900020073797a320000000005000100070000000900020073797a3200000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a3200000000"], 0xfffffffffffffee3}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000180)=0x30) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, 0x0, 0x3) setsockopt(r8, 0x1500, 0xfffffffe, &(0x7f0000000880), 0x0) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 2.605315715s ago: executing program 5 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4886) 2.587528536s ago: executing program 5 (id=217): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) ptrace(0x4208, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x3, 0x0, 0x0, 0x7, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x200000000008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x9, 0x17, 0x0, 0x3, 0x802, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x80000000, 0x4}, 0x0, 0x22, 0x4a8d, 0x1, 0x7f, 0x7, 0xfff7, 0x0, 0x9, 0x0, 0x4}, r0, 0xb, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r7, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r8, 0x0, 0x4ffe6, 0x0) 2.355846766s ago: executing program 4 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x80) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000240)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x206082, 0x92) mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7fffffffffffffff}, 0x18) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") 2.230084382s ago: executing program 4 (id=219): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000060a09040000000000000000020000051400048010000180080001006c6f67000400028014000000110001000000000000fcff000000000a"], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x20}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x8080) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000003", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021008000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRESHEX=0x0], 0x50}}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x1, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x14804}, 0x40000a0) 2.122680007s ago: executing program 4 (id=220): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r1, 0xb}}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000700000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000000)=""/62, 0x3e) 2.122202296s ago: executing program 2 (id=221): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100000000"], 0x64}}, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.121781416s ago: executing program 0 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) 2.078690978s ago: executing program 0 (id=223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) connect$phonet_pipe(r1, &(0x7f0000000140)={0x23, 0xf, 0x8, 0x7}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$eJzs3VuIXHcdB/Dfmd1Jc9mai63aGpvVUFso3dlsNiERHyzxUmtSK4oPoRCW7HQ3ZHZnzW6gOxVM8UUURPBFBKFiH6yIBvJSKbV9aPFFQakXKhoDKohQtFIQQZ3yn8t22pw0pXs5JOfzgTP7P/9zZv7/2eE755w5twBKazQ9ZBEjEXEhIrZ3R18/w2j3T2v/+dk0ZNFuf/YfWWe+6f3nZ/uz9p+3LT0MR2yOiF1HsthbvbzdxeXW6alGo36mN15bmluoLS637j41NzVTn6nPHzg0eXji4OShybV7r+O/2HrzX2+//9Ljz/37v9/53cEfpf6O9KYNvo+1Mhqjvf9JNXYO1A9nEfetdWMFGep+1HH7QF02XGCHeMva7V0/TJ/fOyNibyf/22Mouh/ei089+K/t8Zt7i+4jsH7affmTX24Pqg4+AbjWVTrrwFllLCK65UplbKy7Dn9TbK00motLdz3UPDs/3V1X3hHVykOnGvXx3rbCjqhmaXxfp/za+MQbxvdHdNaBvzK0pTM+drLZmN7oLzugYyTi4oUvnNy07Q35/9tQN//A9Svl/9fPP/lMKr8yVHRvgI2U8v+DV+Y+FfIPpSP/UF7yD+Ul/1Be8g/lJf9QXvIP5SX/UF7yD+Ul/1Be/fw/cOxYPHDsWLvVO/99vjlz6vTswuGJ8bG5syfHTjbPLIzNNJsznTN25q7+uo1mc2HfRJx9uLZUX1yqLS63Tsw1z84vneic13+innMpAKAAxy9tvm/nnmdfzCLi3Ie2dIZkU2+6rML1rd3OnNIPJWXTH8rLpdqgvGzjA9lVpm++0oTG2vcF2BiVojsAFOaOW+z/g7Ly+z+Ul9//obze7jp+FnFujbsCFMTv/1A+fv+H8hq5wv2/bhy4d9d4RLwjIn4+VL2hf68v4Jryuk39kYiLF7/3+drKfbgVFBQUVgrFfVEBG+O10BfdE6Ao0/vPz/aHjWrz6ZmNagnI89I93YOAUu5bvaE7ZXhl30B1nY4T2nlbevzJHx+7c3YoDdH7HlqHpoAc5x6NiPfkLf+zzr6BHb35dnVni5si4uaIeFdEvHuVbX/rMxGj8Xx9sE7+YeO81fzfEhFpcX1rRLw3InZHxPtW2favLqT8/3bLYJ38Qzl88bmiewAU5ZNPFt0DoCjHHWMApfX9R4ruAVCUp35cdA+Aonz9haJ7AOX27D0RMZ63/6/S2d/fV+1dF/CG3rUAtkTE1ojY1juH8MbeOYLbB/YZXs2JT0eMxm0/Hayz/w82Tv/4v9Zlx/9VVo7/G4qIPato4+kPj3wtr35qd8r/44/0j/9LQ2q/fywgsL5eejTi1tz8ZyvH/GaRchrx/rfZxuiXLj2RV//C/el1q7+UfyhG+7sRH4z8/PelUm1pbqG2uNy6u3Mf75n6/IFDk4cnDk4emqx1LhFS618oJMfRf758V179HyZS/r99QP6hGGn5v/UK+R9c///AKto48s2vHs+rH/lzyv/uZ948/5W/b8o+1xnv35fg4amlpTP7IjZlRy+vn1hFR+E6189IP0Mp/3fuzd/+39V7Tlr+H4mIj6b1hYj4X0T8PyI+FhEfj4hPRMS9b9LmN+6YuZRX/6cnUv4fO235D8VI+Z++yvI//f3PKtrYHD/7cl79R/ak/I/9/i9HHxxOg/wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArL3F5dbpqUajfmYdC0W/RwAAAAAAACiLVwMAAP//Oacv4Q==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0x1ffffdc1, &(0x7f0000000180)=ANY=[@ANYBLOB="0225378d3beb59c7e63569f98be4874a16b19847fc05b83fdcda770a92eb081d5af9cf64bec9668dcb88f9a192fca0457f94347e6dbc93", @ANYRES32=r1], 0x0, 0x40000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$rds(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 2.017511071s ago: executing program 3 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.969176543s ago: executing program 3 (id=225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) io_setup(0x6, &(0x7f00000000c0)) r2 = open(&(0x7f0000002ec0)='./bus\x00', 0x145143, 0x1) sendfile(r2, r2, 0x0, 0x800000009) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x20001, 0x82) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4, 0x0, 0x100000001}, 0x18) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000240)=""/207) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getpgid(0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) 0s ago: executing program 5 (id=226): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8852, &(0x7f0000000000)={[{@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x4}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.203' (ED25519) to the list of known hosts. [ 25.999079][ T29] audit: type=1400 audit(1763951693.813:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.022702][ T29] audit: type=1400 audit(1763951693.833:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.023256][ T3304] cgroup: Unknown subsys name 'net' [ 26.053570][ T29] audit: type=1400 audit(1763951693.863:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.166576][ T3304] cgroup: Unknown subsys name 'cpuset' [ 26.172674][ T3304] cgroup: Unknown subsys name 'rlimit' [ 26.281126][ T29] audit: type=1400 audit(1763951694.093:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.305097][ T29] audit: type=1400 audit(1763951694.093:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.325634][ T29] audit: type=1400 audit(1763951694.093:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.332550][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.346120][ T29] audit: type=1400 audit(1763951694.093:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.374890][ T29] audit: type=1400 audit(1763951694.103:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.399840][ T29] audit: type=1400 audit(1763951694.103:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.403403][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.423520][ T29] audit: type=1400 audit(1763951694.163:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.624315][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.640321][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.658408][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 27.678235][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.746698][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 27.778051][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.785161][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.792321][ T3314] bridge_slave_0: entered allmulticast mode [ 27.798830][ T3314] bridge_slave_0: entered promiscuous mode [ 27.810701][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.817816][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.824947][ T3313] bridge_slave_0: entered allmulticast mode [ 27.831442][ T3313] bridge_slave_0: entered promiscuous mode [ 27.842057][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.849160][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.856469][ T3314] bridge_slave_1: entered allmulticast mode [ 27.862949][ T3314] bridge_slave_1: entered promiscuous mode [ 27.881617][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.888756][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.895881][ T3313] bridge_slave_1: entered allmulticast mode [ 27.902330][ T3313] bridge_slave_1: entered promiscuous mode [ 27.908497][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.915558][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.922739][ T3321] bridge_slave_0: entered allmulticast mode [ 27.929016][ T3321] bridge_slave_0: entered promiscuous mode [ 27.939875][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.947083][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.954182][ T3318] bridge_slave_0: entered allmulticast mode [ 27.960432][ T3318] bridge_slave_0: entered promiscuous mode [ 27.973049][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.980144][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.987266][ T3321] bridge_slave_1: entered allmulticast mode [ 27.993539][ T3321] bridge_slave_1: entered promiscuous mode [ 28.008247][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.015321][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.022742][ T3318] bridge_slave_1: entered allmulticast mode [ 28.029047][ T3318] bridge_slave_1: entered promiscuous mode [ 28.047168][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.064068][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.074521][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.084666][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.094926][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.117491][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.137461][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.159700][ T3313] team0: Port device team_slave_0 added [ 28.165814][ T3314] team0: Port device team_slave_0 added [ 28.172344][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.182206][ T3314] team0: Port device team_slave_1 added [ 28.188019][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.195109][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.202574][ T3322] bridge_slave_0: entered allmulticast mode [ 28.209061][ T3322] bridge_slave_0: entered promiscuous mode [ 28.229067][ T3313] team0: Port device team_slave_1 added [ 28.239039][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.246216][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.253399][ T3322] bridge_slave_1: entered allmulticast mode [ 28.260033][ T3322] bridge_slave_1: entered promiscuous mode [ 28.266767][ T3321] team0: Port device team_slave_0 added [ 28.281622][ T3318] team0: Port device team_slave_0 added [ 28.291886][ T3321] team0: Port device team_slave_1 added [ 28.298020][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.305206][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.331278][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.347612][ T3318] team0: Port device team_slave_1 added [ 28.362236][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.369276][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.395687][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.406600][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.413753][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.440120][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.461700][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.478204][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.485164][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.511563][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.522624][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.529602][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.555531][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.567220][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.576440][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.583394][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.609591][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.621334][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.628287][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.654518][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.670970][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.678083][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.704151][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.746092][ T3322] team0: Port device team_slave_0 added [ 28.754407][ T3314] hsr_slave_0: entered promiscuous mode [ 28.760326][ T3314] hsr_slave_1: entered promiscuous mode [ 28.783181][ T3321] hsr_slave_0: entered promiscuous mode [ 28.789044][ T3321] hsr_slave_1: entered promiscuous mode [ 28.794875][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 28.800608][ T3321] Cannot create hsr debugfs directory [ 28.806607][ T3322] team0: Port device team_slave_1 added [ 28.824629][ T3318] hsr_slave_0: entered promiscuous mode [ 28.830737][ T3318] hsr_slave_1: entered promiscuous mode [ 28.836563][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 28.842272][ T3318] Cannot create hsr debugfs directory [ 28.855061][ T3313] hsr_slave_0: entered promiscuous mode [ 28.861069][ T3313] hsr_slave_1: entered promiscuous mode [ 28.866887][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 28.872589][ T3313] Cannot create hsr debugfs directory [ 28.898654][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.905586][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.931765][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.962654][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.969815][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.995748][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.068817][ T3322] hsr_slave_0: entered promiscuous mode [ 29.074633][ T3322] hsr_slave_1: entered promiscuous mode [ 29.080548][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 29.086298][ T3322] Cannot create hsr debugfs directory [ 29.184234][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.199663][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.208011][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.218340][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.249735][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.258533][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.267714][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.278553][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.304722][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.316501][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.335570][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.344199][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.366162][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.375103][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.392197][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.401273][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.416620][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.437667][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.449446][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.462570][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.471801][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.480629][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.498458][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.505521][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.521043][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.528100][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.569182][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.597005][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.608844][ T1697] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.615975][ T1697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.641336][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.648525][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.668265][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.677927][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.693025][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.705046][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.718774][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.729715][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.736834][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.745654][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.752733][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.763788][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.772548][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.792591][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.799722][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.808318][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.815402][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.826159][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.833312][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.841685][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.848792][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.873502][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.884067][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.943079][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.007925][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.053482][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.072778][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.087561][ T3318] veth0_vlan: entered promiscuous mode [ 30.098535][ T3314] veth0_vlan: entered promiscuous mode [ 30.117029][ T3318] veth1_vlan: entered promiscuous mode [ 30.127620][ T3314] veth1_vlan: entered promiscuous mode [ 30.168020][ T3314] veth0_macvtap: entered promiscuous mode [ 30.191631][ T3318] veth0_macvtap: entered promiscuous mode [ 30.200086][ T3314] veth1_macvtap: entered promiscuous mode [ 30.207628][ T3318] veth1_macvtap: entered promiscuous mode [ 30.223666][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.242383][ T3321] veth0_vlan: entered promiscuous mode [ 30.258516][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.267433][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.277553][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.288873][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.305792][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.316105][ T3321] veth1_vlan: entered promiscuous mode [ 30.324684][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.350437][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.363145][ T3313] veth0_vlan: entered promiscuous mode [ 30.380589][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.391070][ T3313] veth1_vlan: entered promiscuous mode [ 30.397475][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.409275][ T3322] veth0_vlan: entered promiscuous mode [ 30.420998][ T3321] veth0_macvtap: entered promiscuous mode [ 30.428959][ T3321] veth1_macvtap: entered promiscuous mode [ 30.429448][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.439480][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.477250][ T3322] veth1_vlan: entered promiscuous mode [ 30.484860][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.505100][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.532769][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.545090][ T3313] veth0_macvtap: entered promiscuous mode [ 30.561020][ T1697] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.570598][ T3322] veth0_macvtap: entered promiscuous mode [ 30.578299][ T3322] veth1_macvtap: entered promiscuous mode [ 30.598452][ T3313] veth1_macvtap: entered promiscuous mode [ 30.607343][ T1697] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.637076][ T1697] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.647538][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.665436][ T1697] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.678740][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.695311][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.714224][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.724767][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.742752][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.753019][ T3483] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.768707][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.806848][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.823811][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.849959][ T1697] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.876273][ T1697] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.898445][ T1697] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.914460][ T3500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 30.925397][ T3500] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 30.936534][ T3500] loop1: detected capacity change from 0 to 512 [ 30.943770][ T3500] ======================================================= [ 30.943770][ T3500] WARNING: The mand mount option has been deprecated and [ 30.943770][ T3500] and is ignored by this kernel. Remove the mand [ 30.943770][ T3500] option from the mount to silence this warning. [ 30.943770][ T3500] ======================================================= [ 31.029644][ T3507] netlink: 'syz.2.10': attribute type 7 has an invalid length. [ 31.064706][ T3500] EXT4-fs (loop1): orphan cleanup on readonly fs [ 31.065160][ T3500] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2: bad orphan inode 13 [ 31.065311][ T3500] ext4_test_bit(bit=12, block=18) = 1 [ 31.065326][ T3500] is_bad_inode(inode)=0 [ 31.065333][ T3500] NEXT_ORPHAN(inode)=2130706432 [ 31.065340][ T3500] max_ino=32 [ 31.065347][ T3500] i_nlink=1 [ 31.065974][ T3500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.066321][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 31.066336][ T29] audit: type=1400 audit(1763951698.883:181): avc: denied { mount } for pid=3496 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.067481][ T29] audit: type=1400 audit(1763951698.883:182): avc: denied { execute } for pid=3496 comm="syz.1.2" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.067592][ T29] audit: type=1400 audit(1763951698.883:183): avc: denied { read open } for pid=3496 comm="syz.1.2" path="/0/bus/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.067979][ T3500] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 31.070192][ T29] audit: type=1400 audit(1763951698.883:184): avc: denied { read write } for pid=3511 comm="syz.3.11" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 31.105038][ T3517] capability: warning: `syz.2.13' uses 32-bit capabilities (legacy support in use) [ 31.107706][ T29] audit: type=1400 audit(1763951698.883:185): avc: denied { open } for pid=3511 comm="syz.3.11" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 31.233977][ T3500] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2: bg 0: block 248: padding at end of block bitmap is not set [ 31.284006][ T3500] Quota error (device loop1): write_blk: dquota write failed [ 31.292027][ T3500] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 31.302341][ T3500] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2: Failed to acquire dquot type 1 [ 31.319541][ T3517] loop2: detected capacity change from 0 to 512 [ 31.328761][ T3517] audit: audit_backlog=65 > audit_backlog_limit=64 [ 31.335405][ T3517] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 31.343128][ T3517] audit: backlog limit exceeded [ 31.374870][ T3500] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 31.428161][ T3517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.445141][ T3530] SELinux: failed to load policy [ 31.544343][ T3500] syz.1.2 (3500) used greatest stack depth: 9248 bytes left [ 31.582928][ T3313] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 31.595907][ T3313] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 31.671945][ T3512] loop3: detected capacity change from 0 to 512 [ 31.681653][ T3512] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11: bg 0: block 393: padding at end of block bitmap is not set [ 31.696458][ T3512] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 31.705460][ T3512] EXT4-fs (loop3): 2 truncates cleaned up [ 31.711767][ T3512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.836445][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.860558][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.918203][ T3550] netlink: 'syz.2.23': attribute type 7 has an invalid length. [ 32.008684][ T3558] SELinux: failed to load policy [ 33.284230][ T3568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 33.295121][ T3568] netlink: 'syz.2.31': attribute type 1 has an invalid length. [ 33.306625][ T3568] loop2: detected capacity change from 0 to 512 [ 33.314460][ T3568] EXT4-fs (loop2): orphan cleanup on readonly fs [ 33.588699][ T3563] loop0: detected capacity change from 0 to 512 [ 33.917148][ T3568] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.31: bad orphan inode 13 [ 33.927272][ T3568] ext4_test_bit(bit=12, block=18) = 1 [ 33.932657][ T3568] is_bad_inode(inode)=0 [ 33.937069][ T3568] NEXT_ORPHAN(inode)=2130706432 [ 33.942022][ T3568] max_ino=32 [ 33.945225][ T3568] i_nlink=1 [ 33.950313][ T3568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.335713][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.347395][ T3568] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 34.898408][ T3563] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.26: bg 0: block 393: padding at end of block bitmap is not set [ 34.912826][ T3563] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 34.922716][ T3563] EXT4-fs (loop0): 2 truncates cleaned up [ 34.928915][ T3563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.946436][ T3568] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 35.177911][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.205162][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.245833][ T3576] loop4: detected capacity change from 0 to 512 [ 35.344827][ T3596] netlink: 'syz.2.38': attribute type 7 has an invalid length. [ 35.354610][ T3576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.374260][ T3577] chnl_net:caif_netlink_parms(): no params data found [ 35.397146][ T3590] loop0: detected capacity change from 0 to 512 [ 35.405833][ T3590] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.35: bg 0: block 393: padding at end of block bitmap is not set [ 35.420219][ T3590] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 35.429606][ T3590] EXT4-fs (loop0): 2 truncates cleaned up [ 35.435865][ T3590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.474400][ T3605] SELinux: failed to load policy [ 35.480817][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.488181][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.500138][ T3577] bridge_slave_0: entered allmulticast mode [ 35.516487][ T3577] bridge_slave_0: entered promiscuous mode [ 35.523440][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.530545][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.538820][ T3577] bridge_slave_1: entered allmulticast mode [ 35.545237][ T3577] bridge_slave_1: entered promiscuous mode [ 35.578142][ T3577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.588851][ T3577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.611038][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.631491][ T3577] team0: Port device team_slave_0 added [ 35.642495][ T3577] team0: Port device team_slave_1 added [ 35.650509][ T3612] netlink: 'syz.2.40': attribute type 12 has an invalid length. [ 35.677974][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.693197][ T3577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.700785][ T3577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.727442][ T3577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.739791][ T3577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.746837][ T3577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.772839][ T3577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.794172][ T3618] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 35.800822][ T3618] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 35.808618][ T3618] vhci_hcd vhci_hcd.0: Device attached [ 35.829909][ T3577] hsr_slave_0: entered promiscuous mode [ 35.836195][ T3577] hsr_slave_1: entered promiscuous mode [ 35.842271][ T3577] debugfs: 'hsr0' already exists in 'hsr' [ 35.848166][ T3577] Cannot create hsr debugfs directory [ 35.904159][ T3627] loop0: detected capacity change from 0 to 512 [ 35.996219][ T3422] vhci_hcd: vhci_device speed not set [ 36.076057][ T3422] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 36.113627][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.485048][ T3620] vhci_hcd: connection reset by peer [ 36.620955][ T29] kauditd_printk_skb: 1408 callbacks suppressed [ 36.620973][ T29] audit: type=1326 audit(1763951704.433:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 36.725711][ T29] audit: type=1326 audit(1763951704.463:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 36.749245][ T29] audit: type=1326 audit(1763951704.463:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 36.772578][ T29] audit: type=1326 audit(1763951704.463:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 36.795967][ T29] audit: type=1326 audit(1763951704.463:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 36.820009][ T29] audit: type=1326 audit(1763951704.473:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 36.843339][ T29] audit: type=1326 audit(1763951704.473:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 36.866574][ T29] audit: type=1326 audit(1763951704.473:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 36.890127][ T29] audit: type=1326 audit(1763951704.473:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 36.913479][ T29] audit: type=1326 audit(1763951704.473:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 36.948612][ T31] vhci_hcd: stop threads [ 36.952895][ T31] vhci_hcd: release socket [ 36.957415][ T31] vhci_hcd: disconnect device [ 36.974275][ T3627] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.41: bg 0: block 393: padding at end of block bitmap is not set [ 36.989021][ T3627] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 36.998115][ T3627] EXT4-fs (loop0): 2 truncates cleaned up [ 37.004729][ T3627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.261314][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.322199][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.461803][ T3651] loop4: detected capacity change from 0 to 1024 [ 37.474171][ T3577] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.481759][ T3651] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 37.834222][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.846626][ T3577] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.857642][ T3577] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.867667][ T3577] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.251420][ T3577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.258716][ T3577] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.268505][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.268541][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.270465][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.270497][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.302318][ T3577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.319412][ T12] bridge_slave_1: left allmulticast mode [ 38.319447][ T12] bridge_slave_1: left promiscuous mode [ 38.319577][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.411567][ T12] bridge_slave_0: left allmulticast mode [ 38.411605][ T12] bridge_slave_0: left promiscuous mode [ 38.411737][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.508390][ T3684] loop0: detected capacity change from 0 to 512 [ 38.511317][ T3684] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.50: bg 0: block 393: padding at end of block bitmap is not set [ 38.511558][ T3684] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 38.513521][ T3684] EXT4-fs (loop0): 2 truncates cleaned up [ 38.514057][ T3684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.648649][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.649907][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.650821][ T12] bond0 (unregistering): Released all slaves [ 38.715237][ T3577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.772149][ T12] hsr_slave_0: left promiscuous mode [ 38.772542][ T12] hsr_slave_1: left promiscuous mode [ 38.772838][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.772853][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.773470][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.773485][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.776862][ T12] veth1_macvtap: left promiscuous mode [ 38.776911][ T12] veth0_macvtap: left promiscuous mode [ 38.776989][ T12] veth1_vlan: left promiscuous mode [ 38.777018][ T12] veth0_vlan: left promiscuous mode [ 38.942808][ T12] team0 (unregistering): Port device team_slave_1 removed [ 38.945347][ T12] team0 (unregistering): Port device team_slave_0 removed [ 39.206900][ T3577] veth0_vlan: entered promiscuous mode [ 39.226197][ T3577] veth1_vlan: entered promiscuous mode [ 39.247420][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.248174][ T3577] veth0_macvtap: entered promiscuous mode [ 39.250006][ T3577] veth1_macvtap: entered promiscuous mode [ 39.260644][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.261995][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.361126][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.361212][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.361246][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.361275][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.390904][ T3717] netlink: 'syz.0.53': attribute type 12 has an invalid length. [ 39.647622][ T3732] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 39.654258][ T3732] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 39.661922][ T3732] vhci_hcd vhci_hcd.0: Device attached [ 39.855999][ T3395] vhci_hcd: vhci_device speed not set [ 39.916076][ T3395] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 40.166344][ T3745] SELinux: failed to load policy [ 40.436188][ T3733] vhci_hcd: connection reset by peer [ 40.460694][ T3757] loop3: detected capacity change from 0 to 512 [ 40.506668][ T12] vhci_hcd: stop threads [ 40.511017][ T12] vhci_hcd: release socket [ 40.515460][ T12] vhci_hcd: disconnect device [ 40.532831][ T3757] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.61: bg 0: block 393: padding at end of block bitmap is not set [ 40.554640][ T3757] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 40.566333][ T3757] EXT4-fs (loop3): 2 truncates cleaned up [ 40.572845][ T3757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.662835][ T3752] loop0: detected capacity change from 0 to 512 [ 40.675467][ T3762] loop2: detected capacity change from 0 to 1024 [ 40.687495][ T3752] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.62: bg 0: block 393: padding at end of block bitmap is not set [ 40.703765][ T3762] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 40.718192][ T3752] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 40.743472][ T3752] EXT4-fs (loop0): 2 truncates cleaned up [ 40.755173][ T3752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.357070][ T3422] usb 7-1: enqueue for inactive port 0 [ 41.362689][ T3422] usb 7-1: enqueue for inactive port 0 [ 41.438692][ T3422] vhci_hcd: vhci_device speed not set [ 41.459543][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.496696][ T3771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 41.514898][ T3771] netlink: 'syz.2.69': attribute type 1 has an invalid length. [ 41.644566][ T3776] loop2: detected capacity change from 0 to 512 [ 41.663240][ T3776] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.671013][ T3773] netlink: 'syz.4.70': attribute type 12 has an invalid length. [ 42.368965][ T3776] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.69: bad orphan inode 13 [ 42.381454][ T3776] ext4_test_bit(bit=12, block=18) = 1 [ 42.387018][ T3776] is_bad_inode(inode)=0 [ 42.391201][ T3776] NEXT_ORPHAN(inode)=2130706432 [ 42.396301][ T3776] max_ino=32 [ 42.399522][ T3776] i_nlink=1 [ 42.446734][ T3776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.483760][ T3782] loop0: detected capacity change from 0 to 128 [ 42.490186][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 42.490202][ T29] audit: type=1326 audit(1763951710.223:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 42.520544][ T29] audit: type=1326 audit(1763951710.293:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 42.543924][ T29] audit: type=1326 audit(1763951710.293:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 42.567143][ T29] audit: type=1326 audit(1763951710.293:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 42.590460][ T29] audit: type=1326 audit(1763951710.293:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 42.613712][ T29] audit: type=1326 audit(1763951710.293:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 42.637220][ T29] audit: type=1326 audit(1763951710.293:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 42.660842][ T29] audit: type=1326 audit(1763951710.293:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 42.684165][ T29] audit: type=1326 audit(1763951710.293:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 42.707438][ T29] audit: type=1326 audit(1763951710.293:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 42.773426][ T3784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.70'. [ 42.786394][ T3776] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 42.797191][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.807748][ T3782] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.820837][ T3776] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 42.829683][ T3782] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.146627][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.302267][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.515724][ T3799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.75'. [ 43.550146][ T3803] loop2: detected capacity change from 0 to 1024 [ 43.566288][ T3803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.583869][ T3796] loop0: detected capacity change from 0 to 512 [ 43.643043][ T3803] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 43.649611][ T3803] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 43.657395][ T3803] vhci_hcd vhci_hcd.0: Device attached [ 43.669986][ T3796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.682700][ T3806] loop5: detected capacity change from 0 to 512 [ 43.689383][ T3803] program syz.2.77 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.691514][ T3806] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.78: bg 0: block 393: padding at end of block bitmap is not set [ 43.713446][ T3806] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 43.722478][ T3806] EXT4-fs (loop5): 2 truncates cleaned up [ 43.728704][ T3806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.744288][ T3809] vhci_hcd: connection closed [ 43.744452][ T49] vhci_hcd: stop threads [ 43.753852][ T49] vhci_hcd: release socket [ 43.757140][ T3817] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 43.758333][ T49] vhci_hcd: disconnect device [ 43.769539][ T3817] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 43.779937][ T3817] vhci_hcd vhci_hcd.0: Device attached [ 43.804586][ T3577] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.906350][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.996000][ T3402] vhci_hcd: vhci_device speed not set [ 44.055995][ T3402] usb 7-1: new full-speed USB device number 3 using vhci_hcd [ 44.090480][ T3834] SELinux: failed to load policy [ 44.113548][ T3836] mmap: syz.4.86 (3836) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.125557][ T3836] FAULT_INJECTION: forcing a failure. [ 44.125557][ T3836] name failslab, interval 1, probability 0, space 0, times 1 [ 44.138456][ T3836] CPU: 1 UID: 0 PID: 3836 Comm: syz.4.86 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.138480][ T3836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 44.138490][ T3836] Call Trace: [ 44.138496][ T3836] [ 44.138503][ T3836] __dump_stack+0x1d/0x30 [ 44.138520][ T3836] dump_stack_lvl+0xe8/0x140 [ 44.138537][ T3836] dump_stack+0x15/0x1b [ 44.138551][ T3836] should_fail_ex+0x265/0x280 [ 44.138575][ T3836] ? hugetlb_reserve_pages+0x393/0xc00 [ 44.138593][ T3836] should_failslab+0x8c/0xb0 [ 44.138612][ T3836] __kmalloc_cache_noprof+0x4c/0x4a0 [ 44.138637][ T3836] hugetlb_reserve_pages+0x393/0xc00 [ 44.138659][ T3836] hugetlbfs_file_mmap+0x27e/0x340 [ 44.138685][ T3836] mmap_region+0xfa7/0x1620 [ 44.138707][ T3836] do_mmap+0x9b3/0xbe0 [ 44.138718][ T3836] __se_sys_remap_file_pages+0x537/0x5e0 [ 44.138732][ T3836] ? fput+0x8f/0xc0 [ 44.138742][ T3836] __x64_sys_remap_file_pages+0x67/0x80 [ 44.138754][ T3836] x64_sys_call+0x23b3/0x3000 [ 44.138765][ T3836] do_syscall_64+0xd2/0x200 [ 44.138777][ T3836] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.138792][ T3836] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.138809][ T3836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.138821][ T3836] RIP: 0033:0x7fe90601f749 [ 44.138830][ T3836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.138840][ T3836] RSP: 002b:00007fe904a7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 44.138851][ T3836] RAX: ffffffffffffffda RBX: 00007fe906275fa0 RCX: 00007fe90601f749 [ 44.138858][ T3836] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 44.138864][ T3836] RBP: 00007fe904a7f090 R08: 0000000000010000 R09: 0000000000000000 [ 44.138871][ T3836] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 44.138877][ T3836] R13: 00007fe906276038 R14: 00007fe906275fa0 R15: 00007ffe177aa1f8 [ 44.138886][ T3836] [ 44.138893][ T3836] HugeTLB: unable to allocate vma specific lock [ 44.232824][ T3838] loop0: detected capacity change from 0 to 512 [ 44.261742][ T3683] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.267396][ T3838] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.83: bg 0: block 393: padding at end of block bitmap is not set [ 44.283890][ T3683] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.292687][ T3838] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 44.300356][ T3683] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.308656][ T3838] EXT4-fs (loop0): 2 truncates cleaned up [ 44.316472][ T3683] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.324827][ T3838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.332446][ T3683] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.427771][ T3683] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.435169][ T3683] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.442625][ T3683] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.450046][ T3683] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.457515][ T3683] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.480401][ T3683] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 44.504163][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.572554][ T3819] vhci_hcd: connection reset by peer [ 44.579928][ T49] vhci_hcd: stop threads [ 44.584222][ T49] vhci_hcd: release socket [ 44.588784][ T49] vhci_hcd: disconnect device [ 44.855861][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.869028][ T3853] loop5: detected capacity change from 0 to 512 [ 44.878086][ T3853] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.91: bg 0: block 393: padding at end of block bitmap is not set [ 44.892910][ T3853] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 44.904193][ T3853] EXT4-fs (loop5): 2 truncates cleaned up [ 44.910617][ T3853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.938970][ T3856] loop0: detected capacity change from 0 to 1024 [ 44.946085][ T3856] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 44.976344][ T3395] usb 9-1: enqueue for inactive port 0 [ 44.985993][ T3395] usb 9-1: enqueue for inactive port 0 [ 45.049515][ T3858] syz.0.93 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.066012][ T3395] vhci_hcd: vhci_device speed not set [ 45.425645][ T3870] loop2: detected capacity change from 0 to 1024 [ 45.432468][ T3870] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 45.527342][ T3874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.100'. [ 45.599033][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 45.608885][ T3577] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.622595][ T3880] netlink: 'syz.4.103': attribute type 1 has an invalid length. [ 45.638935][ T3880] loop4: detected capacity change from 0 to 512 [ 45.646762][ T3880] EXT4-fs (loop4): orphan cleanup on readonly fs [ 45.653736][ T3880] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.103: bad orphan inode 13 [ 45.664069][ T3880] ext4_test_bit(bit=12, block=18) = 1 [ 45.669515][ T3880] is_bad_inode(inode)=0 [ 45.673670][ T3880] NEXT_ORPHAN(inode)=2130706432 [ 45.678564][ T3880] max_ino=32 [ 45.681765][ T3880] i_nlink=1 [ 45.685341][ T3880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.688645][ T3888] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 45.704208][ T3888] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.711856][ T3888] vhci_hcd vhci_hcd.0: Device attached [ 45.748152][ T3880] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 45.773306][ T3894] loop3: detected capacity change from 0 to 512 [ 45.781791][ T3894] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.891908][ T3880] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 45.913399][ T3894] EXT4-fs (loop3): 1 orphan inode deleted [ 45.919663][ T3894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.932353][ T1697] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 1 [ 45.947073][ T3894] ext4 filesystem being mounted at /syzcgroup/unified/syz3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.146626][ T3909] Zero length message leads to an empty skb [ 46.328575][ T3422] vhci_hcd: vhci_device speed not set [ 46.385967][ T3422] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 46.520679][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.556829][ T3889] vhci_hcd: connection reset by peer [ 46.570531][ T12] vhci_hcd: stop threads [ 46.574816][ T12] vhci_hcd: release socket [ 46.579414][ T12] vhci_hcd: disconnect device [ 47.396406][ T3924] loop2: detected capacity change from 0 to 512 [ 47.760034][ T3924] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.115: bg 0: block 393: padding at end of block bitmap is not set [ 48.111428][ T3925] loop0: detected capacity change from 0 to 512 [ 48.204056][ T3925] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.116: bg 0: block 393: padding at end of block bitmap is not set [ 48.218704][ T3925] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 48.227805][ T3925] EXT4-fs (loop0): 2 truncates cleaned up [ 48.233974][ T3925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.262172][ T3924] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 48.287431][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 48.287446][ T29] audit: type=1326 audit(1763951716.103:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90601f749 code=0x7ffc0000 [ 48.507932][ T29] audit: type=1326 audit(1763951716.133:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90601f749 code=0x7ffc0000 [ 48.508265][ T3924] EXT4-fs (loop2): 2 truncates cleaned up [ 48.531496][ T29] audit: type=1326 audit(1763951716.133:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fe90601f749 code=0x7ffc0000 [ 48.531550][ T29] audit: type=1326 audit(1763951716.133:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90601f749 code=0x7ffc0000 [ 48.584154][ T29] audit: type=1326 audit(1763951716.133:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90601f749 code=0x7ffc0000 [ 48.607778][ T29] audit: type=1326 audit(1763951716.133:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe90601f749 code=0x7ffc0000 [ 48.631017][ T29] audit: type=1326 audit(1763951716.133:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90601f749 code=0x7ffc0000 [ 48.654603][ T29] audit: type=1326 audit(1763951716.133:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90601f749 code=0x7ffc0000 [ 48.678637][ T29] audit: type=1326 audit(1763951716.133:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe90601f749 code=0x7ffc0000 [ 48.702326][ T29] audit: type=1326 audit(1763951716.133:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.4.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90601f749 code=0x7ffc0000 [ 48.728300][ T3924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.832964][ T3938] loop5: detected capacity change from 0 to 128 [ 48.878096][ T3943] FAULT_INJECTION: forcing a failure. [ 48.878096][ T3943] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.891357][ T3943] CPU: 1 UID: 0 PID: 3943 Comm: syz.3.121 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.891388][ T3943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.891399][ T3943] Call Trace: [ 48.891406][ T3943] [ 48.891413][ T3943] __dump_stack+0x1d/0x30 [ 48.891437][ T3943] dump_stack_lvl+0xe8/0x140 [ 48.891463][ T3943] dump_stack+0x15/0x1b [ 48.891484][ T3943] should_fail_ex+0x265/0x280 [ 48.891596][ T3943] should_fail+0xb/0x20 [ 48.891614][ T3943] should_fail_usercopy+0x1a/0x20 [ 48.891654][ T3943] _copy_from_user+0x1c/0xb0 [ 48.891684][ T3943] restore_altstack+0x4b/0x2d0 [ 48.891725][ T3943] ? __set_task_blocked+0x23a/0x2a0 [ 48.891754][ T3943] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 48.891781][ T3943] ? _raw_spin_unlock_irq+0x26/0x50 [ 48.891806][ T3943] ? signal_setup_done+0x266/0x290 [ 48.891826][ T3943] ? xfd_validate_state+0x45/0xf0 [ 48.891843][ T3943] ? fpu__clear_user_states+0x63/0x270 [ 48.891894][ T3943] ? fpregs_mark_activate+0x66/0x140 [ 48.891927][ T3943] ? fpu__clear_user_states+0x63/0x270 [ 48.892035][ T3943] ? arch_do_signal_or_restart+0x2b5/0x440 [ 48.892111][ T3943] ? __rcu_read_unlock+0x4f/0x70 [ 48.892142][ T3943] x64_sys_call+0x2d4b/0x3000 [ 48.892164][ T3943] do_syscall_64+0xd2/0x200 [ 48.892186][ T3943] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.892272][ T3943] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.892362][ T3943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.892386][ T3943] RIP: 0033:0x7fc1be4ab829 [ 48.892400][ T3943] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 48.892461][ T3943] RSP: 002b:00007fc1bcf76a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 48.892485][ T3943] RAX: ffffffffffffffda RBX: 00007fc1be765fa0 RCX: 00007fc1be4ab829 [ 48.892500][ T3943] RDX: 00007fc1bcf76a80 RSI: 00007fc1bcf76bb0 RDI: 0000000000000021 [ 48.892513][ T3943] RBP: 00007fc1bcf77090 R08: 0000000000000000 R09: 0000000000000000 [ 48.892542][ T3943] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 48.892553][ T3943] R13: 00007fc1be766038 R14: 00007fc1be765fa0 R15: 00007ffd0ddcda08 [ 48.892577][ T3943] [ 49.197590][ T3945] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.370611][ T3945] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.490364][ T3402] usb 7-1: enqueue for inactive port 0 [ 49.495962][ T3402] usb 7-1: enqueue for inactive port 0 [ 49.530818][ T3945] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.577240][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.585992][ T3402] vhci_hcd: vhci_device speed not set [ 49.627267][ T3945] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.646481][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.679955][ T3953] loop4: detected capacity change from 0 to 512 [ 49.690828][ T3960] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3960 comm=syz.0.127 [ 49.717028][ T3962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.130'. [ 49.726155][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.734485][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.744096][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.762844][ T3953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.784948][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.807913][ T3964] netlink: 'syz.3.129': attribute type 12 has an invalid length. [ 49.864726][ T3978] loop5: detected capacity change from 0 to 256 [ 49.881593][ T3979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 49.905981][ T3971] netlink: 64 bytes leftover after parsing attributes in process `syz.2.131'. [ 49.959515][ T3982] serio: Serial port ptm0 [ 50.087399][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.190253][ T3989] loop0: detected capacity change from 0 to 512 [ 50.199031][ T3989] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.136: bg 0: block 393: padding at end of block bitmap is not set [ 50.214037][ T3989] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 50.223192][ T3989] EXT4-fs (loop0): 2 truncates cleaned up [ 50.230372][ T3989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.597270][ T3997] ------------[ cut here ]------------ [ 50.602801][ T3997] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x3, 0x0] s64=[0x3, 0x0] u32=[0x3, 0x0] s32=[0x3, 0x0] var_off=(0x0, 0x0) [ 50.618682][ T3997] WARNING: CPU: 0 PID: 3997 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 50.629193][ T3997] Modules linked in: [ 50.633106][ T3997] CPU: 0 UID: 0 PID: 3997 Comm: syz.3.139 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.642817][ T3997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.652923][ T3997] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 50.659379][ T3997] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 22 f7 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 50.679433][ T3997] RSP: 0018:ffffc90011e3b408 EFLAGS: 00010282 [ 50.685579][ T3997] RAX: 9e737dc6f535fb00 RBX: ffff8881193efb50 RCX: ffff888119c41080 [ 50.693616][ T3997] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 50.701680][ T3997] RBP: 0000000000000000 R08: 0001c90011e3b257 R09: 0000000000000000 [ 50.709705][ T3997] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff8881193efb10 [ 50.717778][ T3997] R13: ffff888124060000 R14: ffff888124060000 R15: ffff8881193efb48 [ 50.725799][ T3997] FS: 00007fc1bcf776c0(0000) GS:ffff8882aee11000(0000) knlGS:0000000000000000 [ 50.734854][ T3997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.741481][ T3997] CR2: 00007fc1bcf76f98 CR3: 0000000118f0e000 CR4: 00000000003506f0 [ 50.743991][ T4005] syz.3.139 uses obsolete (PF_INET,SOCK_PACKET) [ 50.749496][ T3997] Call Trace: [ 50.749506][ T3997] [ 50.749521][ T3997] reg_set_min_max+0x215/0x260 [ 50.767037][ T3997] check_cond_jmp_op+0x130d/0x19e0 [ 50.772280][ T3997] do_check+0x3363/0x8460 [ 50.776665][ T3997] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 50.782546][ T3997] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 50.788759][ T3997] do_check_common+0xc5e/0x12b0 [ 50.793634][ T3997] bpf_check+0xaaae/0xd9d0 [ 50.798123][ T3997] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 50.804424][ T3997] ? alloc_pages_bulk_noprof+0x4a6/0x530 [ 50.810289][ T3997] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 50.816307][ T3997] ? pcpu_block_update+0x24e/0x3b0 [ 50.821463][ T3997] ? pcpu_block_refresh_hint+0x10b/0x170 [ 50.827156][ T3997] ? pcpu_block_refresh_hint+0x157/0x170 [ 50.832813][ T3997] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 50.838997][ T3997] ? css_rstat_updated+0xb7/0x240 [ 50.844135][ T3997] ? __rcu_read_unlock+0x4f/0x70 [ 50.849320][ T3997] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 50.855158][ T3997] ? bpf_prog_alloc+0x5b/0x150 [ 50.859972][ T3997] ? pcpu_alloc_noprof+0xd29/0x1250 [ 50.865205][ T3997] ? should_fail_ex+0x30/0x280 [ 50.870053][ T3997] ? should_failslab+0x8c/0xb0 [ 50.874900][ T3997] ? __kmalloc_noprof+0x2a2/0x570 [ 50.880022][ T3997] ? security_bpf_prog_load+0x60/0x140 [ 50.886228][ T3997] ? selinux_bpf_prog_load+0xad/0xd0 [ 50.891638][ T3997] ? security_bpf_prog_load+0x9e/0x140 [ 50.897365][ T3997] bpf_prog_load+0xf6e/0x1100 [ 50.902076][ T3997] ? security_bpf+0x2b/0x90 [ 50.906666][ T3997] __sys_bpf+0x469/0x7c0 [ 50.910939][ T3997] __x64_sys_bpf+0x41/0x50 [ 50.915390][ T3997] x64_sys_call+0x2aee/0x3000 [ 50.920167][ T3997] do_syscall_64+0xd2/0x200 [ 50.924726][ T3997] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.930990][ T3997] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.936830][ T3997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.942751][ T3997] RIP: 0033:0x7fc1be50f749 [ 50.947210][ T3997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.949486][ T4013] netlink: 'syz.2.144': attribute type 7 has an invalid length. [ 50.966950][ T3997] RSP: 002b:00007fc1bcf77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.983155][ T3997] RAX: ffffffffffffffda RBX: 00007fc1be765fa0 RCX: 00007fc1be50f749 [ 50.991171][ T3997] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 50.999189][ T3997] RBP: 00007fc1be593f91 R08: 0000000000000000 R09: 0000000000000000 [ 51.007202][ T3997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.015206][ T3997] R13: 00007fc1be766038 R14: 00007fc1be765fa0 R15: 00007ffd0ddcda08 [ 51.023335][ T3997] [ 51.026415][ T3997] ---[ end trace 0000000000000000 ]--- [ 51.033135][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.047873][ T4003] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 51.054610][ T4003] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.062197][ T4003] vhci_hcd vhci_hcd.0: Device attached [ 51.077174][ T4016] FAULT_INJECTION: forcing a failure. [ 51.077174][ T4016] name failslab, interval 1, probability 0, space 0, times 0 [ 51.090007][ T4016] CPU: 0 UID: 0 PID: 4016 Comm: syz.2.146 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 51.090093][ T4016] Tainted: [W]=WARN [ 51.090099][ T4016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.090111][ T4016] Call Trace: [ 51.090118][ T4016] [ 51.090125][ T4016] __dump_stack+0x1d/0x30 [ 51.090147][ T4016] dump_stack_lvl+0xe8/0x140 [ 51.090166][ T4016] dump_stack+0x15/0x1b [ 51.090258][ T4016] should_fail_ex+0x265/0x280 [ 51.090293][ T4016] ? vt_do_kdsk_ioctl+0x3e7/0x720 [ 51.090320][ T4016] should_failslab+0x8c/0xb0 [ 51.090352][ T4016] __kmalloc_cache_noprof+0x4c/0x4a0 [ 51.090463][ T4016] vt_do_kdsk_ioctl+0x3e7/0x720 [ 51.090487][ T4016] ? security_capable+0x83/0x90 [ 51.090521][ T4016] vt_ioctl+0x8e8/0x18a0 [ 51.090544][ T4016] ? tty_jobctrl_ioctl+0x29e/0x810 [ 51.090591][ T4016] tty_ioctl+0x7d8/0xb80 [ 51.090617][ T4016] ? __pfx_tty_ioctl+0x10/0x10 [ 51.090641][ T4016] __se_sys_ioctl+0xce/0x140 [ 51.090660][ T4016] __x64_sys_ioctl+0x43/0x50 [ 51.090762][ T4016] x64_sys_call+0x1816/0x3000 [ 51.090783][ T4016] do_syscall_64+0xd2/0x200 [ 51.090874][ T4016] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.090933][ T4016] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 51.090965][ T4016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.091062][ T4016] RIP: 0033:0x7f017346f749 [ 51.091081][ T4016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.091101][ T4016] RSP: 002b:00007f0171ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.091182][ T4016] RAX: ffffffffffffffda RBX: 00007f01736c5fa0 RCX: 00007f017346f749 [ 51.091199][ T4016] RDX: 0000200000000280 RSI: 0000000000004b47 RDI: 0000000000000003 [ 51.091225][ T4016] RBP: 00007f0171ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.091236][ T4016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.091248][ T4016] R13: 00007f01736c6038 R14: 00007f01736c5fa0 R15: 00007ffdaa3bc8d8 [ 51.091264][ T4016] [ 51.215961][ T4006] vhci_hcd: connection closed [ 51.344451][ T31] vhci_hcd: stop threads [ 51.353716][ T31] vhci_hcd: release socket [ 51.358252][ T31] vhci_hcd: disconnect device [ 51.379030][ T4022] loop4: detected capacity change from 0 to 512 [ 51.389145][ T4022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.547697][ T3422] usb 11-1: enqueue for inactive port 0 [ 51.553487][ T3422] usb 11-1: enqueue for inactive port 0 [ 52.475966][ T3422] vhci_hcd: vhci_device speed not set [ 52.742993][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.871092][ T4045] loop0: detected capacity change from 0 to 512 [ 52.880757][ T4045] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.154: bg 0: block 393: padding at end of block bitmap is not set [ 52.895343][ T4045] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 52.904267][ T4045] EXT4-fs (loop0): 2 truncates cleaned up [ 52.910631][ T4045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.332111][ T4063] syzkaller0: entered promiscuous mode [ 53.337717][ T4063] syzkaller0: entered allmulticast mode [ 53.386754][ T4067] FAULT_INJECTION: forcing a failure. [ 53.386754][ T4067] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 53.400408][ T4067] CPU: 0 UID: 0 PID: 4067 Comm: syz.5.161 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.400521][ T4067] Tainted: [W]=WARN [ 53.400529][ T4067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 53.400542][ T4067] Call Trace: [ 53.400550][ T4067] [ 53.400559][ T4067] __dump_stack+0x1d/0x30 [ 53.400654][ T4067] dump_stack_lvl+0xe8/0x140 [ 53.400747][ T4067] dump_stack+0x15/0x1b [ 53.400764][ T4067] should_fail_ex+0x265/0x280 [ 53.400800][ T4067] should_fail_alloc_page+0xf2/0x100 [ 53.400900][ T4067] __alloc_frozen_pages_noprof+0xff/0x360 [ 53.400933][ T4067] alloc_pages_mpol+0xb3/0x260 [ 53.400955][ T4067] vma_alloc_folio_noprof+0x1aa/0x300 [ 53.400984][ T4067] handle_mm_fault+0xec2/0x2be0 [ 53.401008][ T4067] ? mt_find+0x21b/0x330 [ 53.401036][ T4067] do_user_addr_fault+0x3fe/0x1080 [ 53.401063][ T4067] exc_page_fault+0x62/0xa0 [ 53.401172][ T4067] asm_exc_page_fault+0x26/0x30 [ 53.401191][ T4067] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 53.401287][ T4067] Code: f9 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f9 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 53.401308][ T4067] RSP: 0018:ffffc9000114f928 EFLAGS: 00050206 [ 53.401326][ T4067] RAX: ffff888119c92ba0 RBX: ffffc9000114fe28 RCX: 0000000000000c95 [ 53.401338][ T4067] RDX: 0000000000000000 RSI: ffff888120c6b1c3 RDI: 0000200000003080 [ 53.401364][ T4067] RBP: 0000000000000c95 R08: 0000000000000ab1 R09: 0000000000000000 [ 53.401406][ T4067] R10: 0001888120c6b1c3 R11: 0001888120c6be57 R12: ffffc9000114fe10 [ 53.401418][ T4067] R13: 00000000000001c3 R14: 0000000000000c95 R15: ffff888120c6b1c3 [ 53.401436][ T4067] _copy_to_iter+0x40c/0xe70 [ 53.401461][ T4067] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 53.401489][ T4067] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 53.401570][ T4067] __skb_datagram_iter+0xc6/0x690 [ 53.401593][ T4067] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 53.401655][ T4067] skb_copy_datagram_iter+0x3d/0x110 [ 53.401675][ T4067] netlink_recvmsg+0x1a8/0x550 [ 53.401701][ T4067] ? __pfx_netlink_recvmsg+0x10/0x10 [ 53.401723][ T4067] sock_recvmsg+0x139/0x170 [ 53.401824][ T4067] ____sys_recvmsg+0xf5/0x280 [ 53.401850][ T4067] ___sys_recvmsg+0x11f/0x370 [ 53.401876][ T4067] do_recvmmsg+0x1ef/0x540 [ 53.401899][ T4067] ? fput+0x8f/0xc0 [ 53.401920][ T4067] __x64_sys_recvmmsg+0xe5/0x170 [ 53.401950][ T4067] x64_sys_call+0x27aa/0x3000 [ 53.401977][ T4067] do_syscall_64+0xd2/0x200 [ 53.401999][ T4067] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.402030][ T4067] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 53.402099][ T4067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.402139][ T4067] RIP: 0033:0x7fce26c0f749 [ 53.402157][ T4067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.402176][ T4067] RSP: 002b:00007fce25656038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 53.402245][ T4067] RAX: ffffffffffffffda RBX: 00007fce26e66090 RCX: 00007fce26c0f749 [ 53.402261][ T4067] RDX: 0000000000001b00 RSI: 0000200000005140 RDI: 0000000000000007 [ 53.402276][ T4067] RBP: 00007fce25656090 R08: 0000000000000000 R09: 0000000000000000 [ 53.402290][ T4067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.402301][ T4067] R13: 00007fce26e66128 R14: 00007fce26e66090 R15: 00007fffb058cbf8 [ 53.402321][ T4067] [ 53.753170][ T4055] loop4: detected capacity change from 0 to 512 [ 53.799585][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.817848][ T4055] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.155: bg 0: block 393: padding at end of block bitmap is not set [ 53.849462][ T29] kauditd_printk_skb: 1986 callbacks suppressed [ 53.849481][ T29] audit: type=1326 audit(1763951721.653:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4068 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 53.879327][ T29] audit: type=1326 audit(1763951721.653:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4068 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 53.902745][ T29] audit: type=1326 audit(1763951721.653:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4068 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 53.925929][ T29] audit: type=1326 audit(1763951721.653:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4068 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017346f749 code=0x7ffc0000 [ 53.972614][ T4055] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 53.981990][ T4055] EXT4-fs (loop4): 2 truncates cleaned up [ 53.988491][ T4055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.993320][ T29] audit: type=1400 audit(1763951721.803:4269): avc: denied { create } for pid=4075 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 54.020677][ T29] audit: type=1400 audit(1763951721.803:4270): avc: denied { create } for pid=4075 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.039927][ T29] audit: type=1400 audit(1763951721.803:4271): avc: denied { bind } for pid=4075 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.058875][ T29] audit: type=1400 audit(1763951721.803:4272): avc: denied { read } for pid=4075 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.078231][ T29] audit: type=1400 audit(1763951721.803:4273): avc: denied { connect } for pid=4075 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 54.097592][ T29] audit: type=1400 audit(1763951721.803:4274): avc: denied { bind } for pid=4075 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 54.148955][ T4072] loop2: detected capacity change from 0 to 512 [ 54.189499][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.199389][ T4072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.529404][ T4105] loop4: detected capacity change from 0 to 512 [ 54.536603][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.536699][ T4105] EXT4-fs (loop4): filesystem is read-only [ 54.552040][ T4105] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 54.563888][ T4105] EXT4-fs (loop4): filesystem is read-only [ 54.569859][ T4105] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.585981][ T4105] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #16: comm syz.4.174: iget: bad i_size value: -504403158265486552 [ 54.606197][ T4105] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.174: couldn't read orphan inode 16 (err -117) [ 54.621156][ T4105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.243943][ T4119] loop0: detected capacity change from 0 to 128 [ 55.294419][ T4119] loop0: detected capacity change from 0 to 512 [ 55.319547][ T4119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.332582][ T4119] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.423188][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.800051][ T4131] FAULT_INJECTION: forcing a failure. [ 55.800051][ T4131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.813306][ T4131] CPU: 1 UID: 0 PID: 4131 Comm: syz.4.178 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.813337][ T4131] Tainted: [W]=WARN [ 55.813344][ T4131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.813354][ T4131] Call Trace: [ 55.813361][ T4131] [ 55.813399][ T4131] __dump_stack+0x1d/0x30 [ 55.813425][ T4131] dump_stack_lvl+0xe8/0x140 [ 55.813449][ T4131] dump_stack+0x15/0x1b [ 55.813469][ T4131] should_fail_ex+0x265/0x280 [ 55.813512][ T4131] should_fail+0xb/0x20 [ 55.813531][ T4131] should_fail_usercopy+0x1a/0x20 [ 55.813554][ T4131] _copy_to_user+0x20/0xa0 [ 55.813583][ T4131] copy_siginfo_to_user+0x22/0xb0 [ 55.813607][ T4131] x64_setup_rt_frame+0x2b5/0x580 [ 55.813629][ T4131] arch_do_signal_or_restart+0x23e/0x440 [ 55.813697][ T4131] exit_to_user_mode_loop+0x77/0x110 [ 55.813734][ T4131] do_syscall_64+0x1d6/0x200 [ 55.813760][ T4131] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.813791][ T4131] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.813866][ T4131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.813891][ T4131] RIP: 0033:0x7fe90601f747 [ 55.813909][ T4131] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 55.813926][ T4131] RSP: 002b:00007fe904a7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 55.813945][ T4131] RAX: 00000000000000ca RBX: 00007fe906275fa0 RCX: 00007fe90601f749 [ 55.813956][ T4131] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000020000000cffc [ 55.814039][ T4131] RBP: 00007fe904a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.814053][ T4131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.814068][ T4131] R13: 00007fe906276038 R14: 00007fe906275fa0 R15: 00007ffe177aa1f8 [ 55.814120][ T4131] [ 56.090266][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.300492][ T4145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.186'. [ 56.343175][ T4143] loop2: detected capacity change from 0 to 512 [ 56.352519][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.618892][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.637732][ T4155] random: crng reseeded on system resumption [ 56.652128][ T4155] ip6gre1: entered allmulticast mode [ 56.660811][ T4157] loop2: detected capacity change from 0 to 512 [ 56.667836][ T4157] journal_path: Non-blockdev passed as './bus' [ 56.674175][ T4157] EXT4-fs: error: could not find journal device path [ 56.701548][ T4161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 56.714108][ T4161] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 56.718017][ T4163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 56.731358][ T4161] loop2: detected capacity change from 0 to 512 [ 56.734120][ T4163] netlink: 'syz.3.193': attribute type 1 has an invalid length. [ 56.746696][ T4161] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.753471][ T4161] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.192: bad orphan inode 13 [ 56.755472][ T4163] binfmt_misc: register: failed to install interpreter file ./file2 [ 56.763705][ T4161] ext4_test_bit(bit=12, block=18) = 1 [ 56.776994][ T4161] is_bad_inode(inode)=0 [ 56.781144][ T4161] NEXT_ORPHAN(inode)=2130706432 [ 56.786003][ T4161] max_ino=32 [ 56.789291][ T4161] i_nlink=1 [ 56.792762][ T4161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.808511][ T4161] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 56.826229][ T4161] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 56.909865][ T4169] loop5: detected capacity change from 0 to 164 [ 57.041343][ T4175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=4175 comm=syz.4.196 [ 57.272732][ T4180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.197'. [ 57.601630][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.661952][ T4185] loop0: detected capacity change from 0 to 512 [ 58.021924][ T4185] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.199: bg 0: block 393: padding at end of block bitmap is not set [ 58.046812][ T4189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.202'. [ 58.655490][ T4190] loop4: detected capacity change from 0 to 512 [ 59.045403][ T4190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.061302][ T29] kauditd_printk_skb: 2793 callbacks suppressed [ 59.061319][ T29] audit: type=1400 audit(1763951726.873:7068): avc: denied { wake_alarm } for pid=4194 comm="syz.2.203" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.706517][ T4185] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 59.729619][ T4185] EXT4-fs (loop0): 2 truncates cleaned up [ 59.749085][ T4185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.062457][ T4202] FAULT_INJECTION: forcing a failure. [ 60.062457][ T4202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.075642][ T4202] CPU: 0 UID: 0 PID: 4202 Comm: syz.3.205 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 60.075696][ T4202] Tainted: [W]=WARN [ 60.075703][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.075714][ T4202] Call Trace: [ 60.075720][ T4202] [ 60.075728][ T4202] __dump_stack+0x1d/0x30 [ 60.075754][ T4202] dump_stack_lvl+0xe8/0x140 [ 60.075854][ T4202] dump_stack+0x15/0x1b [ 60.075874][ T4202] should_fail_ex+0x265/0x280 [ 60.075919][ T4202] should_fail+0xb/0x20 [ 60.075980][ T4202] should_fail_usercopy+0x1a/0x20 [ 60.076005][ T4202] copy_fpstate_to_sigframe+0x628/0x7d0 [ 60.076053][ T4202] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 60.076200][ T4202] ? x86_task_fpu+0x36/0x60 [ 60.076233][ T4202] get_sigframe+0x34d/0x490 [ 60.076320][ T4202] ? get_signal+0xdc7/0xf70 [ 60.076356][ T4202] x64_setup_rt_frame+0xa8/0x580 [ 60.076382][ T4202] arch_do_signal_or_restart+0x23e/0x440 [ 60.076407][ T4202] exit_to_user_mode_loop+0x77/0x110 [ 60.076445][ T4202] do_syscall_64+0x1d6/0x200 [ 60.076468][ T4202] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.076500][ T4202] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.076537][ T4202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.076570][ T4202] RIP: 0033:0x7fc1be50f749 [ 60.076587][ T4202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.076607][ T4202] RSP: 002b:00007fc1bcf77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.076630][ T4202] RAX: 0000000000000000 RBX: 00007fc1be765fa0 RCX: 00007fc1be50f749 [ 60.076643][ T4202] RDX: 0000000000000042 RSI: 0000000000000001 RDI: 0000000000000003 [ 60.076656][ T4202] RBP: 00007fc1bcf77090 R08: 0000000000000010 R09: 0000000000000000 [ 60.076744][ T4202] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 60.076831][ T4202] R13: 00007fc1be766038 R14: 00007fc1be765fa0 R15: 00007ffd0ddcda08 [ 60.076852][ T4202] [ 60.300037][ T29] audit: type=1400 audit(1763951728.113:7069): avc: denied { mounton } for pid=4203 comm="syz.3.206" path="/44/bus" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.353133][ T29] audit: type=1400 audit(1763951728.153:7070): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.410965][ T4206] netlink: 'syz.2.208': attribute type 7 has an invalid length. [ 60.427637][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.441471][ T4208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.451041][ T4210] netlink: 28 bytes leftover after parsing attributes in process `syz.5.209'. [ 60.470059][ T4213] loop0: detected capacity change from 0 to 128 [ 60.476669][ T29] audit: type=1326 audit(1763951728.283:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 60.479387][ T4214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'. [ 60.500095][ T29] audit: type=1326 audit(1763951728.283:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 60.532368][ T29] audit: type=1326 audit(1763951728.283:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 60.536958][ T4214] netlink: 'syz.2.211': attribute type 1 has an invalid length. [ 60.556336][ T29] audit: type=1326 audit(1763951728.283:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 60.572537][ T4214] loop2: detected capacity change from 0 to 512 [ 60.587512][ T29] audit: type=1326 audit(1763951728.283:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 60.617007][ T29] audit: type=1326 audit(1763951728.283:7076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 60.620432][ T4216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 60.640585][ T29] audit: type=1326 audit(1763951728.283:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cda2f749 code=0x7ffc0000 [ 60.657063][ T4216] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 60.674813][ T4213] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.682984][ T4214] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.693138][ T4213] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.707202][ T4216] binfmt_misc: register: failed to install interpreter file ./file2 [ 60.718988][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.728503][ T4214] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.211: bad orphan inode 13 [ 60.738896][ T4214] ext4_test_bit(bit=12, block=18) = 1 [ 60.744285][ T4214] is_bad_inode(inode)=0 [ 60.748610][ T4214] NEXT_ORPHAN(inode)=2130706432 [ 60.753575][ T4214] max_ino=32 [ 60.756823][ T4214] i_nlink=1 [ 60.759050][ T4214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.783752][ T4214] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 60.795052][ T4223] FAULT_INJECTION: forcing a failure. [ 60.795052][ T4223] name failslab, interval 1, probability 0, space 0, times 0 [ 60.795087][ T4223] CPU: 0 UID: 0 PID: 4223 Comm: syz.5.214 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 60.795120][ T4223] Tainted: [W]=WARN [ 60.795127][ T4223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.795203][ T4223] Call Trace: [ 60.795210][ T4223] [ 60.795217][ T4223] __dump_stack+0x1d/0x30 [ 60.795280][ T4223] dump_stack_lvl+0xe8/0x140 [ 60.795302][ T4223] dump_stack+0x15/0x1b [ 60.795347][ T4223] should_fail_ex+0x265/0x280 [ 60.795380][ T4223] should_failslab+0x8c/0xb0 [ 60.795530][ T4223] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 60.795671][ T4223] ? __alloc_skb+0x101/0x320 [ 60.795711][ T4223] __alloc_skb+0x101/0x320 [ 60.795739][ T4223] netlink_alloc_large_skb+0xbf/0xf0 [ 60.795801][ T4223] netlink_sendmsg+0x3cf/0x6b0 [ 60.795822][ T4223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.795911][ T4223] __sock_sendmsg+0x145/0x180 [ 60.795937][ T4223] ____sys_sendmsg+0x31e/0x4e0 [ 60.795958][ T4223] ___sys_sendmsg+0x17b/0x1d0 [ 60.796062][ T4223] __x64_sys_sendmsg+0xd4/0x160 [ 60.796085][ T4223] x64_sys_call+0x191e/0x3000 [ 60.796108][ T4223] do_syscall_64+0xd2/0x200 [ 60.796129][ T4223] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.796158][ T4223] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.796214][ T4223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.796236][ T4223] RIP: 0033:0x7fce26c0f749 [ 60.796252][ T4223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.796270][ T4223] RSP: 002b:00007fce25677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.796290][ T4223] RAX: ffffffffffffffda RBX: 00007fce26e65fa0 RCX: 00007fce26c0f749 [ 60.796303][ T4223] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 60.796361][ T4223] RBP: 00007fce25677090 R08: 0000000000000000 R09: 0000000000000000 [ 60.796374][ T4223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.796386][ T4223] R13: 00007fce26e66038 R14: 00007fce26e65fa0 R15: 00007fffb058cbf8 [ 60.796411][ T4223] [ 60.834500][ T4214] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 60.844012][ T4229] netlink: 96 bytes leftover after parsing attributes in process `syz.4.215'. [ 60.847987][ T4229] loop4: detected capacity change from 0 to 512 [ 60.848868][ T4229] EXT4-fs: Mount option(s) incompatible with ext2 [ 60.996393][ T4240] netlink: 'syz.5.217': attribute type 12 has an invalid length. [ 61.162339][ T4244] loop4: detected capacity change from 0 to 512 [ 61.177644][ T4244] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.218: bg 0: block 248: padding at end of block bitmap is not set [ 61.177925][ T4244] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.218: Failed to acquire dquot type 1 [ 61.178409][ T4244] EXT4-fs (loop4): 1 truncate cleaned up [ 61.193435][ T4240] netlink: 40 bytes leftover after parsing attributes in process `syz.5.217'. [ 61.204365][ T4244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.231477][ T4244] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.232430][ T4244] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.270591][ T4244] syz.4.218 (4244) used greatest stack depth: 9120 bytes left [ 61.284293][ T4248] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12315 sclass=netlink_xfrm_socket pid=4248 comm=syz.4.219 [ 61.297652][ T4248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=4248 comm=syz.4.219 [ 61.328050][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.348916][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.402975][ T4255] netlink: 'syz.0.222': attribute type 7 has an invalid length. [ 61.466924][ T4251] loop4: detected capacity change from 0 to 512 [ 61.501015][ T4261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.224'. [ 61.519470][ T4257] loop0: detected capacity change from 0 to 512 [ 61.542886][ T4251] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.220: bg 0: block 393: padding at end of block bitmap is not set [ 62.481188][ T4251] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 62.500569][ T4251] EXT4-fs (loop4): 2 truncates cleaned up [ 62.512411][ T4257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.756432][ T4251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.485775][ T10] Process accounting resumed Connection to 10.128.1.203 closed by remote host. [ 64.583538][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 64.583557][ T29] audit: type=1400 audit(1763951732.393:7171): avc: denied { create } for pid=4263 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.609391][ T29] audit: type=1400 audit(1763951732.393:7172): avc: denied { read write } for pid=4263 comm="syz.3.225" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.633308][ T29] audit: type=1400 audit(1763951732.393:7173): avc: denied { open } for pid=4263 comm="syz.3.225" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.697405][ T3725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.816153][ T4122] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 64.839983][ T4270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.887605][ T49] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.977318][ T49] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.037165][ T49] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.094860][ T3321] ================================================================== [ 65.103033][ T3321] BUG: KCSAN: data-race in free_pid / zap_pid_ns_processes [ 65.110241][ T3321] [ 65.112553][ T3321] read-write to 0xffff8881034bc180 of 4 bytes by task 4270 on cpu 1: [ 65.120612][ T3321] free_pid+0x77/0x180 [ 65.124686][ T3321] free_pids+0x54/0xb0 [ 65.128737][ T3321] release_task+0x9a9/0xb60 [ 65.133301][ T3321] do_exit+0xd81/0x15c0 [ 65.137471][ T3321] do_group_exit+0xff/0x140 [ 65.141975][ T3321] get_signal+0xe58/0xf70 [ 65.146376][ T3321] arch_do_signal_or_restart+0x96/0x440 [ 65.152032][ T3321] exit_to_user_mode_loop+0x77/0x110 [ 65.157418][ T3321] do_syscall_64+0x1d6/0x200 [ 65.162006][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.167996][ T3321] [ 65.170388][ T3321] read to 0xffff8881034bc180 of 4 bytes by task 3321 on cpu 0: [ 65.177999][ T3321] zap_pid_ns_processes+0x1fe/0x2d0 [ 65.183195][ T3321] do_exit+0x1414/0x15c0 [ 65.187436][ T3321] do_group_exit+0xff/0x140 [ 65.191924][ T3321] get_signal+0xe58/0xf70 [ 65.196360][ T3321] arch_do_signal_or_restart+0x96/0x440 [ 65.201901][ T3321] exit_to_user_mode_loop+0x77/0x110 [ 65.207179][ T3321] do_syscall_64+0x1d6/0x200 [ 65.211868][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.217740][ T3321] [ 65.220049][ T3321] value changed: 0x00000002 -> 0x00000001 [ 65.225840][ T3321] [ 65.228149][ T3321] Reported by Kernel Concurrency Sanitizer on: [ 65.234293][ T3321] CPU: 0 UID: 0 PID: 3321 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.245751][ T3321] Tainted: [W]=WARN [ 65.249537][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.259571][ T3321] ================================================================== [ 65.268950][ T49] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.339200][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.398196][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.458358][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.508294][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.577270][ T49] bridge_slave_1: left allmulticast mode [ 65.582929][ T49] bridge_slave_1: left promiscuous mode [ 65.588690][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.596387][ T49] bridge_slave_0: left allmulticast mode [ 65.602086][ T49] bridge_slave_0: left promiscuous mode [ 65.607839][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.615784][ T49] bridge_slave_1: left allmulticast mode [ 65.621808][ T49] bridge_slave_1: left promiscuous mode [ 65.627411][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.634808][ T49] bridge_slave_0: left allmulticast mode [ 65.640470][ T49] bridge_slave_0: left promiscuous mode [ 65.646125][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.752425][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.762250][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.771609][ T49] bond0 (unregistering): Released all slaves [ 65.828105][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.837630][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.846878][ T49] bond0 (unregistering): Released all slaves [ 65.901490][ T49] hsr_slave_0: left promiscuous mode [ 65.907180][ T49] hsr_slave_1: left promiscuous mode [ 65.912794][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.920193][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.927793][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.935272][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.944937][ T49] hsr_slave_0: left promiscuous mode [ 65.950707][ T49] hsr_slave_1: left promiscuous mode [ 65.956253][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.963603][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.971083][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.978541][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.989995][ T49] veth1_macvtap: left promiscuous mode [ 65.995455][ T49] veth0_macvtap: left promiscuous mode [ 66.001039][ T49] veth1_vlan: left promiscuous mode [ 66.006273][ T49] veth0_vlan: left promiscuous mode [ 66.012079][ T49] veth1_macvtap: left promiscuous mode [ 66.017906][ T49] veth0_macvtap: left promiscuous mode [ 66.023485][ T49] veth1_vlan: left promiscuous mode [ 66.028829][ T49] veth0_vlan: left promiscuous mode [ 66.104035][ T49] team0 (unregistering): Port device team_slave_1 removed [ 66.116718][ T49] team0 (unregistering): Port device team_slave_0 removed [ 66.160160][ T49] team0 (unregistering): Port device team_slave_1 removed [ 66.170090][ T49] team0 (unregistering): Port device team_slave_0 removed [ 66.690867][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.738477][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.798692][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.857893][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.918102][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.948589][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.048156][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.108023][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.168688][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.228474][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.288244][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.329327][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.386960][ T49] bridge_slave_1: left allmulticast mode [ 67.392620][ T49] bridge_slave_1: left promiscuous mode [ 67.398432][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.405979][ T49] bridge_slave_0: left allmulticast mode [ 67.411763][ T49] bridge_slave_0: left promiscuous mode [ 67.417587][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.425706][ T49] bridge_slave_1: left allmulticast mode [ 67.431462][ T49] bridge_slave_1: left promiscuous mode [ 67.437182][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.444964][ T49] bridge_slave_0: left allmulticast mode [ 67.450652][ T49] bridge_slave_0: left promiscuous mode [ 67.456559][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.464748][ T49] bridge_slave_1: left allmulticast mode [ 67.470417][ T49] bridge_slave_1: left promiscuous mode [ 67.476167][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.483616][ T49] bridge_slave_0: left allmulticast mode [ 67.489338][ T49] bridge_slave_0: left promiscuous mode [ 67.495076][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.587915][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.597576][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.606688][ T49] bond0 (unregistering): Released all slaves [ 67.678222][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.687625][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.696806][ T49] bond0 (unregistering): Released all slaves [ 67.777575][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.787114][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.796700][ T49] bond0 (unregistering): Released all slaves [ 67.841759][ T49] hsr_slave_0: left promiscuous mode [ 67.847334][ T49] hsr_slave_1: left promiscuous mode [ 67.852844][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.860315][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.867666][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.875033][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.883758][ T49] hsr_slave_0: left promiscuous mode [ 67.889491][ T49] hsr_slave_1: left promiscuous mode [ 67.895019][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.902440][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.909754][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.917153][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.925702][ T49] hsr_slave_0: left promiscuous mode [ 67.931559][ T49] hsr_slave_1: left promiscuous mode [ 67.937313][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.944673][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.952129][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.959591][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.972329][ T49] veth1_macvtap: left promiscuous mode [ 67.977823][ T49] veth0_macvtap: left promiscuous mode [ 67.983324][ T49] veth1_vlan: left promiscuous mode [ 67.988672][ T49] veth0_vlan: left promiscuous mode [ 67.994289][ T49] veth1_macvtap: left promiscuous mode [ 67.999756][ T49] veth0_macvtap: left promiscuous mode [ 68.005222][ T49] veth1_vlan: left promiscuous mode [ 68.010667][ T49] veth0_vlan: left promiscuous mode [ 68.016284][ T49] veth1_macvtap: left promiscuous mode [ 68.021858][ T49] veth0_macvtap: left promiscuous mode [ 68.027365][ T49] veth1_vlan: left promiscuous mode [ 68.032601][ T49] veth0_vlan: left promiscuous mode [ 68.129468][ T49] team0 (unregistering): Port device team_slave_1 removed [ 68.139744][ T49] team0 (unregistering): Port device team_slave_0 removed [ 68.182457][ T49] team0 (unregistering): Port device team_slave_1 removed [ 68.191681][ T49] team0 (unregistering): Port device team_slave_0 removed [ 68.234902][ T49] team0 (unregistering): Port device team_slave_1 removed [ 68.245044][ T49] team0 (unregistering): Port device team_slave_0 removed