last executing test programs: 2.370551163s ago: executing program 4 (id=266): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') pread64(r0, 0x0, 0x0, 0x200040000) 2.370051473s ago: executing program 4 (id=267): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x7f, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x6a90, 0x4) 2.287510624s ago: executing program 4 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r0) syz_clone3(&(0x7f0000000840)={0x2000000, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)=0x0, {0x3a}, &(0x7f0000000740)=""/64, 0x40, &(0x7f0000000780)=""/114, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) sched_setscheduler(r2, 0x5, &(0x7f00000008c0)=0xfffffe01) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000011"], 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2e, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbe}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0xc1, &(0x7f00000003c0)=""/193, 0x40f00, 0x8, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000300)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000004c0)=[{0x2, 0x4, 0x6, 0x5}, {0x2, 0x4, 0x3, 0x7}], 0x10, 0xfd57, @void, @value}, 0x94) 1.562043495s ago: executing program 4 (id=274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) truncate(&(0x7f0000000000)='./file0\x00', 0x40200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$getregset(0x1a, r11, 0x2, &(0x7f0000000740)={0x0}) close(r1) 1.552319405s ago: executing program 2 (id=275): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000100850000004300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000400000014001680100008800c0003"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}}}}]}, 0x4c}}, 0x0) 1.485416707s ago: executing program 2 (id=276): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f785000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = memfd_create(&(0x7f0000000640)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Mc\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca\x00'/440, 0x0) io_setup(0xb4, &(0x7f0000002340)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @empty}, &(0x7f0000000080)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0xab31, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000000000000000000000000fe5ddd8f72f052562337d2601128e6bed200a7a1bc13e6e8d251cad772af6633e4702cf7a31155942b27c75e81e3ddc9affcb01bdfee7b41e88fe03478fd30727e5d4d1eae160429f9a4077f5bfda1b2b2c19da853a8c9f976d3590f84bacd59281d45816a0479861b63d8da13b22cb8fbd55c3e3e189d1224fa5aea87cf92838ca79070a17491d830e34fc29362fb98daf7d21aa2239ae62b24fd212da035b134840a13833c30c62a9e94f1ff9976d80151c6a5ebc9db404e0bb842832aee18bc658b36df17076a3974", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) io_submit(r2, 0x1, &(0x7f0000000d40)=[&(0x7f0000000600)={0x0, 0x0, 0xfe, 0x1, 0x0, r1, 0x0}]) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) close(0xffffffffffffffff) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000800)={0x2, &(0x7f0000000280)=[{0x70, 0x3, 0x3, 0x7fff}, {0xffff, 0x3, 0x2}]}, 0x10) syz_clone3(&(0x7f0000000200)={0x80200, 0x0, &(0x7f00000002c0), &(0x7f0000000300), {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 1.26784597s ago: executing program 3 (id=280): add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x24048800) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv4={0x800, @udp={{0x10, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @rand_addr, {[@lsrr={0x83, 0x1f, 0x40, [@rand_addr=0x64010100, @empty, @private=0xa010100, @broadcast, @rand_addr=0x64010100, @loopback, @empty]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x9b, [@rand_addr=0x64010101]}]}}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) pwrite64(r3, &(0x7f0000000080)='3', 0x1, 0x0) 1.24208093s ago: executing program 2 (id=282): eventfd2(0x6, 0x80000) 1.23238488s ago: executing program 3 (id=283): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}}, 0x8000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='writeback_bdi_register\x00', r3, 0x0, 0x8}, 0x18) getresgid(&(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000340)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x20, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="191f394d0ab51e4c664de60dc483dd1f66b638ee23de0773d0a0ea73f790daf02b14f4b1d568554fbe68d029b57cfce0e34757ba0655e827aed18f2d875eb630f27ba9dfab86c5aa6550c3624e13fff3dc20e5aec9bad476150a5147acbbe31b554dce12a6d97f812e0fc926ac80fee5fd105073e74253cac33f93ca66c1ee7eb271264648a9", 0x86}, {&(0x7f0000000380)="45c5a2d558864023b7a0d7e69eecb630e293aff3355b9df90562699a165357f508a39e910435357abc30e726c7e8f9e678f0d944a37faaba9408f30c2cf5e80653a93b2c13452830f8a48968b2cd4c69cb9670f04a459f5109e578fcfe8b3d960c7e62b8fef2a5be556652f2f55f780e0d48305f25f2f3c9d1c96fa932796bc1ab92fcf48e7b7efc3f6888a16be964a96f0399b027c47b48", 0x98}], 0x2}}], 0x1, 0x20004050) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) socket$rds(0x15, 0x5, 0x0) 1.171465432s ago: executing program 2 (id=284): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0x80, 0x2a, 0x2, 0xfffffff9, 0x0, 0x9}) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0xfffffffffffffff7}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0xfffffffffffffedf, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 1.130914782s ago: executing program 3 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010102, @in=@multicast1, 0x40, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x5, 0x1e2, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r5, 0x0, 0x4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, 0x0, &(0x7f0000000580)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10002, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) setgid(0x0) 921.095915ms ago: executing program 3 (id=287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000001e000000000000000b0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x14000800) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f00000004c0)="04", 0x1, 0x40005, &(0x7f0000000100)={0xa, 0x0, 0x5, @dev, 0x4}, 0x1c) shutdown(r3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 868.148056ms ago: executing program 2 (id=288): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x223801a, &(0x7f0000000040)={[{@nobarrier}]}, 0xfe, 0x576, &(0x7f0000000f00)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='percpu_create_chunk\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r0 = io_uring_setup(0x6b90, &(0x7f0000000200)={0x0, 0x4, 0xc2, 0x2, 0x1e1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readv(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000540)=""/240) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfea7) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e45c, 0x700000000000000) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080), 0x61) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x80012, 0xffffffffffffffff, 0x180000000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x102, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x14010000) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) 863.519157ms ago: executing program 3 (id=289): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 782.073997ms ago: executing program 3 (id=291): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x400010, &(0x7f0000394000/0x3000)=nil, 0x2) unshare(0x28020480) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000001000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000001180)="49807b1864c158328b3962101bf9f2adbd4060ff45025693d9ad91fd602e6e5bccac05e5efe26da8780ab5690fce0bef54ca8469d717a8aa44f3b206c72616c9eae741af20661f7e5da0c9e29637c5a7e85f8087bc301337889371881afaa82b28a0ced836ce82069c30e437e9feeb21645c37f17b81a1071e3b410ba6a96f8f644e3e8597fdbb2bd5fb3dc066dbf9f5dc85b62166e6cab25c1e324a0dd097a20b7b9df2c339597b8109614a49b464d34aec7f22574c05e883e4dc77fad0e706da513b2cbb2a1db6380490eb0117d8f2b333182306dbf23e015e24a88e5f046cbc0252e6f9fcef654fdf0a2c378f3900"/258, 0x0}, 0x17) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073de993891432d68b5cf166473604867797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008001640000000000900f7b516010073797a30000000002c0004801800018011000100666c6f775f6f66666c6f616400000000100001800a00010072656469720000001400000011000100"/235], 0xdc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000009507f14422b43a9dd6d54b7bd1a64581bed47c9e642cab73c9e6b2"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000080)=@chain) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c1200e05982730927a5474235b732729fbed60000dc73609ad6b22d8b0083804b5dd64a3e89600aaadf4f1c6271cfab9f"], 0x1c}}, 0x0) 698.219609ms ago: executing program 0 (id=292): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f785000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = memfd_create(&(0x7f0000000640)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Mc\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca\x00'/440, 0x0) io_setup(0xb4, &(0x7f0000002340)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @empty}, &(0x7f0000000080)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0xab31, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000000000000000000000000fe5ddd8f72f052562337d2601128e6bed200a7a1bc13e6e8d251cad772af6633e4702cf7a31155942b27c75e81e3ddc9affcb01bdfee7b41e88fe03478fd30727e5d4d1eae160429f9a4077f5bfda1b2b2c19da853a8c9f976d3590f84bacd59281d45816a0479861b63d8da13b22cb8fbd55c3e3e189d1224fa5aea87cf92838ca79070a17491d830e34fc29362fb98daf7d21aa2239ae62b24fd212da035b134840a13833c30c62a9e94f1ff9976d80151c6a5ebc9db404e0bb842832aee18bc658b36df17076a3974", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) io_submit(r2, 0x1, &(0x7f0000000d40)=[&(0x7f0000000600)={0x0, 0x0, 0xfe, 0x1, 0x0, r1, 0x0}]) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) close(0xffffffffffffffff) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000800)={0x2, &(0x7f0000000280)=[{0x70, 0x3, 0x3, 0x7fff}, {0xffff, 0x3, 0x2}]}, 0x10) syz_clone3(&(0x7f0000000200)={0x80200, 0x0, &(0x7f00000002c0), &(0x7f0000000300), {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 696.869339ms ago: executing program 4 (id=293): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fd, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0xfffffffffffffd05) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 589.06721ms ago: executing program 1 (id=294): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 550.838841ms ago: executing program 0 (id=295): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}}, 0x8000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='writeback_bdi_register\x00', r3, 0x0, 0x8}, 0x18) getresgid(&(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000340)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x20, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="191f394d0ab51e4c664de60dc483dd1f66b638ee23de0773d0a0ea73f790daf02b14f4b1d568554fbe68d029b57cfce0e34757ba0655e827aed18f2d875eb630f27ba9dfab86c5aa6550c3624e13fff3dc20e5aec9bad476150a5147acbbe31b554dce12a6d97f812e0fc926ac80fee5fd105073e74253cac33f93ca66c1ee7eb271264648a9", 0x86}, {&(0x7f0000000380)="45c5a2d558864023b7a0d7e69eecb630e293aff3355b9df90562699a165357f508a39e910435357abc30e726c7e8f9e678f0d944a37faaba9408f30c2cf5e80653a93b2c13452830f8a48968b2cd4c69cb9670f04a459f5109e578fcfe8b3d960c7e62b8fef2a5be556652f2f55f780e0d48305f25f2f3c9d1c96fa932796bc1ab92fcf48e7b7efc3f6888a16be964a96f0399b027c47b48", 0x98}], 0x2}}], 0x1, 0x20004050) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) socket$rds(0x15, 0x5, 0x0) 509.075242ms ago: executing program 4 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000680, 0x2000000006b0, 0x2000000006e0], 0x0, 0x0, &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 494.748562ms ago: executing program 1 (id=297): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x800, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) io_pgetevents(r2, 0x7f, 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f00000001c0)={r3, r4+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0xfff]}, 0x8}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000740)=0x1000400) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x4db1, 0x3a, '', 0x3a, '\'/^[\',$', 0x3a, './file0', 0x3a, [0x4f, 0x13, 0x46]}, 0x31) 479.851512ms ago: executing program 32 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000680, 0x2000000006b0, 0x2000000006e0], 0x0, 0x0, &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 372.724284ms ago: executing program 2 (id=299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000001e000000000000000b0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x14000800) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f00000004c0)="04", 0x1, 0x40005, &(0x7f0000000100)={0xa, 0x0, 0x5, @dev, 0x4}, 0x1c) shutdown(r3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 319.374295ms ago: executing program 0 (id=300): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x20, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)="191f394d0ab51e4c664de60dc483dd1f66b638ee23de0773d0a0ea73f790daf02b14f4b1d568554fbe68d029b57cfce0e34757ba0655e827aed18f2d875eb630f27ba9dfab86c5aa6550c3624e13fff3dc20e5aec9bad476150a5147acbbe31b554dce12a6d97f812e0fc926ac80fee5fd105073e74253cac33f93ca66c1ee7eb271264648a9", 0x86}, {&(0x7f0000000380)="45c5a2d558864023b7a0d7e69eecb630e293aff3355b9df90562699a165357f508a39e910435357abc30e726c7e8f9e678f0d944a37faaba9408f30c2cf5e80653a93b2c13452830f8a48968b2cd4c69cb9670f04a459f5109e578fcfe8b3d960c7e62b8fef2a5be556652f2f55f780e0d48305f25f2f3c9d1c96fa932796bc1ab92fcf48e7b7efc3f6888a16be964a96f0399b027c47b48", 0x98}], 0x2}}], 0x1, 0x20004050) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 294.637245ms ago: executing program 0 (id=301): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x4, 0x1, 0x8000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x4f, 0x2e]}}, &(0x7f0000000080)=""/233, 0x37, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRESDEC, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 240.036996ms ago: executing program 0 (id=302): syz_clone3(&(0x7f0000001400)={0x3000080, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x3f}, &(0x7f00000005c0)=""/218, 0xda, 0x0, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x8}, 0x58) 169.332247ms ago: executing program 1 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x8040000}, 0x4040810) 168.873647ms ago: executing program 1 (id=304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 168.461127ms ago: executing program 1 (id=305): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f785000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = memfd_create(&(0x7f0000000640)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Mc\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca\x00'/440, 0x0) io_setup(0xb4, &(0x7f0000002340)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @empty}, &(0x7f0000000080)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0xab31, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000000000000000000000000fe5ddd8f72f052562337d2601128e6bed200a7a1bc13e6e8d251cad772af6633e4702cf7a31155942b27c75e81e3ddc9affcb01bdfee7b41e88fe03478fd30727e5d4d1eae160429f9a4077f5bfda1b2b2c19da853a8c9f976d3590f84bacd59281d45816a0479861b63d8da13b22cb8fbd55c3e3e189d1224fa5aea87cf92838ca79070a17491d830e34fc29362fb98daf7d21aa2239ae62b24fd212da035b134840a13833c30c62a9e94f1ff9976d80151c6a5ebc9db404e0bb842832aee18bc658b36df17076a3974", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) io_submit(r2, 0x1, &(0x7f0000000d40)=[&(0x7f0000000600)={0x0, 0x0, 0xfe, 0x1, 0x0, r1, 0x0}]) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) close(0xffffffffffffffff) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000800)={0x2, &(0x7f0000000280)=[{0x70, 0x3, 0x3, 0x7fff}, {0xffff, 0x3, 0x2}]}, 0x10) syz_clone3(&(0x7f0000000200)={0x80200, 0x0, &(0x7f00000002c0), &(0x7f0000000300), {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 138.501627ms ago: executing program 0 (id=306): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fd, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0xfffffffffffffd05) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x4, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000a40)={&(0x7f00000005c0)=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}, 0x1}}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000600)="219eb57f1ebf568800466f98b278840b2614855d7d7f6315954014fa0b07c3ba9f9e15899bb2994c66db46ef7a2bb4164772b47e88138510fae30fea1c26023fe7a5ef031d24e345df097665bdac1f0d1384ae6cd0f2dce6bb2e139b9582c802a8a719a9bdb5652a516fed6ef04ed030be7a", 0x72}, {&(0x7f0000000680)="33f84917f50b81501f281938a253cd8759a107f723904d12515ee3c349f3a6f6c3c95abc6851dcc478ca8e08f2d271f4ffd182ff39625c6369bda84aba1c37402c62ee8ff2f04e5d7e52d0dccb3e81241ed42577027eb3069edb98a002c2a2e747edf29d40a5f926728ffbc121d5001f876d840dcd570c4c633bdffa", 0x7c}, {&(0x7f0000000700)="a58a084bcb3773d018", 0x9}, {&(0x7f0000000740)="cbb8839eccb21c3a51bedadd3d988dd5d470dbd086cd245ad0de99ca3dfe15d3f47d5ee169cbc84d7daee657d7d40a997335333bf95bd8594a2aa051e9a3121e0748da91c958b7432f418eb53f6ab3e2c2c972bf7c2bd97bcf077d05a062ec88f8d30be5444e28e3dbe9f80c254ca60f779c62869dd30cc7ddd2736d9dde98fb4cab519b7ccf06b3381db36879c680b3fcc2138b1ba45a3ae983792552a9648929c5bdb7c08bb3cc3b67bb89bd0575c52c7a6b6506b1a51e2c0288dc0ed5225e58555a5850d01ed66fc1", 0xca}, {&(0x7f0000000840)="9d932112b46b0e1b3e61", 0xa}, {&(0x7f0000000880)="6c7a66830ab77383f3dc68670e327c18bbb5c4c3f525c5f8947b4c257933f68b82a01b28b34ed3f63c9660ad246bd9ad7141f4faf5e1e30075280ca7b6e59ec17b1c1612eb2af1d7d78cab5f7817b06c10dccf3cfcf5e72c9027a114dac43d87d92b2808fe36c6b458776b10afa12d17a71cfc50ab77613013ad5e6ef8304b37d907ce14dcd5817748907fd3b3dac23ea02f7e256e129c7e308965a864be23efe30314e80746ad8d25fd38361f73a224c2ed98", 0xb3}], 0x6, &(0x7f00000009c0)="0029daaf01e001964708d08e7c056859ecc531afffea39445fe836d171b7780dd8318ea99d716ffb4e02500b86081e6d4623291b6cdcf68e1970792bde06e1d84a37d78c491a35cb7b4326db32b7cbc36582f367bd4558e1ca017fcbc467cd016729e99f31c2cb9bcef57f2e8f52", 0x6e, 0x40c89d4}, 0x15) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x2100, &(0x7f00000003c0)="66576c17c205a902d9f523c6614968fff1855b083a8159857b0d73f0deaf1fafccfaa7293b12dd0ae6f58e626c23b02fef348c254d6679654a733a1b43495ca2c34d65a69f7f951119f24e4e5df5308afcc242c1c80cbeaed9fed16602211e6aaed0e31bc78246d734776da0049cd1f763c353407501df5095b145d2d5a5207400624e3c1a07af650348de535aa44c9c4ee9574a5b0c4e49e96719a643ddc802d6b995942570bf26c0fdc3", 0xab, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000480)="69f10067dd4bcfa3be1e46aba6554d8ddf83e1cdd0790db4978928748f3ba54069eabf8737d77d3607f42dc9f98ab7234675f3ba6cf4155761b28004802fed492b1becd7a99953d2baee06be5cf775608be38971384d1c0099e28c56950496132a460174c31a95f003e1aa5237e041fcfa9e71789394bda54daa034f7ab171b9a0b00aa03b198ff2748132e3cbbc3f14cf42d79fcf9a1a42e9143c6afbb37c6cdcdbe3f019c680c6458a7b7a10cb9d8296c93772a64c06f2c5727eb4490edb5013f3fb2d4e570799638de13ace23e1a73f1934bda46eda04c86370bd4138d4529d1c0267b1db") sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff110000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu~0-\t&&') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16=r5], 0x28}}, 0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 32.683434][ T29] audit: type=1400 audit(1743693676.338:81): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.684245][ T3295] cgroup: Unknown subsys name 'net' [ 32.706267][ T29] audit: type=1400 audit(1743693676.338:82): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.733577][ T29] audit: type=1400 audit(1743693676.368:83): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.753479][ T29] audit: type=1400 audit(1743693676.378:84): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.915748][ T3295] cgroup: Unknown subsys name 'cpuset' [ 32.922650][ T3295] cgroup: Unknown subsys name 'rlimit' [ 33.050921][ T29] audit: type=1400 audit(1743693676.708:85): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.074153][ T29] audit: type=1400 audit(1743693676.708:86): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.094684][ T29] audit: type=1400 audit(1743693676.708:87): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.100449][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.115068][ T29] audit: type=1400 audit(1743693676.708:88): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.144145][ T29] audit: type=1400 audit(1743693676.718:89): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.169256][ T29] audit: type=1400 audit(1743693676.718:90): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.198651][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.164299][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.248049][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 35.263139][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.281764][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.288871][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.296187][ T3314] bridge_slave_0: entered allmulticast mode [ 35.302443][ T3314] bridge_slave_0: entered promiscuous mode [ 35.324315][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.331404][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.338627][ T3314] bridge_slave_1: entered allmulticast mode [ 35.345093][ T3314] bridge_slave_1: entered promiscuous mode [ 35.396621][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.415616][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.424765][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.441579][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.448820][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.456279][ T3308] bridge_slave_0: entered allmulticast mode [ 35.462783][ T3308] bridge_slave_0: entered promiscuous mode [ 35.486729][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.493835][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.501015][ T3308] bridge_slave_1: entered allmulticast mode [ 35.507826][ T3308] bridge_slave_1: entered promiscuous mode [ 35.517073][ T3314] team0: Port device team_slave_0 added [ 35.542355][ T3314] team0: Port device team_slave_1 added [ 35.550357][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.557578][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.564790][ T3305] bridge_slave_0: entered allmulticast mode [ 35.571253][ T3305] bridge_slave_0: entered promiscuous mode [ 35.578543][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.587670][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.594858][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.602428][ T3305] bridge_slave_1: entered allmulticast mode [ 35.608765][ T3305] bridge_slave_1: entered promiscuous mode [ 35.615027][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.630139][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.665432][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.675074][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.682026][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.708710][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.732715][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.742300][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.749298][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.775516][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.791091][ T3308] team0: Port device team_slave_0 added [ 35.797683][ T3308] team0: Port device team_slave_1 added [ 35.815680][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.822799][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.830109][ T3304] bridge_slave_0: entered allmulticast mode [ 35.836417][ T3304] bridge_slave_0: entered promiscuous mode [ 35.850421][ T3305] team0: Port device team_slave_0 added [ 35.856227][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.863272][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.870491][ T3304] bridge_slave_1: entered allmulticast mode [ 35.876838][ T3304] bridge_slave_1: entered promiscuous mode [ 35.890281][ T3305] team0: Port device team_slave_1 added [ 35.908481][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.916630][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.943009][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.967757][ T3314] hsr_slave_0: entered promiscuous mode [ 35.973783][ T3314] hsr_slave_1: entered promiscuous mode [ 35.980593][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.994529][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.001537][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.027743][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.047116][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.054084][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.080053][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.091778][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.107610][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.114654][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.121868][ T3310] bridge_slave_0: entered allmulticast mode [ 36.128481][ T3310] bridge_slave_0: entered promiscuous mode [ 36.135080][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.142035][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.168625][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.186974][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.194078][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.201371][ T3310] bridge_slave_1: entered allmulticast mode [ 36.207856][ T3310] bridge_slave_1: entered promiscuous mode [ 36.249134][ T3308] hsr_slave_0: entered promiscuous mode [ 36.255360][ T3308] hsr_slave_1: entered promiscuous mode [ 36.261223][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.269043][ T3308] Cannot create hsr debugfs directory [ 36.275102][ T3304] team0: Port device team_slave_0 added [ 36.283289][ T3304] team0: Port device team_slave_1 added [ 36.294231][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.315131][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.322357][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.348486][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.365212][ T3305] hsr_slave_0: entered promiscuous mode [ 36.371259][ T3305] hsr_slave_1: entered promiscuous mode [ 36.377136][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.384826][ T3305] Cannot create hsr debugfs directory [ 36.391230][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.406833][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.413882][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.440093][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.479156][ T3310] team0: Port device team_slave_0 added [ 36.499608][ T3310] team0: Port device team_slave_1 added [ 36.540760][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.547772][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.574335][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.599121][ T3304] hsr_slave_0: entered promiscuous mode [ 36.604966][ T3304] hsr_slave_1: entered promiscuous mode [ 36.610927][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.619141][ T3304] Cannot create hsr debugfs directory [ 36.624868][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.631929][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.657873][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.713549][ T3310] hsr_slave_0: entered promiscuous mode [ 36.719816][ T3310] hsr_slave_1: entered promiscuous mode [ 36.726202][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.733791][ T3310] Cannot create hsr debugfs directory [ 36.761280][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.776358][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.791105][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.801345][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.838942][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.847834][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.856834][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.871621][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.910284][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.919055][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.928353][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.946451][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.967163][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.979042][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.995898][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.010567][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.041034][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.049712][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.059146][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.072681][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.084168][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.104409][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.124234][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.142810][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.149928][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.164508][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.174583][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.182564][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.189876][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.209188][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.216485][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.225211][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.232366][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.259751][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.277517][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.287573][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.294686][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.315777][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.322931][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.348789][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.369455][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.381441][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.391967][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.406711][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.413781][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.424728][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.432274][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.458049][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.473698][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.485923][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.493088][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.505918][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.512990][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.547895][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.580883][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.620416][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.658429][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.710258][ T3305] veth0_vlan: entered promiscuous mode [ 37.727392][ T3308] veth0_vlan: entered promiscuous mode [ 37.742735][ T3314] veth0_vlan: entered promiscuous mode [ 37.749268][ T3305] veth1_vlan: entered promiscuous mode [ 37.761692][ T3308] veth1_vlan: entered promiscuous mode [ 37.784950][ T3308] veth0_macvtap: entered promiscuous mode [ 37.792475][ T3305] veth0_macvtap: entered promiscuous mode [ 37.803198][ T3305] veth1_macvtap: entered promiscuous mode [ 37.816796][ T3308] veth1_macvtap: entered promiscuous mode [ 37.832489][ T3314] veth1_vlan: entered promiscuous mode [ 37.839293][ T3304] veth0_vlan: entered promiscuous mode [ 37.848761][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.859702][ T3304] veth1_vlan: entered promiscuous mode [ 37.870652][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.881368][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.891866][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.904212][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.915011][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.925578][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.936094][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.952323][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.961121][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.969903][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.978742][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.990736][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.999631][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.008469][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.017212][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.030439][ T3314] veth0_macvtap: entered promiscuous mode [ 38.037640][ T3310] veth0_vlan: entered promiscuous mode [ 38.047114][ T3314] veth1_macvtap: entered promiscuous mode [ 38.062380][ T3304] veth0_macvtap: entered promiscuous mode [ 38.072848][ T3310] veth1_vlan: entered promiscuous mode [ 38.078440][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 38.078453][ T29] audit: type=1400 audit(1743693681.738:107): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.ZycuBB/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.086675][ T3310] veth0_macvtap: entered promiscuous mode [ 38.108985][ T29] audit: type=1400 audit(1743693681.738:108): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.109007][ T29] audit: type=1400 audit(1743693681.738:109): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.ZycuBB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.118942][ T3304] veth1_macvtap: entered promiscuous mode [ 38.137368][ T29] audit: type=1400 audit(1743693681.738:110): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.190363][ T29] audit: type=1400 audit(1743693681.738:111): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.ZycuBB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.217678][ T29] audit: type=1400 audit(1743693681.738:112): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.ZycuBB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.248486][ T29] audit: type=1400 audit(1743693681.738:113): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.254956][ T3310] veth1_macvtap: entered promiscuous mode [ 38.269565][ T29] audit: type=1400 audit(1743693681.928:114): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.279234][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.297043][ T29] audit: type=1400 audit(1743693681.928:115): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=4323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.307488][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.307510][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.350465][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.362664][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.362853][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.390821][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.401323][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.411332][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.421945][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.431881][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.442311][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.452890][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.465835][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.476341][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.486199][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.489543][ T29] audit: type=1400 audit(1743693682.128:116): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.496748][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.496762][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.541780][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.551655][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.562261][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.573616][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.591508][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.602062][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.611918][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.617332][ T3448] loop0: detected capacity change from 0 to 512 [ 38.622409][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.645838][ T3448] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.649432][ T3444] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.661825][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.683127][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.691974][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.700687][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.709413][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.720086][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.730808][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.736004][ T3448] EXT4-fs (loop0): 1 orphan inode deleted [ 38.740878][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.748611][ T3448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.758703][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.758717][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.793126][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.803241][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 38.804436][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.824140][ T3448] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.838575][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.847630][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.856556][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.865423][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.899581][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.910072][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.920008][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.930533][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.940412][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.951004][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.961149][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.971756][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.985484][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.004193][ T3310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.013146][ T3310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.021877][ T3310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.030593][ T3310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.165470][ C0] hrtimer: interrupt took 47813 ns [ 39.171953][ T3463] 9pnet_fd: Insufficient options for proto=fd [ 39.212779][ T3470] capability: warning: `syz.3.9' uses 32-bit capabilities (legacy support in use) [ 39.232907][ T3463] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5'. [ 39.242445][ T3463] 0ªX¹¦À: renamed from caif0 [ 39.270750][ T3463] 0ªX¹¦À: entered allmulticast mode [ 39.278739][ T3463] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 39.333930][ T3463] syz.4.5 (3463) used greatest stack depth: 10856 bytes left [ 39.410833][ T3462] Process accounting resumed [ 39.486245][ T3482] loop4: detected capacity change from 0 to 1024 [ 39.505246][ T3482] ======================================================= [ 39.505246][ T3482] WARNING: The mand mount option has been deprecated and [ 39.505246][ T3482] and is ignored by this kernel. Remove the mand [ 39.505246][ T3482] option from the mount to silence this warning. [ 39.505246][ T3482] ======================================================= [ 39.559773][ T3484] loop2: detected capacity change from 0 to 512 [ 39.572142][ T3482] EXT4-fs: Ignoring removed bh option [ 39.574375][ T3484] EXT4-fs: Ignoring removed nobh option [ 39.590025][ T3482] EXT4-fs: inline encryption not supported [ 39.606783][ T3482] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.629893][ T3484] EXT4-fs error (device loop2): ext4_do_update_inode:5182: inode #16: comm wg1: corrupted inode contents [ 39.641900][ T3482] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 39.654058][ T3482] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 2: comm syz.4.13: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.669384][ T3482] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 48: comm syz.4.13: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.681688][ T3484] EXT4-fs (loop2): Remounting filesystem read-only [ 39.690434][ T3482] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.13: Failed to acquire dquot type 0 [ 39.712793][ T3482] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 39.723085][ T3484] EXT4-fs (loop2): 1 truncate cleaned up [ 39.729183][ T3482] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.13: mark_inode_dirty error [ 39.740761][ T58] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.751492][ T58] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.771191][ T3482] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 39.773062][ T3484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.783772][ T3482] EXT4-fs (loop4): 1 orphan inode deleted [ 39.800805][ T3484] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.805143][ T58] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 39.820036][ T3482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.834388][ T58] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.877129][ T58] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 0 [ 39.943362][ T3482] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13'. [ 39.997753][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.011530][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.036505][ T3310] EXT4-fs error (device loop4): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 40.073632][ T3310] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 40.093395][ T3310] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 40.136551][ T3491] loop2: detected capacity change from 0 to 256 [ 40.153893][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.215001][ T3491] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.287314][ T3491] netlink: 830 bytes leftover after parsing attributes in process `syz.2.15'. [ 40.333963][ T3502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 40.353639][ T3502] 8021q: VLANs not supported on vxcan0 [ 40.360141][ T3502] netlink: 14 bytes leftover after parsing attributes in process `syz.4.19'. [ 40.411990][ T3502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.436623][ T3502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.459808][ T3507] loop0: detected capacity change from 0 to 2048 [ 40.507035][ T3502] bond0 (unregistering): Released all slaves [ 40.528692][ T3507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.593527][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.664176][ T3520] loop0: detected capacity change from 0 to 512 [ 40.687667][ T3520] EXT4-fs (loop0): bad block size 8192 [ 40.742700][ T3524] netlink: 132 bytes leftover after parsing attributes in process `syz.0.26'. [ 40.776761][ T3528] FAULT_INJECTION: forcing a failure. [ 40.776761][ T3528] name failslab, interval 1, probability 0, space 0, times 1 [ 40.789489][ T3528] CPU: 1 UID: 0 PID: 3528 Comm: syz.0.28 Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(voluntary) [ 40.789513][ T3528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.789526][ T3528] Call Trace: [ 40.789533][ T3528] [ 40.789540][ T3528] dump_stack_lvl+0xf6/0x150 [ 40.789564][ T3528] dump_stack+0x15/0x1a [ 40.789580][ T3528] should_fail_ex+0x261/0x270 [ 40.789613][ T3528] should_failslab+0x8f/0xb0 [ 40.789685][ T3528] __kmalloc_cache_noprof+0x55/0x320 [ 40.789707][ T3528] ? do_proc_control+0x1cc/0x890 [ 40.789736][ T3528] do_proc_control+0x1cc/0x890 [ 40.789812][ T3528] ? should_fail_ex+0xd7/0x270 [ 40.789834][ T3528] usbdev_ioctl+0x27e4/0x3e70 [ 40.789911][ T3528] ? do_vfs_ioctl+0x977/0x1570 [ 40.789932][ T3528] ? selinux_file_ioctl+0x2f9/0x380 [ 40.790029][ T3528] ? __fget_files+0x186/0x1c0 [ 40.790141][ T3528] ? __pfx_usbdev_ioctl+0x10/0x10 [ 40.790164][ T3528] __se_sys_ioctl+0xc9/0x140 [ 40.790255][ T3528] __x64_sys_ioctl+0x43/0x50 [ 40.790274][ T3528] x64_sys_call+0x168d/0x2e10 [ 40.790393][ T3528] do_syscall_64+0xc9/0x1c0 [ 40.790414][ T3528] ? clear_bhb_loop+0x25/0x80 [ 40.790431][ T3528] ? clear_bhb_loop+0x25/0x80 [ 40.790448][ T3528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.790469][ T3528] RIP: 0033:0x7f669661d169 [ 40.790483][ T3528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.790533][ T3528] RSP: 002b:00007f6694c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.790574][ T3528] RAX: ffffffffffffffda RBX: 00007f6696835fa0 RCX: 00007f669661d169 [ 40.790586][ T3528] RDX: 0000200000000000 RSI: 00000000c0105500 RDI: 0000000000000005 [ 40.790597][ T3528] RBP: 00007f6694c87090 R08: 0000000000000000 R09: 0000000000000000 [ 40.790608][ T3528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.790617][ T3528] R13: 0000000000000000 R14: 00007f6696835fa0 R15: 00007ffe3c7946e8 [ 40.790632][ T3528] [ 41.122770][ T3539] loop2: detected capacity change from 0 to 512 [ 41.142191][ T3539] EXT4-fs (loop2): bad block size 8192 [ 41.164807][ T3541] loop3: detected capacity change from 0 to 512 [ 41.201227][ T3541] EXT4-fs (loop3): mounted filesystem 0000004b-0845-4100-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.214376][ T3541] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.293501][ T3541] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 41.639195][ T3551] loop0: detected capacity change from 0 to 1024 [ 41.649284][ T3551] EXT4-fs: Ignoring removed bh option [ 41.690926][ T3551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.714660][ T3551] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.720744][ T3561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'. [ 41.728881][ T3551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 41.744362][ T3551] veth0: entered promiscuous mode [ 41.749432][ T3551] veth0: entered allmulticast mode [ 41.763167][ T3561] ip6gretap0: entered promiscuous mode [ 41.768710][ T3561] ip6gretap0: entered allmulticast mode [ 41.783848][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.832293][ T3571] loop2: detected capacity change from 0 to 128 [ 41.841038][ T3567] xt_hashlimit: max too large, truncated to 1048576 [ 41.858356][ T3571] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 41.880703][ T3571] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.902860][ T3572] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.910917][ T3572] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 41.966842][ T3571] ext2 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.059044][ T3571] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 42.073325][ T3314] EXT4-fs (loop3): unmounting filesystem 0000004b-0845-4100-0000-000000000000. [ 42.262679][ T3572] syz.0.41 (3572) used greatest stack depth: 10776 bytes left [ 42.374643][ T3589] netlink: 830 bytes leftover after parsing attributes in process `syz.3.47'. [ 42.398364][ T3592] netlink: 'syz.0.49': attribute type 10 has an invalid length. [ 42.406179][ T3591] netlink: 'syz.0.49': attribute type 10 has an invalid length. [ 42.416591][ T3591] team0: Device hsr_slave_0 failed to register rx_handler [ 42.427880][ T3592] team0: Device hsr_slave_0 failed to register rx_handler [ 42.465453][ T3592] syz.0.49 (3592) used greatest stack depth: 10128 bytes left [ 42.640947][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.746255][ T3610] siw: device registration error -23 [ 42.792531][ T3621] Zero length message leads to an empty skb [ 42.887324][ T3625] loop3: detected capacity change from 0 to 512 [ 42.909734][ T3625] EXT4-fs (loop3): bad block size 8192 [ 42.924822][ T3627] FAULT_INJECTION: forcing a failure. [ 42.924822][ T3627] name failslab, interval 1, probability 0, space 0, times 0 [ 42.937694][ T3627] CPU: 1 UID: 0 PID: 3627 Comm: syz.4.65 Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(voluntary) [ 42.937717][ T3627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.937750][ T3627] Call Trace: [ 42.937756][ T3627] [ 42.937763][ T3627] dump_stack_lvl+0xf6/0x150 [ 42.937785][ T3627] dump_stack+0x15/0x1a [ 42.937799][ T3627] should_fail_ex+0x261/0x270 [ 42.937824][ T3627] should_failslab+0x8f/0xb0 [ 42.937852][ T3627] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 42.937886][ T3627] ? __alloc_skb+0x10d/0x320 [ 42.937909][ T3627] __alloc_skb+0x10d/0x320 [ 42.937929][ T3627] tipc_nl_compat_dumpit+0xb4/0x400 [ 42.937955][ T3627] tipc_nl_compat_recv+0x72d/0x850 [ 42.937976][ T3627] ? __pfx_tipc_nl_sk_dump+0x10/0x10 [ 42.937995][ T3627] ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10 [ 42.938022][ T3627] genl_rcv_msg+0x69b/0x6f0 [ 42.938075][ T3627] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 42.938098][ T3627] ? __dev_queue_xmit+0xb76/0x20b0 [ 42.938123][ T3627] netlink_rcv_skb+0x12f/0x230 [ 42.938140][ T3627] ? __pfx_genl_rcv_msg+0x10/0x10 [ 42.938201][ T3627] genl_rcv+0x28/0x40 [ 42.938291][ T3627] netlink_unicast+0x605/0x6c0 [ 42.938342][ T3627] netlink_sendmsg+0x609/0x720 [ 42.938367][ T3627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.938387][ T3627] __sock_sendmsg+0x140/0x180 [ 42.938464][ T3627] ____sys_sendmsg+0x350/0x4e0 [ 42.938536][ T3627] __sys_sendmsg+0x1a0/0x240 [ 42.938567][ T3627] __x64_sys_sendmsg+0x46/0x50 [ 42.938586][ T3627] x64_sys_call+0x26f3/0x2e10 [ 42.938607][ T3627] do_syscall_64+0xc9/0x1c0 [ 42.938714][ T3627] ? clear_bhb_loop+0x25/0x80 [ 42.938734][ T3627] ? clear_bhb_loop+0x25/0x80 [ 42.938750][ T3627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.938766][ T3627] RIP: 0033:0x7f357dabd169 [ 42.938780][ T3627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.938852][ T3627] RSP: 002b:00007f357c127038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.938869][ T3627] RAX: ffffffffffffffda RBX: 00007f357dcd5fa0 RCX: 00007f357dabd169 [ 42.938880][ T3627] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000006 [ 42.938891][ T3627] RBP: 00007f357c127090 R08: 0000000000000000 R09: 0000000000000000 [ 42.938901][ T3627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.938910][ T3627] R13: 0000000000000000 R14: 00007f357dcd5fa0 R15: 00007ffe3c7e2478 [ 42.938924][ T3627] [ 43.032958][ T3635] syz_tun: refused to change device tx_queue_len [ 43.034389][ T3635] netlink: 'syz.1.66': attribute type 27 has an invalid length. [ 43.189551][ T3657] FAULT_INJECTION: forcing a failure. [ 43.189551][ T3657] name failslab, interval 1, probability 0, space 0, times 0 [ 43.189578][ T3657] CPU: 1 UID: 0 PID: 3657 Comm: syz.0.72 Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(voluntary) [ 43.189602][ T3657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.189612][ T3657] Call Trace: [ 43.189619][ T3657] [ 43.189625][ T3657] dump_stack_lvl+0xf6/0x150 [ 43.189695][ T3657] dump_stack+0x15/0x1a [ 43.189710][ T3657] should_fail_ex+0x261/0x270 [ 43.189736][ T3657] should_failslab+0x8f/0xb0 [ 43.189833][ T3657] __kmalloc_node_noprof+0xaf/0x420 [ 43.189850][ T3657] ? get_callchain_buffers+0x18d/0x2d0 [ 43.189945][ T3657] get_callchain_buffers+0x18d/0x2d0 [ 43.189960][ T3657] stack_map_alloc+0x247/0x2b0 [ 43.189981][ T3657] map_create+0x881/0xba0 [ 43.189999][ T3657] __sys_bpf+0x6ac/0x800 [ 43.190110][ T3657] __x64_sys_bpf+0x43/0x50 [ 43.190124][ T3657] x64_sys_call+0x23da/0x2e10 [ 43.190141][ T3657] do_syscall_64+0xc9/0x1c0 [ 43.190226][ T3657] ? clear_bhb_loop+0x25/0x80 [ 43.190243][ T3657] ? clear_bhb_loop+0x25/0x80 [ 43.190259][ T3657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.190285][ T3657] RIP: 0033:0x7f669661d169 [ 43.190297][ T3657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.190331][ T3657] RSP: 002b:00007f6694c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.190350][ T3657] RAX: ffffffffffffffda RBX: 00007f6696835fa0 RCX: 00007f669661d169 [ 43.190360][ T3657] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 43.190371][ T3657] RBP: 00007f6694c87090 R08: 0000000000000000 R09: 0000000000000000 [ 43.190380][ T3657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.190391][ T3657] R13: 0000000000000001 R14: 00007f6696835fa0 R15: 00007ffe3c7946e8 [ 43.190481][ T3657] [ 43.228449][ T3659] netlink: 120 bytes leftover after parsing attributes in process `syz.0.73'. [ 43.357430][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 43.357444][ T29] audit: type=1326 audit(2000000000.719:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf393d169 code=0x7ffc0000 [ 43.478706][ T3664] netlink: 'syz.1.75': attribute type 6 has an invalid length. [ 43.482569][ T29] audit: type=1326 audit(2000000000.719:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7efcf393d169 code=0x7ffc0000 [ 43.657886][ T29] audit: type=1326 audit(2000000000.719:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf393d169 code=0x7ffc0000 [ 43.657912][ T29] audit: type=1326 audit(2000000000.719:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcf393d169 code=0x7ffc0000 [ 43.657931][ T29] audit: type=1326 audit(2000000000.719:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf393d169 code=0x7ffc0000 [ 43.657997][ T29] audit: type=1326 audit(2000000000.719:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcf393d169 code=0x7ffc0000 [ 43.658020][ T29] audit: type=1326 audit(2000000000.719:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf393d169 code=0x7ffc0000 [ 43.658054][ T29] audit: type=1326 audit(2000000000.719:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcf393d169 code=0x7ffc0000 [ 43.739437][ T3670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40069 sclass=netlink_route_socket pid=3670 comm=syz.0.73 [ 43.750840][ T29] audit: type=1326 audit(2000000000.719:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcf393d169 code=0x7ffc0000 [ 43.833779][ T29] audit: type=1326 audit(2000000000.719:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcf393d169 code=0x7ffc0000 [ 43.880075][ T3674] loop3: detected capacity change from 0 to 512 [ 43.887064][ T3674] EXT4-fs (loop3): bad block size 8192 [ 43.892983][ T3659] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 43.954654][ T3679] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.103573][ T3691] x_tables: duplicate underflow at hook 2 [ 44.264986][ T3702] xt_hashlimit: max too large, truncated to 1048576 [ 44.479239][ T3713] __nla_validate_parse: 7 callbacks suppressed [ 44.479253][ T3713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 44.494978][ T3713] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.533508][ T3688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3688 comm=syz.4.84 [ 44.546086][ T3688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3688 comm=syz.4.84 [ 44.563692][ T3715] loop3: detected capacity change from 0 to 256 [ 44.568960][ T3688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3688 comm=syz.4.84 [ 44.611530][ T3715] FAT-fs (loop3): codepage cp857 not found [ 44.776866][ T3728] loop2: detected capacity change from 0 to 2048 [ 44.790982][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 44.799862][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 44.809930][ T3725] netlink: 830 bytes leftover after parsing attributes in process `syz.1.99'. [ 44.819450][ T3723] netlink: 'syz.3.98': attribute type 5 has an invalid length. [ 44.831977][ T3731] geneve0: entered promiscuous mode [ 44.837283][ T3731] geneve0: entered allmulticast mode [ 44.905117][ T3736] loop1: detected capacity change from 0 to 2048 [ 44.921315][ T3728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.935452][ T3736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.988884][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.011475][ T3748] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 45.011990][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.180437][ T3765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'. [ 45.217740][ T3770] loop1: detected capacity change from 0 to 1024 [ 45.226347][ T3770] EXT4-fs: Ignoring removed oldalloc option [ 45.239486][ T3770] EXT4-fs: Ignoring removed orlov option [ 45.247973][ T3770] EXT4-fs (loop1): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 45.284394][ T3770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.330926][ T3773] loop0: detected capacity change from 0 to 4096 [ 45.365203][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.381533][ T3768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.383131][ T3773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.404138][ T3768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.424314][ T3773] dvmrp5: entered allmulticast mode [ 45.430514][ T3773] dvmrp5: left allmulticast mode [ 45.480984][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.498152][ T3790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 45.510979][ T3790] veth1_to_hsr: entered promiscuous mode [ 45.516852][ T3790] veth1_to_hsr: entered allmulticast mode [ 45.558061][ T3798] FAULT_INJECTION: forcing a failure. [ 45.558061][ T3798] name failslab, interval 1, probability 0, space 0, times 0 [ 45.570780][ T3798] CPU: 0 UID: 0 PID: 3798 Comm: syz.1.128 Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(voluntary) [ 45.570842][ T3798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.570852][ T3798] Call Trace: [ 45.570859][ T3798] [ 45.570866][ T3798] dump_stack_lvl+0xf6/0x150 [ 45.570889][ T3798] dump_stack+0x15/0x1a [ 45.570971][ T3798] should_fail_ex+0x261/0x270 [ 45.571052][ T3798] should_failslab+0x8f/0xb0 [ 45.571075][ T3798] __kmalloc_cache_noprof+0x55/0x320 [ 45.571095][ T3798] ? audit_log_d_path+0x8e/0x150 [ 45.571113][ T3798] audit_log_d_path+0x8e/0x150 [ 45.571133][ T3798] audit_log_d_path_exe+0x42/0x70 [ 45.571201][ T3798] audit_log_task+0x1f1/0x250 [ 45.571221][ T3798] audit_seccomp+0x68/0x130 [ 45.571237][ T3798] __seccomp_filter+0x694/0x10e0 [ 45.571333][ T3798] ? vfs_write+0x669/0x950 [ 45.571362][ T3798] __secure_computing+0x7e/0x160 [ 45.571384][ T3798] syscall_trace_enter+0xcf/0x1f0 [ 45.571407][ T3798] do_syscall_64+0xaa/0x1c0 [ 45.571459][ T3798] ? clear_bhb_loop+0x25/0x80 [ 45.571478][ T3798] ? clear_bhb_loop+0x25/0x80 [ 45.571498][ T3798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.571564][ T3798] RIP: 0033:0x7efcf393d169 [ 45.571576][ T3798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.571662][ T3798] RSP: 002b:00007efcf1f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 45.571733][ T3798] RAX: ffffffffffffffda RBX: 00007efcf3b55fa0 RCX: 00007efcf393d169 [ 45.571742][ T3798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 45.571753][ T3798] RBP: 00007efcf1f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 45.571763][ T3798] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000001 [ 45.571774][ T3798] R13: 0000000000000000 R14: 00007efcf3b55fa0 R15: 00007ffef171a068 [ 45.571791][ T3798] [ 45.618068][ T3804] loop2: detected capacity change from 0 to 1024 [ 45.790999][ T3804] EXT4-fs: Ignoring removed bh option [ 45.823315][ T3804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.859208][ T3824] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 45.872905][ T3822] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 45.912352][ T3804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 45.924770][ T3833] bridge_slave_0: left allmulticast mode [ 45.930543][ T3833] bridge_slave_0: left promiscuous mode [ 45.936215][ T3833] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.944677][ T3833] bridge_slave_1: left allmulticast mode [ 45.950463][ T3833] bridge_slave_1: left promiscuous mode [ 45.956220][ T3833] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.965276][ T3833] bond0: (slave bond_slave_0): Releasing backup interface [ 45.974823][ T3833] bond0: (slave bond_slave_1): Releasing backup interface [ 45.987977][ T3833] team0: Port device team_slave_0 removed [ 46.000592][ T3833] team0: Port device team_slave_1 removed [ 46.008005][ T3833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.015481][ T3833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.024853][ T3833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.032446][ T3833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.066287][ T3849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 46.070944][ T3804] team_slave_0: entered promiscuous mode [ 46.081277][ T3804] team_slave_1: entered promiscuous mode [ 46.095404][ T3804] macvtap1: entered promiscuous mode [ 46.097426][ T3851] loop1: detected capacity change from 0 to 512 [ 46.100827][ T3804] team0: entered promiscuous mode [ 46.101051][ T3804] macvtap1: entered allmulticast mode [ 46.108802][ T3851] EXT4-fs (loop1): bad block size 8192 [ 46.112110][ T3804] team0: entered allmulticast mode [ 46.112126][ T3804] team_slave_0: entered allmulticast mode [ 46.133904][ T3804] team_slave_1: entered allmulticast mode [ 46.141471][ T3804] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 46.150678][ T3822] FAULT_INJECTION: forcing a failure. [ 46.150678][ T3822] name failslab, interval 1, probability 0, space 0, times 0 [ 46.163507][ T3822] CPU: 1 UID: 0 PID: 3822 Comm: +}[@ Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(voluntary) [ 46.163530][ T3822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.163541][ T3822] Call Trace: [ 46.163546][ T3822] [ 46.163582][ T3822] dump_stack_lvl+0xf6/0x150 [ 46.163601][ T3822] dump_stack+0x15/0x1a [ 46.163614][ T3822] should_fail_ex+0x261/0x270 [ 46.163635][ T3822] should_failslab+0x8f/0xb0 [ 46.163658][ T3822] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 46.163729][ T3822] ? __alloc_skb+0x10d/0x320 [ 46.163749][ T3822] __alloc_skb+0x10d/0x320 [ 46.163800][ T3822] inet6_netconf_notify_devconf+0xfc/0x1c0 [ 46.163889][ T3822] ip6_mroute_setsockopt+0x3fc/0xa30 [ 46.163908][ T3822] do_ipv6_setsockopt+0x331/0x2240 [ 46.163922][ T3822] ? kstrtouint+0x7b/0xc0 [ 46.163933][ T3822] ? __rcu_read_unlock+0x4e/0x70 [ 46.163966][ T3822] ? avc_has_perm_noaudit+0x1cc/0x210 [ 46.163980][ T3822] ? selinux_netlbl_socket_setsockopt+0xea/0x2d0 [ 46.163997][ T3822] ? avc_has_perm+0xd6/0x150 [ 46.164065][ T3822] ipv6_setsockopt+0x57/0x130 [ 46.164078][ T3822] rawv6_setsockopt+0x23d/0x460 [ 46.164092][ T3822] sock_common_setsockopt+0x64/0x80 [ 46.164101][ T3822] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 46.164158][ T3822] __sys_setsockopt+0x187/0x200 [ 46.164171][ T3822] __x64_sys_setsockopt+0x66/0x80 [ 46.164183][ T3822] x64_sys_call+0x2a09/0x2e10 [ 46.164195][ T3822] do_syscall_64+0xc9/0x1c0 [ 46.164210][ T3822] ? clear_bhb_loop+0x25/0x80 [ 46.164339][ T3822] ? clear_bhb_loop+0x25/0x80 [ 46.164374][ T3822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.164385][ T3822] RIP: 0033:0x7f669661d169 [ 46.164393][ T3822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.164402][ T3822] RSP: 002b:00007f6694c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 46.164418][ T3822] RAX: ffffffffffffffda RBX: 00007f6696835fa0 RCX: 00007f669661d169 [ 46.164424][ T3822] RDX: 00000000000000c8 RSI: 0000000000000029 RDI: 000000000000000d [ 46.164430][ T3822] RBP: 00007f6694c87090 R08: 0000000000000004 R09: 0000000000000000 [ 46.164436][ T3822] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.164442][ T3822] R13: 0000000000000000 R14: 00007f6696835fa0 R15: 00007ffe3c7946e8 [ 46.164451][ T3822] [ 46.403808][ T3824] syz.3.138 (3824) used greatest stack depth: 10048 bytes left [ 46.411817][ T3849] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 46.432159][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.449011][ T3859] FAULT_INJECTION: forcing a failure. [ 46.449011][ T3859] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.462114][ T3859] CPU: 1 UID: 0 PID: 3859 Comm: syz.3.149 Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(voluntary) [ 46.462161][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.462170][ T3859] Call Trace: [ 46.462176][ T3859] [ 46.462182][ T3859] dump_stack_lvl+0xf6/0x150 [ 46.462201][ T3859] dump_stack+0x15/0x1a [ 46.462216][ T3859] should_fail_ex+0x261/0x270 [ 46.462260][ T3859] should_fail+0xb/0x10 [ 46.462277][ T3859] should_fail_usercopy+0x1a/0x20 [ 46.462366][ T3859] _copy_from_user+0x1c/0xa0 [ 46.462440][ T3859] copy_from_sockptr_offset+0x6d/0xb0 [ 46.462465][ T3859] do_ipt_set_ctl+0x68a/0x8a0 [ 46.462492][ T3859] nf_setsockopt+0x195/0x1b0 [ 46.462511][ T3859] ip_setsockopt+0xea/0x100 [ 46.462581][ T3859] udp_setsockopt+0x95/0xb0 [ 46.462625][ T3859] sock_common_setsockopt+0x64/0x80 [ 46.462640][ T3859] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 46.462655][ T3859] __sys_setsockopt+0x187/0x200 [ 46.462674][ T3859] __x64_sys_setsockopt+0x66/0x80 [ 46.462692][ T3859] x64_sys_call+0x2a09/0x2e10 [ 46.462765][ T3859] do_syscall_64+0xc9/0x1c0 [ 46.462824][ T3859] ? clear_bhb_loop+0x25/0x80 [ 46.462840][ T3859] ? clear_bhb_loop+0x25/0x80 [ 46.462856][ T3859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.462940][ T3859] RIP: 0033:0x7f621320d169 [ 46.462952][ T3859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.463000][ T3859] RSP: 002b:00007f6211877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 46.463014][ T3859] RAX: ffffffffffffffda RBX: 00007f6213425fa0 RCX: 00007f621320d169 [ 46.463024][ T3859] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 46.463032][ T3859] RBP: 00007f6211877090 R08: 0000000000000538 R09: 0000000000000000 [ 46.463041][ T3859] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 46.463083][ T3859] R13: 0000000000000000 R14: 00007f6213425fa0 R15: 00007ffc41d29778 [ 46.463096][ T3859] [ 46.719173][ T3864] loop1: detected capacity change from 0 to 2048 [ 46.740508][ T3874] loop2: detected capacity change from 0 to 512 [ 46.770859][ T3880] xt_hashlimit: max too large, truncated to 1048576 [ 46.775956][ T3864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.778243][ T3880] x_tables: ip_tables: ah match: only valid for protocol 51 [ 46.847194][ T3882] loop3: detected capacity change from 0 to 1024 [ 46.861311][ T3874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.884383][ T3882] EXT4-fs: Ignoring removed bh option [ 46.900048][ T3874] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.912233][ T3862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.913233][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.921937][ T3862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.931435][ T3882] EXT4-fs: inline encryption not supported [ 47.001744][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.020411][ T3882] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.020927][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.045566][ T3892] loop4: detected capacity change from 0 to 512 [ 47.063166][ T3882] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 47.079788][ T3892] EXT4-fs (loop4): bad block size 8192 [ 47.090344][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 47.092106][ T3882] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 2: comm syz.3.153: lblock 2 mapped to illegal pblock 2 (length 1) [ 47.115460][ T3882] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 48: comm syz.3.153: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.139794][ T3882] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.153: Failed to acquire dquot type 0 [ 47.155384][ T3882] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 47.220023][ T3882] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.153: mark_inode_dirty error [ 47.244930][ T3882] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 47.256488][ T3882] EXT4-fs (loop3): 1 orphan inode deleted [ 47.264636][ T3882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.278159][ T2326] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.302652][ T2326] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 47.348974][ T3882] netlink: 96 bytes leftover after parsing attributes in process `syz.3.153'. [ 47.390756][ T3925] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 47.415430][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.431581][ T3314] EXT4-fs error (device loop3): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 47.445997][ T3314] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 47.462902][ T3314] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 47.484205][ T3932] loop1: detected capacity change from 0 to 2048 [ 47.522486][ T3932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.551170][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.606921][ T3940] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.614198][ T3940] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.660828][ T3940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.684919][ T3940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.729411][ T3940] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.738428][ T3940] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.747356][ T3940] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.756416][ T3940] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.011894][ T3975] loop1: detected capacity change from 0 to 1024 [ 48.043784][ T3975] EXT4-fs: Ignoring removed bh option [ 48.095638][ T3975] EXT4-fs: inline encryption not supported [ 48.111474][ T3975] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.152227][ T3975] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 48.154186][ T1108] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.171857][ T3975] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 2: comm syz.1.174: lblock 2 mapped to illegal pblock 2 (length 1) [ 48.197049][ T1108] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.204182][ T3975] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 48: comm syz.1.174: lblock 0 mapped to illegal pblock 48 (length 1) [ 48.241745][ T3975] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.174: Failed to acquire dquot type 0 [ 48.283985][ T3975] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 48.344883][ T3975] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.174: mark_inode_dirty error [ 48.365165][ T29] kauditd_printk_skb: 984 callbacks suppressed [ 48.365180][ T29] audit: type=1326 audit(2000000005.729:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621320d169 code=0x7ffc0000 [ 48.395602][ T29] audit: type=1326 audit(2000000005.729:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f621320d169 code=0x7ffc0000 [ 48.405171][ T3975] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 48.437544][ T3975] EXT4-fs (loop1): 1 orphan inode deleted [ 48.450232][ T3975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.463324][ T2326] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.488171][ T29] audit: type=1326 audit(2000000005.739:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621320d169 code=0x7ffc0000 [ 48.511841][ T29] audit: type=1326 audit(2000000005.739:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f621320d169 code=0x7ffc0000 [ 48.535292][ T29] audit: type=1326 audit(2000000005.739:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621320d169 code=0x7ffc0000 [ 48.558681][ T29] audit: type=1326 audit(2000000005.739:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f621320d169 code=0x7ffc0000 [ 48.561277][ T2326] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 48.581908][ T29] audit: type=1326 audit(2000000005.739:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621320d169 code=0x7ffc0000 [ 48.581933][ T29] audit: type=1326 audit(2000000005.739:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f621320d169 code=0x7ffc0000 [ 48.590371][ T2326] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 48.613651][ T29] audit: type=1326 audit(2000000005.739:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3995 comm="syz.3.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621320d169 code=0x7ffc0000 [ 48.708431][ T3994] loop0: detected capacity change from 0 to 8192 [ 48.788323][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.799721][ T3304] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 48.830728][ T3304] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 48.854976][ T3304] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 48.899577][ T4015] FAULT_INJECTION: forcing a failure. [ 48.899577][ T4015] name failslab, interval 1, probability 0, space 0, times 0 [ 48.912350][ T4015] CPU: 0 UID: 0 PID: 4015 Comm: syz.1.179 Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(voluntary) [ 48.912448][ T4015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.912460][ T4015] Call Trace: [ 48.912467][ T4015] [ 48.912475][ T4015] dump_stack_lvl+0xf6/0x150 [ 48.912577][ T4015] dump_stack+0x15/0x1a [ 48.912591][ T4015] should_fail_ex+0x261/0x270 [ 48.912616][ T4015] should_failslab+0x8f/0xb0 [ 48.912679][ T4015] __kmalloc_cache_noprof+0x55/0x320 [ 48.912697][ T4015] ? alloc_pipe_info+0xb0/0x360 [ 48.912731][ T4015] alloc_pipe_info+0xb0/0x360 [ 48.912756][ T4015] splice_direct_to_actor+0x621/0x680 [ 48.912824][ T4015] ? __cond_resched+0x53/0x90 [ 48.912842][ T4015] ? __pfx_direct_splice_actor+0x10/0x10 [ 48.912868][ T4015] ? avc_policy_seqno+0x15/0x20 [ 48.912888][ T4015] ? selinux_file_permission+0x22d/0x360 [ 48.912959][ T4015] do_splice_direct+0xd9/0x150 [ 48.912985][ T4015] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 48.913015][ T4015] do_sendfile+0x40a/0x690 [ 48.913039][ T4015] __x64_sys_sendfile64+0x113/0x160 [ 48.913059][ T4015] x64_sys_call+0xfc3/0x2e10 [ 48.913148][ T4015] do_syscall_64+0xc9/0x1c0 [ 48.913231][ T4015] ? clear_bhb_loop+0x25/0x80 [ 48.913248][ T4015] ? clear_bhb_loop+0x25/0x80 [ 48.913268][ T4015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.913289][ T4015] RIP: 0033:0x7efcf393d169 [ 48.913323][ T4015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.913337][ T4015] RSP: 002b:00007efcf1f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 48.913352][ T4015] RAX: ffffffffffffffda RBX: 00007efcf3b55fa0 RCX: 00007efcf393d169 [ 48.913361][ T4015] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 48.913414][ T4015] RBP: 00007efcf1f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 48.913426][ T4015] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 48.913437][ T4015] R13: 0000000000000000 R14: 00007efcf3b55fa0 R15: 00007ffef171a068 [ 48.913455][ T4015] [ 49.398263][ T4030] loop3: detected capacity change from 0 to 1024 [ 49.423322][ T4030] EXT4-fs: Ignoring removed bh option [ 49.446689][ T4030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.506553][ T4030] __nla_validate_parse: 2 callbacks suppressed [ 49.506567][ T4030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 49.527633][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.534838][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.589291][ T4034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.601454][ T4034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.659950][ T4034] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.668978][ T4034] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.677989][ T4034] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.686894][ T4034] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.723795][ T4030] macvtap1: entered promiscuous mode [ 49.729296][ T4030] team0: entered promiscuous mode [ 49.734390][ T4030] team_slave_0: entered promiscuous mode [ 49.740215][ T4030] team_slave_1: entered promiscuous mode [ 49.746038][ T4030] macvtap1: entered allmulticast mode [ 49.751415][ T4030] team0: entered allmulticast mode [ 49.756682][ T4030] team_slave_0: entered allmulticast mode [ 49.762507][ T4030] team_slave_1: entered allmulticast mode [ 49.772867][ T4030] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 49.797086][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.837443][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.039964][ T4061] loop0: detected capacity change from 0 to 512 [ 50.056121][ T4061] EXT4-fs (loop0): bad block size 8192 [ 50.169454][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 50.257403][ T4076] loop1: detected capacity change from 0 to 1024 [ 50.264329][ T4076] EXT4-fs: Ignoring removed bh option [ 50.275885][ T4076] EXT4-fs: inline encryption not supported [ 50.292125][ T4076] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.304063][ T4078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 50.314537][ T4076] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 50.324329][ T4076] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 2: comm syz.1.207: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.338963][ T4076] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 48: comm syz.1.207: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.353648][ T4076] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.207: Failed to acquire dquot type 0 [ 50.367492][ T4076] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 50.377324][ T4076] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.207: mark_inode_dirty error [ 50.388846][ T4076] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 50.400857][ T4076] EXT4-fs (loop1): 1 orphan inode deleted [ 50.407201][ T4076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.420922][ T58] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.436876][ T4086] loop0: detected capacity change from 0 to 512 [ 50.444735][ T4076] netlink: 96 bytes leftover after parsing attributes in process `syz.1.207'. [ 50.445241][ T4086] EXT4-fs (loop0): bad block size 8192 [ 50.461519][ T58] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 0 [ 50.476682][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.487620][ T3304] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 50.502313][ T3304] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 50.512469][ T3304] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 50.569907][ T4096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.216'. [ 50.612450][ T4101] loop0: detected capacity change from 0 to 512 [ 50.622587][ T4101] EXT4-fs: Ignoring removed orlov option [ 50.637183][ T4101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.650049][ T4101] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.682556][ T4101] syzkaller0: entered promiscuous mode [ 50.688164][ T4101] syzkaller0: entered allmulticast mode [ 50.730954][ T4111] loop1: detected capacity change from 0 to 512 [ 50.738892][ T4108] Restarting kernel threads ... done. [ 50.746143][ T4111] EXT4-fs: Ignoring removed oldalloc option [ 50.780619][ T4111] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.222: Parent and EA inode have the same ino 15 [ 50.823899][ T4111] EXT4-fs (loop1): Remounting filesystem read-only [ 50.830745][ T4111] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.843759][ T4111] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 50.855010][ T4111] EXT4-fs (loop1): 1 orphan inode deleted [ 50.866811][ T4111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.876352][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.906454][ T4129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'. [ 50.944949][ T4129] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 50.952318][ T4129] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 50.978082][ T4134] FAULT_INJECTION: forcing a failure. [ 50.978082][ T4134] name failslab, interval 1, probability 0, space 0, times 0 [ 50.990807][ T4134] CPU: 1 UID: 0 PID: 4134 Comm: syz.3.230 Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(voluntary) [ 50.990856][ T4134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.990866][ T4134] Call Trace: [ 50.990870][ T4134] [ 50.990876][ T4134] dump_stack_lvl+0xf6/0x150 [ 50.990895][ T4134] dump_stack+0x15/0x1a [ 50.990910][ T4134] should_fail_ex+0x261/0x270 [ 50.990991][ T4134] should_failslab+0x8f/0xb0 [ 50.991041][ T4134] __kmalloc_cache_noprof+0x55/0x320 [ 50.991061][ T4134] ? __hw_addr_add_ex+0x15a/0x430 [ 50.991083][ T4134] __hw_addr_add_ex+0x15a/0x430 [ 50.991104][ T4134] dev_addr_init+0xb7/0x130 [ 50.991122][ T4134] ? __pfx_vlan_setup+0x10/0x10 [ 50.991143][ T4134] alloc_netdev_mqs+0x225/0xac0 [ 50.991235][ T4134] rtnl_create_link+0x232/0x720 [ 50.991258][ T4134] rtnl_newlink_create+0x14f/0x640 [ 50.991288][ T4134] ? __list_del_entry_valid_or_report+0x66/0x130 [ 50.991317][ T4134] ? __mutex_lock+0x266/0xa00 [ 50.991338][ T4134] ? full_name_hash+0x89/0xe0 [ 50.991358][ T4134] rtnl_newlink+0xf38/0x12d0 [ 50.991465][ T4134] ? memcg_list_lru_alloc+0xe1/0x530 [ 50.991495][ T4134] ? ___slab_alloc+0x2b9/0x980 [ 50.991516][ T4134] ? sysvec_irq_work+0xe/0x80 [ 50.991531][ T4134] ? __rcu_read_unlock+0x4e/0x70 [ 50.991634][ T4134] ? avc_has_perm_noaudit+0x1cc/0x210 [ 50.991659][ T4134] ? selinux_capable+0x1f9/0x260 [ 50.991684][ T4134] ? security_capable+0x81/0x90 [ 50.991703][ T4134] ? ns_capable+0x7d/0xb0 [ 50.991764][ T4134] ? __pfx_rtnl_newlink+0x10/0x10 [ 50.991791][ T4134] rtnetlink_rcv_msg+0x65a/0x740 [ 50.991817][ T4134] ? avc_has_perm_noaudit+0x1cc/0x210 [ 50.991891][ T4134] netlink_rcv_skb+0x12f/0x230 [ 50.991911][ T4134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 50.991940][ T4134] rtnetlink_rcv+0x1c/0x30 [ 50.991962][ T4134] netlink_unicast+0x605/0x6c0 [ 50.992037][ T4134] netlink_sendmsg+0x609/0x720 [ 50.992113][ T4134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.992200][ T4134] __sock_sendmsg+0x140/0x180 [ 50.992226][ T4134] ____sys_sendmsg+0x350/0x4e0 [ 50.992315][ T4134] __sys_sendmsg+0x1a0/0x240 [ 50.992344][ T4134] __x64_sys_sendmsg+0x46/0x50 [ 50.992363][ T4134] x64_sys_call+0x26f3/0x2e10 [ 50.992411][ T4134] do_syscall_64+0xc9/0x1c0 [ 50.992434][ T4134] ? clear_bhb_loop+0x25/0x80 [ 50.992454][ T4134] ? clear_bhb_loop+0x25/0x80 [ 50.992532][ T4134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.992549][ T4134] RIP: 0033:0x7f621320d169 [ 50.992563][ T4134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.992661][ T4134] RSP: 002b:00007f6211877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.992720][ T4134] RAX: ffffffffffffffda RBX: 00007f6213425fa0 RCX: 00007f621320d169 [ 50.992770][ T4134] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 50.992818][ T4134] RBP: 00007f6211877090 R08: 0000000000000000 R09: 0000000000000000 [ 50.992830][ T4134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.992841][ T4134] R13: 0000000000000000 R14: 00007f6213425fa0 R15: 00007ffc41d29778 [ 50.992858][ T4134] [ 51.328105][ T4145] loop4: detected capacity change from 0 to 512 [ 51.337686][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.348871][ T4145] EXT4-fs: Ignoring removed i_version option [ 51.354933][ T4145] EXT4-fs: Ignoring removed nobh option [ 51.354971][ T4144] loop2: detected capacity change from 0 to 1024 [ 51.380039][ T4144] EXT4-fs: Ignoring removed bh option [ 51.399403][ T4144] EXT4-fs: inline encryption not supported [ 51.406805][ T4145] EXT4-fs: quotafile must be on filesystem root [ 51.435326][ T4144] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.455834][ T4152] FAULT_INJECTION: forcing a failure. [ 51.455834][ T4152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.469035][ T4152] CPU: 0 UID: 0 PID: 4152 Comm: syz.1.235 Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(voluntary) [ 51.469060][ T4152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.469071][ T4152] Call Trace: [ 51.469077][ T4152] [ 51.469083][ T4152] dump_stack_lvl+0xf6/0x150 [ 51.469106][ T4152] dump_stack+0x15/0x1a [ 51.469151][ T4152] should_fail_ex+0x261/0x270 [ 51.469176][ T4152] should_fail+0xb/0x10 [ 51.469195][ T4152] should_fail_usercopy+0x1a/0x20 [ 51.469217][ T4152] _copy_from_iter+0xd8/0xd10 [ 51.469248][ T4152] ? __virt_addr_valid+0x1ed/0x250 [ 51.469267][ T4152] ? __check_object_size+0x367/0x510 [ 51.469288][ T4152] hci_sock_sendmsg+0x381/0x960 [ 51.469357][ T4152] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 51.469381][ T4152] __sock_sendmsg+0x140/0x180 [ 51.469427][ T4152] sock_write_iter+0x186/0x1c0 [ 51.469478][ T4152] aio_write+0x324/0x460 [ 51.469513][ T4152] io_submit_one+0xb0c/0x1230 [ 51.469536][ T4152] __se_sys_io_submit+0xf7/0x280 [ 51.469564][ T4152] __x64_sys_io_submit+0x43/0x50 [ 51.469667][ T4152] x64_sys_call+0xa8b/0x2e10 [ 51.469686][ T4152] do_syscall_64+0xc9/0x1c0 [ 51.469710][ T4152] ? clear_bhb_loop+0x25/0x80 [ 51.469731][ T4152] ? clear_bhb_loop+0x25/0x80 [ 51.469801][ T4152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.469818][ T4152] RIP: 0033:0x7efcf393d169 [ 51.469830][ T4152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.469919][ T4152] RSP: 002b:00007efcf1f9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 51.469936][ T4152] RAX: ffffffffffffffda RBX: 00007efcf3b55fa0 RCX: 00007efcf393d169 [ 51.469948][ T4152] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007efcf4691000 [ 51.469958][ T4152] RBP: 00007efcf1f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.469969][ T4152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.469980][ T4152] R13: 0000000000000000 R14: 00007efcf3b55fa0 R15: 00007ffef171a068 [ 51.470010][ T4152] [ 51.471052][ T4144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 51.700389][ T4144] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 2: comm syz.2.234: lblock 2 mapped to illegal pblock 2 (length 1) [ 51.726308][ T4144] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 48: comm syz.2.234: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.782561][ T4169] loop4: detected capacity change from 0 to 2048 [ 51.809604][ T4171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.243'. [ 51.826253][ T4144] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.234: Failed to acquire dquot type 0 [ 51.862913][ T4144] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 51.872922][ T4144] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.234: mark_inode_dirty error [ 51.876726][ T4169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.897318][ T4144] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 51.938535][ T4144] EXT4-fs (loop2): 1 orphan inode deleted [ 51.952392][ T4144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.965176][ T264] EXT4-fs error (device loop2): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.992670][ T264] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 52.007406][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.034498][ T4184] loop3: detected capacity change from 0 to 256 [ 52.043063][ T4144] netlink: 96 bytes leftover after parsing attributes in process `syz.2.234'. [ 52.066412][ T4184] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 52.075150][ T4184] FAT-fs (loop3): Filesystem has been set read-only [ 52.103559][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.125496][ T3305] EXT4-fs error (device loop2): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 52.138478][ T4184] 9pnet: Could not find request transport: fd [ 52.177134][ T3305] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 52.230235][ T4196] loop1: detected capacity change from 0 to 2048 [ 52.234444][ T3305] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 52.266784][ T4196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.333656][ T4202] Direct I/O collision with buffered writes! File: /file2 Comm: syz.1.253 [ 52.483727][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.538615][ T4221] loop0: detected capacity change from 0 to 1024 [ 52.574558][ T4226] loop1: detected capacity change from 0 to 2048 [ 52.583255][ T4221] EXT4-fs: Ignoring removed bh option [ 52.594482][ T4221] EXT4-fs: inline encryption not supported [ 52.603792][ T4227] FAULT_INJECTION: forcing a failure. [ 52.603792][ T4227] name failslab, interval 1, probability 0, space 0, times 0 [ 52.616514][ T4227] CPU: 1 UID: 0 PID: 4227 Comm: syz.4.263 Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(voluntary) [ 52.616536][ T4227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.616546][ T4227] Call Trace: [ 52.616607][ T4227] [ 52.616615][ T4227] dump_stack_lvl+0xf6/0x150 [ 52.616639][ T4227] dump_stack+0x15/0x1a [ 52.616722][ T4227] should_fail_ex+0x261/0x270 [ 52.616743][ T4227] should_failslab+0x8f/0xb0 [ 52.616770][ T4227] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 52.616792][ T4227] ? __alloc_skb+0x10d/0x320 [ 52.616878][ T4227] __alloc_skb+0x10d/0x320 [ 52.616894][ T4227] ? audit_log_start+0x37f/0x6e0 [ 52.616916][ T4227] audit_log_start+0x39a/0x6e0 [ 52.617017][ T4227] ? kstrtouint+0x7b/0xc0 [ 52.617039][ T4227] audit_seccomp+0x4b/0x130 [ 52.617056][ T4227] __seccomp_filter+0x694/0x10e0 [ 52.617081][ T4227] ? vfs_write+0x669/0x950 [ 52.617104][ T4227] ? putname+0xe1/0x100 [ 52.617122][ T4227] __secure_computing+0x7e/0x160 [ 52.617221][ T4227] syscall_trace_enter+0xcf/0x1f0 [ 52.617286][ T4227] ? fpregs_assert_state_consistent+0x83/0xa0 [ 52.617312][ T4227] do_syscall_64+0xaa/0x1c0 [ 52.617382][ T4227] ? clear_bhb_loop+0x25/0x80 [ 52.617399][ T4227] ? clear_bhb_loop+0x25/0x80 [ 52.617415][ T4227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.617438][ T4227] RIP: 0033:0x7f357dabd169 [ 52.617450][ T4227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.617466][ T4227] RSP: 002b:00007f357c127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 52.617484][ T4227] RAX: ffffffffffffffda RBX: 00007f357dcd5fa0 RCX: 00007f357dabd169 [ 52.617495][ T4227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 52.617506][ T4227] RBP: 00007f357c127090 R08: 0000000000000000 R09: 0000000000000000 [ 52.617517][ T4227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.617528][ T4227] R13: 0000000000000000 R14: 00007f357dcd5fa0 R15: 00007ffe3c7e2478 [ 52.617545][ T4227] [ 52.619260][ T4221] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.636512][ T4226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.699471][ T4221] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 52.704820][ T4226] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.713377][ T4221] EXT4-fs error (device loop0): ext4_map_blocks:674: inode #3: block 2: comm syz.0.262: lblock 2 mapped to illegal pblock 2 (length 1) [ 52.910936][ T4221] EXT4-fs error (device loop0): ext4_map_blocks:674: inode #3: block 48: comm syz.0.262: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.001974][ T4221] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.262: Failed to acquire dquot type 0 [ 53.027467][ T4243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.268'. [ 53.198895][ T4221] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 53.233675][ T4250] FAULT_INJECTION: forcing a failure. [ 53.233675][ T4250] name failslab, interval 1, probability 0, space 0, times 0 [ 53.246346][ T4250] CPU: 1 UID: 0 PID: 4250 Comm: syz.3.272 Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(voluntary) [ 53.246392][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.246402][ T4250] Call Trace: [ 53.246407][ T4250] [ 53.246414][ T4250] dump_stack_lvl+0xf6/0x150 [ 53.246434][ T4250] dump_stack+0x15/0x1a [ 53.246520][ T4250] should_fail_ex+0x261/0x270 [ 53.246546][ T4250] should_failslab+0x8f/0xb0 [ 53.246574][ T4250] __kmalloc_cache_noprof+0x55/0x320 [ 53.246592][ T4250] ? audit_log_d_path+0x8e/0x150 [ 53.246611][ T4250] audit_log_d_path+0x8e/0x150 [ 53.246630][ T4250] audit_log_d_path_exe+0x42/0x70 [ 53.246652][ T4250] audit_log_task+0x1f1/0x250 [ 53.246736][ T4250] audit_seccomp+0x68/0x130 [ 53.246754][ T4250] __seccomp_filter+0x694/0x10e0 [ 53.246781][ T4250] ? vfs_write+0x669/0x950 [ 53.246809][ T4250] __secure_computing+0x7e/0x160 [ 53.246831][ T4250] syscall_trace_enter+0xcf/0x1f0 [ 53.246935][ T4250] do_syscall_64+0xaa/0x1c0 [ 53.246959][ T4250] ? clear_bhb_loop+0x25/0x80 [ 53.246979][ T4250] ? clear_bhb_loop+0x25/0x80 [ 53.247009][ T4250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.247029][ T4250] RIP: 0033:0x7f621320d169 [ 53.247043][ T4250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.247084][ T4250] RSP: 002b:00007f6211877038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 53.247101][ T4250] RAX: ffffffffffffffda RBX: 00007f6213425fa0 RCX: 00007f621320d169 [ 53.247113][ T4250] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000004 [ 53.247124][ T4250] RBP: 00007f6211877090 R08: 0000000000000000 R09: 0000000000000000 [ 53.247134][ T4250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.247144][ T4250] R13: 0000000000000000 R14: 00007f6213425fa0 R15: 00007ffc41d29778 [ 53.247158][ T4250] [ 53.448261][ T29] kauditd_printk_skb: 805 callbacks suppressed [ 53.448277][ T29] audit: type=1326 audit(2000000010.649:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f621320bb7c code=0x7ffc0000 [ 53.477742][ T29] audit: type=1326 audit(2000000010.649:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f621320bc1f code=0x7ffc0000 [ 53.500884][ T29] audit: type=1326 audit(2000000010.649:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f621320bdca code=0x7ffc0000 [ 53.524064][ T29] audit: type=1326 audit(2000000010.649:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621320d169 code=0x7ffc0000 [ 53.547468][ T29] audit: type=1326 audit(2000000010.649:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4249 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621320d169 code=0x7ffc0000 [ 53.585120][ T4221] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.262: mark_inode_dirty error [ 53.641151][ T4221] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 53.656826][ T4256] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4256 comm=syz.4.274 [ 53.669305][ T4256] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4256 comm=syz.4.274 [ 53.707988][ T4221] EXT4-fs (loop0): 1 orphan inode deleted [ 53.724178][ T4221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.743232][ T264] EXT4-fs error (device loop0): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.770288][ T4221] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.776926][ T4221] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 53.784583][ T4221] audit: backlog limit exceeded [ 53.795082][ T264] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 53.797772][ T4264] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.803525][ T264] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 53.878062][ T4221] netlink: 96 bytes leftover after parsing attributes in process `syz.0.262'. [ 53.913746][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.963332][ T3308] EXT4-fs error (device loop0): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 53.988863][ T4256] loop4: detected capacity change from 0 to 512 [ 54.011515][ T3308] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 54.021819][ T4256] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.028710][ T4256] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 54.049298][ T4256] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 54.053104][ T4226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.068464][ T4256] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.274: attempt to clear invalid blocks 2 len 1 [ 54.073992][ T3308] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 54.100010][ T4256] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.274: invalid indirect mapped block 1819239214 (level 0) [ 54.119245][ T4256] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.274: invalid indirect mapped block 1819239214 (level 1) [ 54.133470][ T4226] syz.1.261 (4226) used greatest stack depth: 6312 bytes left [ 54.196579][ T4256] EXT4-fs (loop4): 1 truncate cleaned up [ 54.209864][ T4256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.314245][ T4287] loop2: detected capacity change from 0 to 1024 [ 54.419023][ T4292] loop3: detected capacity change from 0 to 512 [ 54.471034][ T3310] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 54.471284][ T4287] loop2: detected capacity change from 0 to 1024 [ 54.498722][ T4287] EXT4-fs: Ignoring removed nobh option [ 54.504384][ T4287] EXT4-fs: Ignoring removed bh option [ 54.518612][ T4292] EXT4-fs (loop3): 1 orphan inode deleted [ 54.524747][ T4292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.537778][ T264] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 54.551810][ T4292] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.564099][ T4287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.565129][ T4302] loop1: detected capacity change from 0 to 1024 [ 54.588455][ T4302] EXT4-fs: Ignoring removed bh option [ 54.606378][ T4290] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.616857][ T4302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.625722][ T4287] loop2: detected capacity change from 1024 to 64 [ 54.644708][ T4287] syz.2.288: attempt to access beyond end of device [ 54.644708][ T4287] loop2: rw=2057, sector=360, nr_sectors = 24 limit=64 [ 54.658530][ T4287] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 3 with error 5 [ 54.670899][ T4287] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.670899][ T4287] [ 54.699056][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.787219][ T3305] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /39/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 54.879200][ T4323] netlink: 'syz.0.301': attribute type 3 has an invalid length. [ 54.931969][ T58] bridge_slave_1: left allmulticast mode [ 54.937679][ T58] bridge_slave_1: left promiscuous mode [ 54.943382][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.005286][ T58] bridge_slave_0: left allmulticast mode [ 55.011034][ T58] bridge_slave_0: left promiscuous mode [ 55.016968][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.050650][ T4338] loop0: detected capacity change from 0 to 1024 [ 55.061542][ T4338] EXT4-fs: Ignoring removed bh option [ 55.077317][ T4338] EXT4-fs: inline encryption not supported [ 55.083745][ T4338] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.119592][ T4338] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 55.140870][ T4338] EXT4-fs error (device loop0): ext4_map_blocks:674: inode #3: block 2: comm syz.0.306: lblock 2 mapped to illegal pblock 2 (length 1) [ 55.186239][ T58] hsr_slave_0: left promiscuous mode [ 55.207474][ T4338] EXT4-fs error (device loop0): ext4_map_blocks:674: inode #3: block 48: comm syz.0.306: lblock 0 mapped to illegal pblock 48 (length 1) [ 55.236032][ T58] hsr_slave_1: left promiscuous mode [ 55.242933][ T4342] netlink: 'syz.1.307': attribute type 11 has an invalid length. [ 55.250765][ T4342] netlink: 140 bytes leftover after parsing attributes in process `syz.1.307'. [ 55.265323][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.279969][ T4338] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.306: Failed to acquire dquot type 0 [ 55.293541][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.302337][ T4292] netlink: 32 bytes leftover after parsing attributes in process `syz.3.291'. [ 55.311978][ T4338] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 55.322638][ T4338] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.306: mark_inode_dirty error [ 55.367510][ T4338] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 55.396113][ T4338] EXT4-fs (loop0): 1 orphan inode deleted [ 55.415291][ T41] EXT4-fs error (device loop0): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.435589][ T4338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.437417][ T58] team0 (unregistering): Port device team_slave_1 removed [ 55.506172][ T58] team0 (unregistering): Port device team_slave_0 removed [ 55.667211][ T4338] netlink: 96 bytes leftover after parsing attributes in process `syz.0.306'. [ 55.677022][ T4312] chnl_net:caif_netlink_parms(): no params data found [ 55.685061][ T3304] ================================================================== [ 55.693160][ T3304] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 55.701062][ T3304] [ 55.703383][ T3304] read-write to 0xffff8881202f2af8 of 8 bytes by task 4345 on cpu 1: [ 55.711443][ T3304] shmem_add_to_page_cache+0x3bb/0x4b0 [ 55.716919][ T3304] shmem_get_folio_gfp+0x4dd/0xd30 [ 55.722042][ T3304] shmem_write_begin+0xa7/0x190 [ 55.726907][ T3304] generic_perform_write+0x189/0x4b0 [ 55.732201][ T3304] shmem_file_write_iter+0xc2/0xe0 [ 55.737315][ T3304] __kernel_write_iter+0x243/0x4c0 [ 55.742427][ T3304] dump_user_range+0x5ed/0x8b0 [ 55.745901][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0 [ 55.747183][ T3304] elf_core_dump+0x1d61/0x1ef0 [ 55.763281][ T3304] do_coredump+0x1814/0x1f50 [ 55.767880][ T3304] get_signal+0xdb7/0x1080 [ 55.772304][ T3304] arch_do_signal_or_restart+0x9a/0x4b0 [ 55.778022][ T3304] irqentry_exit_to_user_mode+0xa7/0x120 [ 55.783648][ T3304] irqentry_exit+0x12/0x50 [ 55.788066][ T3304] exc_general_protection+0x342/0x4d0 [ 55.793441][ T3304] asm_exc_general_protection+0x26/0x30 [ 55.798978][ T3304] [ 55.801385][ T3304] read to 0xffff8881202f2af8 of 8 bytes by task 3304 on cpu 0: [ 55.808942][ T3304] shmem_getattr+0x69/0x200 [ 55.813441][ T3304] vfs_getattr+0x172/0x1b0 [ 55.817952][ T3304] vfs_statx+0x12c/0x310 [ 55.822278][ T3304] vfs_fstatat+0xe4/0x130 [ 55.826611][ T3304] __se_sys_newfstatat+0x58/0x260 [ 55.831646][ T3304] __x64_sys_newfstatat+0x55/0x70 [ 55.836666][ T3304] x64_sys_call+0x2d6f/0x2e10 [ 55.841333][ T3304] do_syscall_64+0xc9/0x1c0 [ 55.845830][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.851712][ T3304] [ 55.854017][ T3304] value changed: 0x000000000000294e -> 0x0000000000002950 [ 55.861111][ T3304] [ 55.863417][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 55.869556][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: syz-executor Not tainted 6.14.0-syzkaller-12886-ga1b5bd45d4ee #0 PREEMPT(voluntary) [ 55.881793][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.891847][ T3304] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 55.960691][ T4312] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 56.035588][ T4291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.065748][ T4338] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.114813][ T4338] EXT4-fs error (device loop0): __ext4_get_inode_loc:4449: comm syz.0.306: Invalid inode table block 1 in block_group 0 [ 56.162219][ T4338] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 56.171928][ T4338] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz.0.306: mark_inode_dirty error [ 59.605142][ T4303] kmmpd-loop2: attempt to access beyond end of device [ 59.605142][ T4303] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 59.618656][ T4303] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 59.630093][ T4303] EXT4-fs error (device loop2): kmmpd:186: comm kmmpd-loop2: Error writing to MMP block [ 64.636753][ T4303] kmmpd-loop2: attempt to access beyond end of device [ 64.636753][ T4303] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 64.650290][ T4303] Buffer I/O error on dev loop2, logical block 64, lost sync page write