last executing test programs: 3.436012622s ago: executing program 0 (id=103): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaafad1e048716e0800460000200000000000119078000000950000000044040a8100004e200008907887e6d0c61b04ecdb4425a1cf32421033cef852c3e660684990b74ce4dff14735914f0031303cbd3b9480bd147acb7210e973253209367f568a8f709a05e06896d7c66902d11b599375e8329cd836c2cee92188867175e9627db0f9f7745a1e87eb4b15428fb176a0bd218757c0bbd297f345a8f335fc5a66b0a5c7282c5a7553a2b7c87870a39e542569973f3c097fb7d3ab805353ea01b0efd6fdde8bc24e4d1d21df32db3e66d420a1a7b81aaf898407cacee0927e0c206112480827deb71b218797c0c457f2036feb970c9141366a0454"], 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 2.534082155s ago: executing program 0 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x3, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x627, 0x4c1, 0x9, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 2.47311779s ago: executing program 0 (id=122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x7c2, &(0x7f00000003c0)={0x0, 0x95f2, 0x0, 0x3, 0x392}, &(0x7f0000000440), &(0x7f0000000480)) r5 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x69c7, 0x100, 0x2000008, 0x40, 0x0, r4}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x47f6, 0xb277, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40800) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r9], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, 0x1002, 0x800}, [@IFLA_MAP={0x24, 0xe, {0xff, 0x8, 0xd, 0xb55, 0x1, 0x3d}}]}, 0xfffffffffffffd89}}, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/23, 0x17}], 0x1, 0x7, 0x2) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 2.220046351s ago: executing program 4 (id=130): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) perf_event_open(&(0x7f0000003340)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100, 0x7}, 0x2202, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="450a000000000000611174000000a663315400000000fefd8876b70003000000009500a10000000000000000778c3832dad165c5a63f8bd2c6b6f459736f16892517ed3d12f73d306676351d8f65946729260000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2021) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x51, 0x0, 0x8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x80001}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000960000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000007d2f000000000000000000000000000000001c00200000004e2100000000ac1e04010000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x7, &(0x7f0000000400)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000580)='GPL\x00', 0x4, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x3) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) syz_open_dev$usbfs(0x0, 0x20008, 0x125041) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r4, @ANYRES8=r2, @ANYRES8=0x0, @ANYRESHEX=r7, @ANYRES8=r6, @ANYRES16=r4, @ANYRESHEX], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8, 0x0, 0xb}, 0x18) 2.078850162s ago: executing program 1 (id=134): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1.889201587s ago: executing program 4 (id=138): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x402) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000140)={0x20, 0x1, 0x5, 0x0, 0x0, 0x959, 0x0}) 1.807522864s ago: executing program 4 (id=140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x54}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f8", 0x4}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 1.800225055s ago: executing program 1 (id=141): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) perf_event_open(&(0x7f0000003340)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100, 0x7}, 0x2202, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="450a000000000000611174000000a663315400000000fefd8876b70003000000009500a10000000000000000778c3832dad165c5a63f8bd2c6b6f459736f16892517ed3d12f73d306676351d8f65946729260000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2021) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x51, 0x0, 0x8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x80001}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000960000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000007d2f000000000000000000000000000000001c00200000004e2100000000ac1e04010000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x7, &(0x7f0000000400)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000580)='GPL\x00', 0x4, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x3) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) syz_open_dev$usbfs(0x0, 0x20008, 0x125041) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r4, @ANYRES8=r2, @ANYRES8=0x0, @ANYRESHEX=r7, @ANYRES8=r6, @ANYRES16=r4, @ANYRESHEX], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8, 0x0, 0xb}, 0x18) 1.72588768s ago: executing program 4 (id=142): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1.517304077s ago: executing program 1 (id=146): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x0) 1.452557573s ago: executing program 1 (id=147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1e8f000}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 1.1079662s ago: executing program 4 (id=151): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1.077367823s ago: executing program 3 (id=152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x54}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f8", 0x4}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 1.011236088s ago: executing program 3 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}, @NFTA_SET_DESC={0x10, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1e8f000}]}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 954.416463ms ago: executing program 3 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, r1, 0x200}, 0x14}}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000080)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@noauto_da_alloc}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$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") r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c0000000000119078000000000000000000004e20004890780300000000000000ead43f1ebd755f730da6b8e988b5c388fd8b9ccaa13bae2a229fb3bd16e4c459c1f46a6c391aa94c42fca7ead0e17e59f1bea955800221cc"], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 936.626624ms ago: executing program 0 (id=155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10}}, 0xe0}}, 0x0) 854.022961ms ago: executing program 0 (id=156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', 0x0) 803.907765ms ago: executing program 0 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1e8f000}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 755.739209ms ago: executing program 3 (id=158): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) memfd_secret(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 755.407139ms ago: executing program 4 (id=159): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001880)={0x2, 0x7, 0x5, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x4080) 668.568326ms ago: executing program 3 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000090000800000", @ANYRES32=r0], 0x48) 626.218129ms ago: executing program 3 (id=163): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/19, @ANYRES32=r1, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) statx(r3, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 574.736534ms ago: executing program 2 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}, @NFTA_SET_DESC={0x10, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1e8f000}]}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 475.538111ms ago: executing program 2 (id=165): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x10000, 0x8000) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xd0, 0x0, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000340)={0x7, 0xa6}) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf72b3000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xeeede23dae7f9ab1, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16=r3], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a1ab00000004000000003200000008001701"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r7}, 0x10) (async) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x18) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r11, 0x1, 0x8) (async) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='mm_page_free\x00', r7, 0x0, 0x8080000001}, 0x18) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 376.588729ms ago: executing program 2 (id=166): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a3, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40400c0) 374.51776ms ago: executing program 2 (id=167): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) perf_event_open(&(0x7f0000003340)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100, 0x7}, 0x2202, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="450a000000000000611174000000a663315400000000fefd8876b70003000000009500a10000000000000000778c3832dad165c5a63f8bd2c6b6f459736f16892517ed3d12f73d306676351d8f65946729260000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2021) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x51, 0x0, 0x8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x80001}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000960000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000007d2f000000000000000000000000000000001c00200000004e2100000000ac1e04010000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x7, &(0x7f0000000400)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000580)='GPL\x00', 0x4, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x3) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) syz_open_dev$usbfs(0x0, 0x20008, 0x125041) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r4, @ANYRES8=r2, @ANYRES8=0x0, @ANYRESHEX=r7, @ANYRES8=r6, @ANYRES16=r4, @ANYRESHEX], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8, 0x0, 0xb}, 0x18) 70.829995ms ago: executing program 1 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', 0x0) 44.780177ms ago: executing program 2 (id=169): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f0000000080), 0x10, &(0x7f0000000300)={&(0x7f0000001140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000881}, 0x8000) 21.226208ms ago: executing program 1 (id=170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000005b80)={@empty, 0x33, r5}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @private1, 0x2}, r7}}, 0x30) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002060300000000000000000000000000050001"], 0x5c}}, 0x0) 0s ago: executing program 2 (id=171): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.171' (ED25519) to the list of known hosts. [ 34.805311][ T29] audit: type=1400 audit(1755126143.457:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.806531][ T3292] cgroup: Unknown subsys name 'net' [ 34.828046][ T29] audit: type=1400 audit(1755126143.457:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.856033][ T29] audit: type=1400 audit(1755126143.487:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.003865][ T3292] cgroup: Unknown subsys name 'cpuset' [ 35.010213][ T3292] cgroup: Unknown subsys name 'rlimit' [ 35.162405][ T29] audit: type=1400 audit(1755126143.807:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.185889][ T29] audit: type=1400 audit(1755126143.807:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.206473][ T29] audit: type=1400 audit(1755126143.807:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.227079][ T29] audit: type=1400 audit(1755126143.807:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.236760][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.247661][ T29] audit: type=1400 audit(1755126143.807:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.247708][ T29] audit: type=1400 audit(1755126143.807:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.304481][ T29] audit: type=1400 audit(1755126143.957:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.362581][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.633877][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 36.655695][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 36.692464][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 36.739287][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 36.770442][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.777625][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.786276][ T3306] bridge_slave_0: entered allmulticast mode [ 36.792937][ T3306] bridge_slave_0: entered promiscuous mode [ 36.815649][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.822871][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.830126][ T3306] bridge_slave_1: entered allmulticast mode [ 36.836646][ T3306] bridge_slave_1: entered promiscuous mode [ 36.854806][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.861909][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.869102][ T3307] bridge_slave_0: entered allmulticast mode [ 36.875637][ T3307] bridge_slave_0: entered promiscuous mode [ 36.895265][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 36.905097][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.912352][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.919709][ T3307] bridge_slave_1: entered allmulticast mode [ 36.926113][ T3307] bridge_slave_1: entered promiscuous mode [ 36.939370][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.948554][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.955759][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.963119][ T3303] bridge_slave_0: entered allmulticast mode [ 36.969620][ T3303] bridge_slave_0: entered promiscuous mode [ 36.976434][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.983529][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.990808][ T3303] bridge_slave_1: entered allmulticast mode [ 36.997508][ T3303] bridge_slave_1: entered promiscuous mode [ 37.022911][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.054086][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.072600][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.087634][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.100113][ T3306] team0: Port device team_slave_0 added [ 37.107874][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.135519][ T3306] team0: Port device team_slave_1 added [ 37.145828][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.152894][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.160097][ T3302] bridge_slave_0: entered allmulticast mode [ 37.166857][ T3302] bridge_slave_0: entered promiscuous mode [ 37.174103][ T3307] team0: Port device team_slave_0 added [ 37.199567][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.206723][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.213914][ T3302] bridge_slave_1: entered allmulticast mode [ 37.220427][ T3302] bridge_slave_1: entered promiscuous mode [ 37.227240][ T3307] team0: Port device team_slave_1 added [ 37.238327][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.245699][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.272815][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.284369][ T3303] team0: Port device team_slave_0 added [ 37.300411][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.307615][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.314909][ T3312] bridge_slave_0: entered allmulticast mode [ 37.321297][ T3312] bridge_slave_0: entered promiscuous mode [ 37.328023][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.335063][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.360987][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.372308][ T3303] team0: Port device team_slave_1 added [ 37.387948][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.395088][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.403481][ T3312] bridge_slave_1: entered allmulticast mode [ 37.410014][ T3312] bridge_slave_1: entered promiscuous mode [ 37.438317][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.448416][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.455503][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.481683][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.493416][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.500631][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.526849][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.539505][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.549734][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.560066][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.577132][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.584135][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.610211][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.621902][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.628929][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.655190][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.706908][ T3312] team0: Port device team_slave_0 added [ 37.713311][ T3302] team0: Port device team_slave_0 added [ 37.720525][ T3302] team0: Port device team_slave_1 added [ 37.736188][ T3312] team0: Port device team_slave_1 added [ 37.754570][ T3306] hsr_slave_0: entered promiscuous mode [ 37.760631][ T3306] hsr_slave_1: entered promiscuous mode [ 37.769628][ T3303] hsr_slave_0: entered promiscuous mode [ 37.775802][ T3303] hsr_slave_1: entered promiscuous mode [ 37.781647][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 37.787549][ T3303] Cannot create hsr debugfs directory [ 37.808859][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.815870][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.841976][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.864268][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.871246][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.897182][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.910352][ T3307] hsr_slave_0: entered promiscuous mode [ 37.916544][ T3307] hsr_slave_1: entered promiscuous mode [ 37.922452][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 37.928205][ T3307] Cannot create hsr debugfs directory [ 37.939875][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.947016][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.973149][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.984317][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.991286][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.017244][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.104015][ T3302] hsr_slave_0: entered promiscuous mode [ 38.110061][ T3302] hsr_slave_1: entered promiscuous mode [ 38.116040][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 38.121766][ T3302] Cannot create hsr debugfs directory [ 38.129277][ T3312] hsr_slave_0: entered promiscuous mode [ 38.135567][ T3312] hsr_slave_1: entered promiscuous mode [ 38.141364][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 38.147112][ T3312] Cannot create hsr debugfs directory [ 38.305869][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.323533][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.332055][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.344094][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.359713][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.378499][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.394012][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.402865][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.415259][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.427777][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.443593][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.452154][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.497262][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.510402][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.526982][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.545370][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.554025][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.569609][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.594639][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.601769][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.615367][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.622437][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.631599][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.649063][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.657840][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.667824][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.689098][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.718452][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.736002][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.770577][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.782273][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.799942][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.807133][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.816596][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.823692][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.832423][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.839533][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.855855][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.862929][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.891573][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.912055][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.919210][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.928706][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.945228][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.952277][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.970291][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.009582][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.044948][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.052066][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.067534][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.074810][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.111614][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.138834][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.174120][ T3307] veth0_vlan: entered promiscuous mode [ 39.198972][ T3307] veth1_vlan: entered promiscuous mode [ 39.249805][ T3307] veth0_macvtap: entered promiscuous mode [ 39.261739][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.275154][ T3307] veth1_macvtap: entered promiscuous mode [ 39.290465][ T3303] veth0_vlan: entered promiscuous mode [ 39.304598][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.322332][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.334555][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.355888][ T3303] veth1_vlan: entered promiscuous mode [ 39.383519][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.400426][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.412470][ T3303] veth0_macvtap: entered promiscuous mode [ 39.436738][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.445955][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.456319][ T3303] veth1_macvtap: entered promiscuous mode [ 39.469415][ T3306] veth0_vlan: entered promiscuous mode [ 39.496968][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.506358][ T3306] veth1_vlan: entered promiscuous mode [ 39.518630][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.542768][ T3306] veth0_macvtap: entered promiscuous mode [ 39.560069][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.564993][ T3306] veth1_macvtap: entered promiscuous mode [ 39.610990][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.622705][ T3312] veth0_vlan: entered promiscuous mode [ 39.631551][ T3302] veth0_vlan: entered promiscuous mode [ 39.641908][ T3472] netlink: 'syz.0.1': attribute type 32 has an invalid length. [ 39.644593][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.660005][ T3302] veth1_vlan: entered promiscuous mode [ 39.666941][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.676083][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.691451][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.699924][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.705573][ T3475] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 39.725151][ T3302] veth0_macvtap: entered promiscuous mode [ 39.739669][ T3312] veth1_vlan: entered promiscuous mode [ 39.747319][ T379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.766640][ T3302] veth1_macvtap: entered promiscuous mode [ 39.781442][ T379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.798328][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.821490][ T379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.830614][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 39.830632][ T29] audit: type=1400 audit(1755126148.467:128): avc: denied { create } for pid=3482 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.832417][ T3483] loop1: detected capacity change from 0 to 512 [ 39.867618][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.876663][ T3312] veth0_macvtap: entered promiscuous mode [ 39.896337][ T3483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.912102][ T3483] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.912493][ T29] audit: type=1400 audit(1755126148.557:129): avc: denied { mount } for pid=3482 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.953269][ T379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.966176][ T3312] veth1_macvtap: entered promiscuous mode [ 39.976889][ T29] audit: type=1400 audit(1755126148.607:130): avc: denied { map_read } for pid=3482 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.989089][ T3491] loop4: detected capacity change from 0 to 1024 [ 39.995584][ T29] audit: type=1400 audit(1755126148.617:131): avc: denied { create } for pid=3488 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.004681][ T3491] ======================================================= [ 40.004681][ T3491] WARNING: The mand mount option has been deprecated and [ 40.004681][ T3491] and is ignored by this kernel. Remove the mand [ 40.004681][ T3491] option from the mount to silence this warning. [ 40.004681][ T3491] ======================================================= [ 40.024804][ T29] audit: type=1400 audit(1755126148.677:132): avc: denied { write } for pid=3488 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.077024][ T29] audit: type=1400 audit(1755126148.677:133): avc: denied { read } for pid=3488 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.098411][ T379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.114965][ T3491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.118682][ T3483] EXT4-fs: Ignoring removed orlov option [ 40.132766][ T29] audit: type=1400 audit(1755126148.767:134): avc: denied { remount } for pid=3482 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.139056][ T3483] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.154774][ T29] audit: type=1400 audit(1755126148.787:135): avc: denied { add_name } for pid=3490 comm="syz.4.5" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.181043][ T29] audit: type=1400 audit(1755126148.787:136): avc: denied { create } for pid=3490 comm="syz.4.5" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.202658][ T29] audit: type=1400 audit(1755126148.817:137): avc: denied { read write } for pid=3490 comm="syz.4.5" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.213081][ T3483] EXT4-fs (loop1): can't enable nombcache during remount [ 40.232407][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.242271][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.252922][ T379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.295776][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.316576][ T3483] lo speed is unknown, defaulting to 1000 [ 40.326306][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.335489][ T3483] lo speed is unknown, defaulting to 1000 [ 40.374616][ T3483] lo speed is unknown, defaulting to 1000 [ 40.380748][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.394896][ T3483] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.402828][ T3483] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 40.420601][ T3497] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2'. [ 40.431378][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.435024][ T3500] loop3: detected capacity change from 0 to 512 [ 40.457551][ T3483] lo speed is unknown, defaulting to 1000 [ 40.463354][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.484080][ T3483] lo speed is unknown, defaulting to 1000 [ 40.496882][ T3500] netlink: 'syz.3.4': attribute type 13 has an invalid length. [ 40.497448][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.540828][ T3504] loop2: detected capacity change from 0 to 164 [ 40.553944][ T3504] rock: directory entry would overflow storage [ 40.560143][ T3504] rock: sig=0x5252, size=5, remaining=3 [ 40.596164][ T3491] syz.4.5 (3491) used greatest stack depth: 10744 bytes left [ 40.615987][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.623304][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.640239][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.661287][ T3510] loop3: detected capacity change from 0 to 1024 [ 40.695106][ T3514] loop4: detected capacity change from 0 to 512 [ 40.711317][ T3514] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.725819][ T3514] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.8: bad orphan inode 13 [ 40.739617][ T3518] random: crng reseeded on system resumption [ 40.747179][ T3514] ext4_test_bit(bit=12, block=18) = 1 [ 40.752617][ T3514] is_bad_inode(inode)=0 [ 40.756852][ T3514] NEXT_ORPHAN(inode)=2130706432 [ 40.757764][ T3510] EXT4-fs: inline encryption not supported [ 40.761722][ T3514] max_ino=32 [ 40.767720][ T3510] EXT4-fs: Ignoring removed i_version option [ 40.770811][ T3514] i_nlink=1 [ 40.798594][ T3514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.812739][ T3510] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.833647][ T3514] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 40.848610][ T3510] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.4: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.864493][ T3514] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8: bg 0: block 248: padding at end of block bitmap is not set [ 40.882030][ T3521] loop2: detected capacity change from 0 to 8192 [ 40.882915][ T3510] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4: Failed to acquire dquot type 0 [ 40.902572][ T3521] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.913346][ T3514] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8: Failed to acquire dquot type 1 [ 40.928013][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.935943][ T3510] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.938325][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.976497][ T3510] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4: Invalid inode bitmap blk 0 in block_group 0 [ 40.990117][ T3510] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 41.000111][ T31] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.009260][ T3514] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.019614][ T3510] EXT4-fs (loop3): 1 orphan inode deleted [ 41.030682][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 41.047474][ T3510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.077022][ T3525] loop2: detected capacity change from 0 to 164 [ 41.082094][ T3514] syz.4.8 (3514) used greatest stack depth: 9520 bytes left [ 41.094222][ T3525] rock: directory entry would overflow storage [ 41.100513][ T3525] rock: sig=0x5252, size=5, remaining=3 [ 41.131111][ T3483] lo speed is unknown, defaulting to 1000 [ 41.138451][ T3483] lo speed is unknown, defaulting to 1000 [ 41.164807][ T3506] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm syz.3.4: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.178865][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.185253][ T3506] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4: Failed to acquire dquot type 0 [ 41.198878][ T3438] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.199761][ T3438] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.221274][ T3483] lo speed is unknown, defaulting to 1000 [ 41.247848][ T3530] loop2: detected capacity change from 0 to 512 [ 41.253705][ T3483] lo speed is unknown, defaulting to 1000 [ 41.289199][ T3438] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.289318][ T3533] loop0: detected capacity change from 0 to 164 [ 41.305057][ T3530] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.330994][ T3530] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.15: bad orphan inode 13 [ 41.333234][ T3438] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.354541][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.364834][ T3500] netlink: 4276 bytes leftover after parsing attributes in process `syz.3.4'. [ 41.380901][ T3539] loop4: detected capacity change from 0 to 512 [ 41.383703][ T3530] ext4_test_bit(bit=12, block=18) = 1 [ 41.392627][ T3530] is_bad_inode(inode)=0 [ 41.397603][ T3530] NEXT_ORPHAN(inode)=2130706432 [ 41.402599][ T3530] max_ino=32 [ 41.406026][ T3530] i_nlink=1 [ 41.410862][ T3530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.426484][ T3500] netlink: 4276 bytes leftover after parsing attributes in process `syz.3.4'. [ 41.436364][ T3539] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.458723][ T3539] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.18: bad orphan inode 13 [ 41.473532][ T3533] rock: directory entry would overflow storage [ 41.479716][ T3533] rock: sig=0x5252, size=5, remaining=3 [ 41.500783][ T3539] ext4_test_bit(bit=12, block=18) = 1 [ 41.506376][ T3539] is_bad_inode(inode)=0 [ 41.510992][ T3539] NEXT_ORPHAN(inode)=2130706432 [ 41.516103][ T3539] max_ino=32 [ 41.519968][ T3539] i_nlink=1 [ 41.524359][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.531510][ T3539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.546832][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.558247][ T3539] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 41.590899][ T3545] loop2: detected capacity change from 0 to 512 [ 41.615882][ T3539] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 41.632841][ T3549] netlink: 'syz.3.20': attribute type 32 has an invalid length. [ 41.655390][ T3545] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.668042][ T3545] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.19: bad orphan inode 13 [ 41.691111][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.703001][ T3545] ext4_test_bit(bit=12, block=18) = 1 [ 41.708598][ T3545] is_bad_inode(inode)=0 [ 41.713133][ T3545] NEXT_ORPHAN(inode)=2130706432 [ 41.718024][ T3545] max_ino=32 [ 41.721242][ T3545] i_nlink=1 [ 41.733682][ T3554] binfmt_misc: register: failed to install interpreter file ./file2 [ 41.757943][ T3545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.807945][ T3562] loop0: detected capacity change from 0 to 164 [ 41.822686][ T3564] loop4: detected capacity change from 0 to 1024 [ 41.822763][ T3545] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 41.845158][ T3545] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 41.858450][ T3562] rock: directory entry would overflow storage [ 41.865153][ T3562] rock: sig=0x5252, size=5, remaining=3 [ 41.886120][ T3564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.906257][ T3542] loop1: detected capacity change from 0 to 8192 [ 41.927876][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.939571][ T3572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.949056][ T3572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.958103][ T3564] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.979330][ T3574] loop0: detected capacity change from 0 to 164 [ 41.988449][ T3574] rock: directory entry would overflow storage [ 41.994737][ T3574] rock: sig=0x5252, size=5, remaining=3 [ 42.003523][ T3572] loop3: detected capacity change from 0 to 512 [ 42.015372][ T3572] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.028662][ T3572] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 42.041567][ T3572] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.049090][ T3572] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 42.067163][ T3572] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #11: comm syz.3.26: corrupted inode contents [ 42.080631][ T3572] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #11: comm syz.3.26: mark_inode_dirty error [ 42.095177][ T3572] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.26: invalid indirect mapped block 327680 (level 0) [ 42.109925][ T3572] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #11: comm syz.3.26: corrupted inode contents [ 42.125174][ T3572] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 42.135129][ T3572] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #11: comm syz.3.26: corrupted inode contents [ 42.136768][ T3564] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.23: lblock 3 mapped to illegal pblock 3 (length 13) [ 42.148335][ T3572] EXT4-fs error (device loop3): ext4_truncate:4666: inode #11: comm syz.3.26: mark_inode_dirty error [ 42.173363][ T3576] lo speed is unknown, defaulting to 1000 [ 42.183974][ T3572] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 42.196095][ T3572] EXT4-fs (loop3): 1 truncate cleaned up [ 42.202324][ T3572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.213078][ T3564] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 42.226858][ T3564] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.226858][ T3564] [ 42.238060][ T3581] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.23: lblock 3 mapped to illegal pblock 3 (length 1) [ 42.251058][ T3580] loop0: detected capacity change from 0 to 1024 [ 42.255895][ T3581] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.23: lblock 3 mapped to illegal pblock 3 (length 1) [ 42.272634][ T3581] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.23: lblock 3 mapped to illegal pblock 3 (length 1) [ 42.287110][ T3584] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.23: lblock 3 mapped to illegal pblock 3 (length 1) [ 42.289412][ T3580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.302252][ T3581] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.23: lblock 3 mapped to illegal pblock 3 (length 1) [ 42.332757][ T3581] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.23: lblock 3 mapped to illegal pblock 3 (length 1) [ 42.347325][ T3581] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.23: lblock 3 mapped to illegal pblock 3 (length 1) [ 42.362618][ T3581] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.23: lblock 3 mapped to illegal pblock 3 (length 1) [ 42.382548][ T3559] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.23: lblock 3 mapped to illegal pblock 3 (length 1) [ 42.559716][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.571165][ T3591] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.617721][ T3597] loop0: detected capacity change from 0 to 164 [ 42.638775][ T3597] rock: directory entry would overflow storage [ 42.645041][ T3597] rock: sig=0x5252, size=5, remaining=3 [ 42.720788][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.779621][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.783563][ T3601] lo speed is unknown, defaulting to 1000 [ 42.850919][ T3604] loop0: detected capacity change from 0 to 512 [ 42.878990][ T3604] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.37: error while reading EA inode 32 err=-116 [ 42.895642][ T3604] EXT4-fs (loop0): Remounting filesystem read-only [ 42.896670][ T3609] loop2: detected capacity change from 0 to 512 [ 42.902223][ T3604] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.923206][ T3604] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 42.934422][ T3604] EXT4-fs (loop0): 1 orphan inode deleted [ 42.940777][ T3604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.954345][ T3611] loop1: detected capacity change from 0 to 1024 [ 42.977447][ T3604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.997662][ T3609] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.018461][ T3611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.035172][ T3611] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.074104][ T3609] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.39: bad orphan inode 13 [ 43.101270][ T3617] lo speed is unknown, defaulting to 1000 [ 43.102287][ T3609] ext4_test_bit(bit=12, block=18) = 1 [ 43.112750][ T3609] is_bad_inode(inode)=0 [ 43.117059][ T3609] NEXT_ORPHAN(inode)=2130706432 [ 43.122621][ T3609] max_ino=32 [ 43.125900][ T3609] i_nlink=1 [ 43.132225][ T3609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.148927][ T3619] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.40: lblock 3 mapped to illegal pblock 3 (length 13) [ 43.163363][ T3609] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 43.163436][ T3619] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 43.186133][ T3619] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.186133][ T3619] [ 43.195355][ T3609] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 43.205245][ T3622] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.40: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.221083][ T3622] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.40: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.237376][ T3622] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.40: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.252270][ T3622] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.40: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.268503][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.298137][ T3625] netlink: 'syz.0.43': attribute type 32 has an invalid length. [ 43.316429][ T3611] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.40: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.334990][ T3626] loop2: detected capacity change from 0 to 512 [ 43.354309][ T3626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.368866][ T3622] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.40: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.382924][ T3626] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.394667][ T3610] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.40: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.408973][ T3610] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.40: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.434780][ T3626] EXT4-fs: Ignoring removed orlov option [ 43.441100][ T3626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.452901][ T3626] EXT4-fs (loop2): can't enable nombcache during remount [ 43.460767][ T3636] loop3: detected capacity change from 0 to 1024 [ 43.462516][ T3610] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.40: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.489626][ T3626] siw: device registration error -23 [ 43.496025][ T3626] netlink: 64 bytes leftover after parsing attributes in process `syz.2.42'. [ 43.514991][ T3636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.528446][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.528716][ T3636] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.598200][ T3642] loop2: detected capacity change from 0 to 1024 [ 43.627214][ T3636] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.44: lblock 3 mapped to illegal pblock 3 (length 13) [ 43.641287][ T3648] bridge0: port 3(batadv1) entered blocking state [ 43.647871][ T3648] bridge0: port 3(batadv1) entered disabled state [ 43.658282][ T3648] batadv1: entered allmulticast mode [ 43.664675][ T3648] batadv1: entered promiscuous mode [ 43.674947][ T3648] loop0: detected capacity change from 0 to 256 [ 43.697097][ T3650] netlink: 'syz.4.49': attribute type 32 has an invalid length. [ 43.698322][ T3642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.714665][ T3636] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 43.729920][ T3636] EXT4-fs (loop3): This should not happen!! Data will be lost [ 43.729920][ T3636] [ 43.747320][ T3642] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.770507][ T3636] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.44: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.790364][ T3648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 43.802369][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.809963][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.818037][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.826207][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.839170][ T3651] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.44: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.854905][ T3635] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.44: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.866949][ T3661] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.45: lblock 3 mapped to illegal pblock 3 (length 13) [ 43.891473][ T3661] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 43.904126][ T3661] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.904126][ T3661] [ 43.906281][ T3651] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.44: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.929095][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.938227][ T3635] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.44: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.952653][ T3651] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.44: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.967101][ T3642] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.45: lblock 3 mapped to illegal pblock 3 (length 1) [ 43.982897][ T3635] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.44: lblock 3 mapped to illegal pblock 3 (length 1) [ 44.000685][ T3651] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.44: lblock 3 mapped to illegal pblock 3 (length 1) [ 44.017826][ T3651] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.44: lblock 3 mapped to illegal pblock 3 (length 1) [ 44.034966][ T3661] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.45: lblock 3 mapped to illegal pblock 3 (length 1) [ 44.059888][ T3665] loop1: detected capacity change from 0 to 1024 [ 44.061983][ T3641] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.45: lblock 3 mapped to illegal pblock 3 (length 1) [ 44.073901][ T3665] EXT4-fs: Ignoring removed nobh option [ 44.083913][ T3641] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.45: lblock 3 mapped to illegal pblock 3 (length 1) [ 44.101807][ T3641] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.45: lblock 3 mapped to illegal pblock 3 (length 1) [ 44.117738][ T3642] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.45: lblock 3 mapped to illegal pblock 3 (length 1) [ 44.134153][ T379] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 44.143543][ T379] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 44.146771][ T3661] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.45: lblock 3 mapped to illegal pblock 3 (length 1) [ 44.166753][ T3667] loop4: detected capacity change from 0 to 8192 [ 44.170695][ T3642] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.45: lblock 3 mapped to illegal pblock 3 (length 1) [ 44.175127][ T3665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.201054][ T3642] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.45: lblock 3 mapped to illegal pblock 3 (length 1) [ 44.203185][ T3667] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.283751][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.359283][ T3673] loop4: detected capacity change from 0 to 256 [ 44.420403][ T3673] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 44.428617][ T3673] FAT-fs (loop4): Filesystem has been set read-only [ 44.437235][ T3673] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 44.465570][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.476145][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.521763][ T3676] netlink: 96 bytes leftover after parsing attributes in process `syz.3.55'. [ 44.529011][ T3677] loop2: detected capacity change from 0 to 512 [ 44.595040][ T3677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.621512][ T3677] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.640732][ T3677] EXT4-fs: Ignoring removed orlov option [ 44.646676][ T3677] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.655485][ T3677] EXT4-fs (loop2): can't enable nombcache during remount [ 44.666146][ T3677] siw: device registration error -23 [ 44.670665][ T3689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3689 comm=syz.4.56 [ 44.672630][ T3677] netlink: 64 bytes leftover after parsing attributes in process `syz.2.54'. [ 44.703352][ T3692] FAULT_INJECTION: forcing a failure. [ 44.703352][ T3692] name failslab, interval 1, probability 0, space 0, times 1 [ 44.716423][ T3692] CPU: 1 UID: 0 PID: 3692 Comm: syz.0.59 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 44.716509][ T3692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.716524][ T3692] Call Trace: [ 44.716530][ T3692] [ 44.716539][ T3692] __dump_stack+0x1d/0x30 [ 44.716564][ T3692] dump_stack_lvl+0xe8/0x140 [ 44.716621][ T3692] dump_stack+0x15/0x1b [ 44.716640][ T3692] should_fail_ex+0x265/0x280 [ 44.716663][ T3692] ? tcp_sendmsg_fastopen+0x172/0x520 [ 44.716695][ T3692] should_failslab+0x8c/0xb0 [ 44.716867][ T3692] __kmalloc_cache_noprof+0x4c/0x320 [ 44.716963][ T3692] tcp_sendmsg_fastopen+0x172/0x520 [ 44.717024][ T3692] tcp_sendmsg_locked+0x26e1/0x2c00 [ 44.717055][ T3692] ? mntput_no_expire+0x6f/0x460 [ 44.717136][ T3692] ? terminate_walk+0x27f/0x2a0 [ 44.717221][ T3692] ? path_openat+0x1bf8/0x2170 [ 44.717246][ T3692] ? _parse_integer_limit+0x170/0x190 [ 44.717339][ T3692] ? _raw_spin_unlock_bh+0x36/0x40 [ 44.717458][ T3692] ? __pfx_tcp_sendmsg+0x10/0x10 [ 44.717489][ T3692] tcp_sendmsg+0x2f/0x50 [ 44.717523][ T3692] inet_sendmsg+0x76/0xd0 [ 44.717545][ T3692] __sock_sendmsg+0x102/0x180 [ 44.717666][ T3692] __sys_sendto+0x268/0x330 [ 44.717712][ T3692] __x64_sys_sendto+0x76/0x90 [ 44.717758][ T3692] x64_sys_call+0x2d05/0x2ff0 [ 44.717825][ T3692] do_syscall_64+0xd2/0x200 [ 44.717854][ T3692] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.717938][ T3692] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.717964][ T3692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.717988][ T3692] RIP: 0033:0x7f8dd96febe9 [ 44.718051][ T3692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.718072][ T3692] RSP: 002b:00007f8dd8167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 44.718094][ T3692] RAX: ffffffffffffffda RBX: 00007f8dd9925fa0 RCX: 00007f8dd96febe9 [ 44.718108][ T3692] RDX: 0000000000000001 RSI: 0000200000001780 RDI: 0000000000000003 [ 44.718122][ T3692] RBP: 00007f8dd8167090 R08: 0000000000000000 R09: 0000000000000000 [ 44.718136][ T3692] R10: 0000000024000015 R11: 0000000000000246 R12: 0000000000000001 [ 44.718149][ T3692] R13: 00007f8dd9926038 R14: 00007f8dd9925fa0 R15: 00007fff0c2f1548 [ 44.718240][ T3692] [ 44.978070][ T3689] 9pnet_fd: Insufficient options for proto=fd [ 44.982807][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.985445][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 44.985485][ T29] audit: type=1326 audit(1755126153.617:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25ee55ebe9 code=0x7ffc0000 [ 45.007765][ T3687] SELinux: failed to load policy [ 45.024886][ T29] audit: type=1326 audit(1755126153.617:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ee55ebe9 code=0x7ffc0000 [ 45.024975][ T29] audit: type=1326 audit(1755126153.617:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ee55ebe9 code=0x7ffc0000 [ 45.077060][ T29] audit: type=1326 audit(1755126153.617:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3682 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f25ee55ebe9 code=0x7ffc0000 [ 45.100554][ T29] audit: type=1400 audit(1755126153.617:312): avc: denied { load_policy } for pid=3682 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 45.120913][ T29] audit: type=1400 audit(1755126153.627:313): avc: denied { read } for pid=3671 comm="syz.1.52" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.146132][ T29] audit: type=1400 audit(1755126153.627:314): avc: denied { open } for pid=3671 comm="syz.1.52" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.169695][ T29] audit: type=1400 audit(1755126153.627:315): avc: denied { ioctl } for pid=3671 comm="syz.1.52" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.206200][ T3697] loop0: detected capacity change from 0 to 512 [ 45.217035][ T3697] netlink: 'syz.0.61': attribute type 13 has an invalid length. [ 45.232948][ T29] audit: type=1400 audit(1755126153.757:316): avc: denied { map } for pid=3671 comm="syz.1.52" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.257184][ T29] audit: type=1400 audit(1755126153.757:317): avc: denied { read } for pid=3671 comm="syz.1.52" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.316981][ T3702] loop3: detected capacity change from 0 to 164 [ 45.349835][ T3703] loop0: detected capacity change from 0 to 1024 [ 45.357761][ T3703] EXT4-fs: inline encryption not supported [ 45.363682][ T3703] EXT4-fs: Ignoring removed i_version option [ 45.370321][ T3703] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.371929][ T3702] rock: directory entry would overflow storage [ 45.387297][ T3702] rock: sig=0x5252, size=5, remaining=3 [ 45.407848][ T3707] loop2: detected capacity change from 0 to 512 [ 45.428075][ T3703] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.61: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.457870][ T3703] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.61: Failed to acquire dquot type 0 [ 45.509079][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.516399][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.541494][ T3714] FAULT_INJECTION: forcing a failure. [ 45.541494][ T3714] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.554718][ T3714] CPU: 1 UID: 0 PID: 3714 Comm: syz.3.66 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 45.554942][ T3714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.554955][ T3714] Call Trace: [ 45.554961][ T3714] [ 45.554970][ T3714] __dump_stack+0x1d/0x30 [ 45.554993][ T3714] dump_stack_lvl+0xe8/0x140 [ 45.555014][ T3714] dump_stack+0x15/0x1b [ 45.555030][ T3714] should_fail_ex+0x265/0x280 [ 45.555125][ T3714] should_fail+0xb/0x20 [ 45.555193][ T3714] should_fail_usercopy+0x1a/0x20 [ 45.555218][ T3714] _copy_from_user+0x1c/0xb0 [ 45.555249][ T3714] ___sys_sendmsg+0xc1/0x1d0 [ 45.555288][ T3714] __x64_sys_sendmsg+0xd4/0x160 [ 45.555318][ T3714] x64_sys_call+0x191e/0x2ff0 [ 45.555342][ T3714] do_syscall_64+0xd2/0x200 [ 45.555371][ T3714] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.555398][ T3714] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.555433][ T3714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.555469][ T3714] RIP: 0033:0x7f25ee55ebe9 [ 45.555486][ T3714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.555504][ T3714] RSP: 002b:00007f25ecfbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.555524][ T3714] RAX: ffffffffffffffda RBX: 00007f25ee785fa0 RCX: 00007f25ee55ebe9 [ 45.555616][ T3714] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000003 [ 45.555629][ T3714] RBP: 00007f25ecfbf090 R08: 0000000000000000 R09: 0000000000000000 [ 45.555641][ T3714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.555656][ T3714] R13: 00007f25ee786038 R14: 00007f25ee785fa0 R15: 00007fff317f3d08 [ 45.555680][ T3714] [ 45.556758][ T3707] netlink: 'syz.2.63': attribute type 13 has an invalid length. [ 45.632776][ T3703] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.61: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.764843][ T3703] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.61: Invalid inode bitmap blk 0 in block_group 0 [ 45.783115][ T12] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.793380][ T3703] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 45.815503][ T3717] loop2: detected capacity change from 0 to 1024 [ 45.827728][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 45.851717][ T3717] EXT4-fs: inline encryption not supported [ 45.857810][ T3717] EXT4-fs: Ignoring removed i_version option [ 45.865499][ T3703] EXT4-fs (loop0): 1 orphan inode deleted [ 45.881059][ T3717] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.896151][ T3703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.921812][ T3717] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.63: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.936683][ T3717] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.63: Failed to acquire dquot type 0 [ 46.043996][ T3703] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm syz.0.61: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.071929][ T3717] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.63: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.094256][ T3717] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.63: Invalid inode bitmap blk 0 in block_group 0 [ 46.101224][ T3725] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.61'. [ 46.117864][ T3725] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.61'. [ 46.127466][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.150495][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 46.162379][ T3717] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 46.172303][ T3703] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.61: Failed to acquire dquot type 0 [ 46.204754][ T3717] EXT4-fs (loop2): 1 orphan inode deleted [ 46.211057][ T3717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.228986][ T3717] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm syz.2.63: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.242996][ T3717] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.63: Failed to acquire dquot type 0 [ 46.283717][ T3717] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.63'. [ 46.323130][ T3717] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.63'. [ 46.351860][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.395825][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.403077][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.422553][ T3710] syz.4.64 (3710) used greatest stack depth: 8496 bytes left [ 46.459951][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.470668][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.544270][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.553319][ T3729] syzkaller0: tun_chr_ioctl cmd 35111 [ 46.563458][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.563574][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.604753][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.622948][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.635227][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.648135][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.657770][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.697252][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.727871][ T3740] loop4: detected capacity change from 0 to 128 [ 46.741873][ T3748] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.763740][ T3740] syz.4.75: attempt to access beyond end of device [ 46.763740][ T3740] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 46.781914][ T3740] syz.4.75: attempt to access beyond end of device [ 46.781914][ T3740] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 46.803616][ T3740] syz.4.75: attempt to access beyond end of device [ 46.803616][ T3740] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 46.835179][ T3740] syz.4.75: attempt to access beyond end of device [ 46.835179][ T3740] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 46.873280][ T3740] syz.4.75: attempt to access beyond end of device [ 46.873280][ T3740] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 46.888114][ T3740] syz.4.75: attempt to access beyond end of device [ 46.888114][ T3740] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 46.894149][ T3750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 46.901706][ T3740] syz.4.75: attempt to access beyond end of device [ 46.901706][ T3740] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 46.910464][ T3750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 46.931806][ T3740] syz.4.75: attempt to access beyond end of device [ 46.931806][ T3740] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 46.947007][ T3740] syz.4.75: attempt to access beyond end of device [ 46.947007][ T3740] loop4: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 46.997215][ T3765] loop1: detected capacity change from 0 to 1024 [ 47.032924][ T3765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.065264][ T3776] netlink: 'syz.4.85': attribute type 11 has an invalid length. [ 47.188361][ T3776] netlink: 200 bytes leftover after parsing attributes in process `syz.4.85'. [ 47.223535][ T3776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 47.348832][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.459403][ T3803] FAULT_INJECTION: forcing a failure. [ 47.459403][ T3803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.472724][ T3803] CPU: 1 UID: 0 PID: 3803 Comm: syz.1.87 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 47.472762][ T3803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.472775][ T3803] Call Trace: [ 47.472780][ T3803] [ 47.472790][ T3803] __dump_stack+0x1d/0x30 [ 47.472882][ T3803] dump_stack_lvl+0xe8/0x140 [ 47.472906][ T3803] dump_stack+0x15/0x1b [ 47.472927][ T3803] should_fail_ex+0x265/0x280 [ 47.472947][ T3803] should_fail+0xb/0x20 [ 47.472964][ T3803] should_fail_usercopy+0x1a/0x20 [ 47.473039][ T3803] _copy_from_user+0x1c/0xb0 [ 47.473075][ T3803] __sys_sendto+0x19e/0x330 [ 47.473144][ T3803] __x64_sys_sendto+0x76/0x90 [ 47.473179][ T3803] x64_sys_call+0x2d05/0x2ff0 [ 47.473200][ T3803] do_syscall_64+0xd2/0x200 [ 47.473256][ T3803] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.473299][ T3803] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.473331][ T3803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.473359][ T3803] RIP: 0033:0x7f2c98afebe9 [ 47.473375][ T3803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.473417][ T3803] RSP: 002b:00007f2c974d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 47.473461][ T3803] RAX: ffffffffffffffda RBX: 00007f2c98d26090 RCX: 00007f2c98afebe9 [ 47.473476][ T3803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 47.473492][ T3803] RBP: 00007f2c974d9090 R08: 0000200000000200 R09: 0000000000000010 [ 47.473507][ T3803] R10: 00000000200408c4 R11: 0000000000000246 R12: 0000000000000001 [ 47.473523][ T3803] R13: 00007f2c98d26128 R14: 00007f2c98d26090 R15: 00007ffe56922cd8 [ 47.473546][ T3803] [ 47.795430][ T3845] netlink: 'syz.4.90': attribute type 32 has an invalid length. [ 47.893464][ T3849] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 47.917926][ T3854] lo speed is unknown, defaulting to 1000 [ 47.974803][ T3862] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 48.087027][ T3874] loop3: detected capacity change from 0 to 1024 [ 48.096226][ T3872] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 48.120829][ T3874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.140453][ T3872] SELinux: failed to load policy [ 48.360942][ T3890] FAULT_INJECTION: forcing a failure. [ 48.360942][ T3890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.374363][ T3890] CPU: 0 UID: 0 PID: 3890 Comm: syz.1.106 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 48.374415][ T3890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.374430][ T3890] Call Trace: [ 48.374438][ T3890] [ 48.374447][ T3890] __dump_stack+0x1d/0x30 [ 48.374473][ T3890] dump_stack_lvl+0xe8/0x140 [ 48.374496][ T3890] dump_stack+0x15/0x1b [ 48.374516][ T3890] should_fail_ex+0x265/0x280 [ 48.374613][ T3890] should_fail+0xb/0x20 [ 48.374648][ T3890] should_fail_usercopy+0x1a/0x20 [ 48.374677][ T3890] _copy_from_user+0x1c/0xb0 [ 48.374748][ T3890] ___sys_sendmsg+0xc1/0x1d0 [ 48.374791][ T3890] __sys_sendmmsg+0x178/0x300 [ 48.374824][ T3890] __x64_sys_sendmmsg+0x57/0x70 [ 48.374847][ T3890] x64_sys_call+0x1c4a/0x2ff0 [ 48.374929][ T3890] do_syscall_64+0xd2/0x200 [ 48.374958][ T3890] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.374985][ T3890] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.375091][ T3890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.375115][ T3890] RIP: 0033:0x7f2c98afebe9 [ 48.375131][ T3890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.375150][ T3890] RSP: 002b:00007f2c9755f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 48.375226][ T3890] RAX: ffffffffffffffda RBX: 00007f2c98d25fa0 RCX: 00007f2c98afebe9 [ 48.375240][ T3890] RDX: 0000000000000002 RSI: 0000200000000d40 RDI: 0000000000000003 [ 48.375253][ T3890] RBP: 00007f2c9755f090 R08: 0000000000000000 R09: 0000000000000000 [ 48.375266][ T3890] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 48.375280][ T3890] R13: 00007f2c98d26038 R14: 00007f2c98d25fa0 R15: 00007ffe56922cd8 [ 48.375299][ T3890] [ 48.544577][ T3896] capability: warning: `syz.2.105' uses 32-bit capabilities (legacy support in use) [ 48.595036][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.706656][ T3929] loop3: detected capacity change from 0 to 1024 [ 48.730749][ T3929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.732158][ T3933] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 48.788759][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.814690][ T3938] loop1: detected capacity change from 0 to 8192 [ 48.831171][ T3938] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.894203][ C1] hrtimer: interrupt took 38652 ns [ 48.936627][ T3948] SELinux: failed to load policy [ 49.035341][ T3960] loop3: detected capacity change from 0 to 1024 [ 49.048150][ T3960] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 49.059720][ T3964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'. [ 49.072101][ T3960] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 49.092866][ T3960] EXT4-fs (loop3): invalid journal inode [ 49.098991][ T3960] EXT4-fs (loop3): can't get journal size [ 49.107305][ T3960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.120443][ T3964] hsr_slave_1 (unregistering): left promiscuous mode [ 49.120924][ T3962] loop4: detected capacity change from 0 to 1024 [ 49.145388][ T3962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.146756][ T3960] mmap: syz.3.117 (3960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.185739][ T3972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.119'. [ 49.210111][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.238043][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.255035][ T3979] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 49.279787][ T3975] netlink: 'syz.4.120': attribute type 32 has an invalid length. [ 49.345657][ T3988] binfmt_misc: register: failed to install interpreter file ./file2 [ 49.526139][ T4005] netlink: 'syz.4.130': attribute type 32 has an invalid length. [ 49.617324][ T4015] loop2: detected capacity change from 0 to 512 [ 49.661495][ T4020] lo speed is unknown, defaulting to 1000 [ 49.668228][ T4015] EXT4-fs (loop2): too many log groups per flexible block group [ 49.676009][ T4015] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 49.691579][ T4015] EXT4-fs (loop2): mount failed [ 49.876538][ T4039] loop3: detected capacity change from 0 to 512 [ 49.916380][ T4039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.933121][ T4039] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.962002][ T4045] netlink: 'syz.1.141': attribute type 32 has an invalid length. [ 49.981432][ T4039] EXT4-fs: Ignoring removed orlov option [ 49.987335][ T4039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.997781][ T4039] EXT4-fs (loop3): can't enable nombcache during remount [ 50.033163][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.051390][ T4048] lo speed is unknown, defaulting to 1000 [ 50.288328][ T4069] FAULT_INJECTION: forcing a failure. [ 50.288328][ T4069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.301493][ T4069] CPU: 1 UID: 0 PID: 4069 Comm: syz.3.148 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 50.301529][ T4069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.301600][ T4069] Call Trace: [ 50.301608][ T4069] [ 50.301616][ T4069] __dump_stack+0x1d/0x30 [ 50.301642][ T4069] dump_stack_lvl+0xe8/0x140 [ 50.301665][ T4069] dump_stack+0x15/0x1b [ 50.301686][ T4069] should_fail_ex+0x265/0x280 [ 50.301786][ T4069] should_fail+0xb/0x20 [ 50.301803][ T4069] should_fail_usercopy+0x1a/0x20 [ 50.301853][ T4069] _copy_from_user+0x1c/0xb0 [ 50.301979][ T4069] ___sys_sendmsg+0xc1/0x1d0 [ 50.302025][ T4069] __sys_sendmmsg+0x178/0x300 [ 50.302082][ T4069] __x64_sys_sendmmsg+0x57/0x70 [ 50.302107][ T4069] x64_sys_call+0x1c4a/0x2ff0 [ 50.302134][ T4069] do_syscall_64+0xd2/0x200 [ 50.302169][ T4069] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.302270][ T4069] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.302301][ T4069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.302330][ T4069] RIP: 0033:0x7f25ee55ebe9 [ 50.302386][ T4069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.302409][ T4069] RSP: 002b:00007f25ecfbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 50.302429][ T4069] RAX: ffffffffffffffda RBX: 00007f25ee785fa0 RCX: 00007f25ee55ebe9 [ 50.302442][ T4069] RDX: 0000000000000002 RSI: 0000200000000d40 RDI: 0000000000000003 [ 50.302454][ T4069] RBP: 00007f25ecfbf090 R08: 0000000000000000 R09: 0000000000000000 [ 50.302469][ T4069] R10: 0000000020004000 R11: 0000000000000246 R12: 0000000000000001 [ 50.302485][ T4069] R13: 00007f25ee786038 R14: 00007f25ee785fa0 R15: 00007fff317f3d08 [ 50.302506][ T4069] [ 50.520958][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 50.520977][ T29] audit: type=1400 audit(1755126159.167:533): avc: denied { mount } for pid=4070 comm="syz.3.149" name="/" dev="ramfs" ino=6607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.639032][ T4075] lo speed is unknown, defaulting to 1000 [ 50.782624][ T4083] loop3: detected capacity change from 0 to 1024 [ 50.798104][ T4083] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 50.821215][ T4083] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.859143][ T4083] EXT4-fs (loop3): invalid journal inode [ 50.867313][ T4083] EXT4-fs (loop3): can't get journal size [ 50.878003][ T4083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.919781][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.964326][ T4035] syz.2.137 (4035) used greatest stack depth: 8312 bytes left [ 51.147911][ T29] audit: type=1326 audit(1755126159.797:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4103 comm="syz.3.163" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25ee55ebe9 code=0x0 [ 51.248614][ T4119] loop2: detected capacity change from 0 to 1024 [ 51.363290][ T4133] netlink: 'syz.2.167': attribute type 32 has an invalid length. [ 51.433797][ T29] audit: type=1326 audit(1755126160.087:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc17f4ebe9 code=0x7ffc0000 [ 51.459611][ T29] audit: type=1326 audit(1755126160.087:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc17f4ebe9 code=0x7ffc0000 [ 51.483178][ T29] audit: type=1326 audit(1755126160.087:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdc17f4ebe9 code=0x7ffc0000 [ 51.506707][ T29] audit: type=1326 audit(1755126160.087:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc17f4ebe9 code=0x7ffc0000 [ 51.530003][ T29] audit: type=1326 audit(1755126160.087:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fdc17f4ebe9 code=0x7ffc0000 [ 51.553556][ T29] audit: type=1326 audit(1755126160.087:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc17f4ebe9 code=0x7ffc0000 [ 51.576983][ T29] audit: type=1326 audit(1755126160.087:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc17f4ebe9 code=0x7ffc0000 [ 51.600511][ T29] audit: type=1326 audit(1755126160.087:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4132 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc17f4ebe9 code=0x7ffc0000 [ 51.723689][ T4155] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 51.736470][ T4153] loop1: detected capacity change from 0 to 512 [ 51.746884][ T4155] SELinux: failed to load policy [ 51.775327][ T4153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.798660][ T2] ================================================================== [ 51.808286][ T2] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 51.815343][ T2] [ 51.817686][ T2] write to 0xffff888100211638 of 8 bytes by task 4163 on cpu 0: [ 51.825509][ T2] release_task+0x779/0xb60 [ 51.830210][ T2] do_exit+0xd81/0x15c0 [ 51.834560][ T2] kthread_exit+0x94/0x190 [ 51.839034][ T2] kthread+0xc7/0x510 [ 51.843090][ T2] ret_from_fork+0xda/0x150 [ 51.847626][ T2] ret_from_fork_asm+0x1a/0x30 [ 51.852512][ T2] [ 51.854864][ T2] read to 0xffff888100211080 of 3264 bytes by task 2 on cpu 1: [ 51.862440][ T2] memcpy_and_pad+0x48/0x80 [ 51.866975][ T2] arch_dup_task_struct+0x2c/0x40 [ 51.872031][ T2] dup_task_struct+0x83/0x6a0 [ 51.876831][ T2] copy_process+0x399/0x2000 [ 51.881666][ T2] kernel_clone+0x16c/0x5c0 [ 51.886304][ T2] kernel_thread+0xac/0xe0 [ 51.891054][ T2] kthreadd+0x28d/0x360 [ 51.895234][ T2] ret_from_fork+0xda/0x150 [ 51.899838][ T2] ret_from_fork_asm+0x1a/0x30 [ 51.904815][ T2] [ 51.907186][ T2] Reported by Kernel Concurrency Sanitizer on: [ 51.913576][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 51.925587][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.935928][ T2] ================================================================== [ 51.948496][ T4153] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.970119][ T4153] EXT4-fs: Ignoring removed orlov option [ 51.975936][ T4153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.020618][ T4089] syz.0.157 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 52.031710][ T4089] CPU: 1 UID: 0 PID: 4089 Comm: syz.0.157 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 52.031824][ T4089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.031841][ T4089] Call Trace: [ 52.031850][ T4089] [ 52.031861][ T4089] __dump_stack+0x1d/0x30 [ 52.031896][ T4089] dump_stack_lvl+0xe8/0x140 [ 52.031922][ T4089] dump_stack+0x15/0x1b [ 52.032013][ T4089] dump_header+0x81/0x220 [ 52.032056][ T4089] oom_kill_process+0x342/0x400 [ 52.032156][ T4089] out_of_memory+0x979/0xb80 [ 52.032204][ T4089] try_charge_memcg+0x5e6/0x9e0 [ 52.032321][ T4089] charge_memcg+0x51/0xc0 [ 52.032346][ T4089] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 52.032395][ T4089] __read_swap_cache_async+0x1df/0x350 [ 52.032444][ T4089] swap_cluster_readahead+0x376/0x3e0 [ 52.032493][ T4089] swapin_readahead+0xde/0x6f0 [ 52.032622][ T4089] ? __filemap_get_folio+0x4f7/0x6b0 [ 52.032696][ T4089] ? __rcu_read_unlock+0x34/0x70 [ 52.032769][ T4089] ? swap_cache_get_folio+0x77/0x200 [ 52.032814][ T4089] do_swap_page+0x301/0x2430 [ 52.032847][ T4089] ? css_rstat_updated+0xb7/0x240 [ 52.032911][ T4089] ? __pfx_default_wake_function+0x10/0x10 [ 52.032945][ T4089] handle_mm_fault+0x9a5/0x2c20 [ 52.032987][ T4089] do_user_addr_fault+0x636/0x1090 [ 52.033078][ T4089] exc_page_fault+0x62/0xa0 [ 52.033108][ T4089] asm_exc_page_fault+0x26/0x30 [ 52.033135][ T4089] RIP: 0033:0x7f8dd95bda30 [ 52.033156][ T4089] Code: 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 18 48 89 [ 52.033179][ T4089] RSP: 002b:00007fff0c2f15c8 EFLAGS: 00010246 [ 52.033212][ T4089] RAX: 0000000000000000 RBX: 00007f8dda455720 RCX: 0000000000000000 [ 52.033229][ T4089] RDX: 0000000000001f6e RSI: ffffffff81983f6e RDI: 0000000000000001 [ 52.033246][ T4089] RBP: ffffffff81983f6e R08: 00007f8dd9910000 R09: 00007f8dd9912000 [ 52.033263][ T4089] R10: 0000000081983f72 R11: 0000000000000001 R12: 0000000000000001 [ 52.033279][ T4089] R13: 0000000000000003 R14: ffffffff8198379f R15: 0000000000000003 [ 52.033296][ T4089] ? __fget_files+0x17f/0x1c0 [ 52.033328][ T4089] ? fdget_pos+0xee/0x1d0 [ 52.033412][ T4089] ? fdget_pos+0xee/0x1d0 [ 52.033437][ T4089] [ 52.083119][ T4153] EXT4-fs (loop1): can't enable nombcache during remount [ 52.084892][ T4089] memory: usage 307200kB, limit 307200kB, failcnt 324 [ 52.274323][ T4089] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 52.282344][ T4089] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 52.289708][ T4089] Memory cgroup stats for /syz0: [ 52.290029][ T4089] cache 0 [ 52.298047][ T4089] rss 4096 [ 52.301153][ T4089] shmem 0 [ 52.304629][ T4089] mapped_file 0 [ 52.307833][ T4153] Zero length message leads to an empty skb [ 52.308141][ T4089] dirty 0 [ 52.308152][ T4089] writeback 0 [ 52.308161][ T4089] workingset_refault_anon 24 [ 52.315968][ T4153] __nla_validate_parse: 2 callbacks suppressed [ 52.315988][ T4153] netlink: 64 bytes leftover after parsing attributes in process `syz.1.170'. [ 52.317502][ T4089] workingset_refault_file 698 [ 52.345356][ T4089] swap 180224 [ 52.348705][ T4089] swapcached 8192 [ 52.352426][ T4089] pgpgin 5918 [ 52.356281][ T4089] pgpgout 5916 [ 52.359697][ T4089] pgfault 6983 [ 52.363082][ T4089] pgmajfault 22 [ 52.366562][ T4089] inactive_anon 8192 [ 52.370461][ T4089] active_anon 0 [ 52.373942][ T4089] inactive_file 0 [ 52.377583][ T4089] active_file 0 [ 52.381045][ T4089] unevictable 0 [ 52.384559][ T4089] hierarchical_memory_limit 314572800 [ 52.389971][ T4089] hierarchical_memsw_limit 9223372036854771712 [ 52.396233][ T4089] total_cache 0 [ 52.399697][ T4089] total_rss 4096 [ 52.403263][ T4089] total_shmem 0 [ 52.407022][ T4089] total_mapped_file 0 [ 52.411011][ T4089] total_dirty 0 [ 52.414516][ T4089] total_writeback 0 [ 52.418323][ T4089] total_workingset_refault_anon 24 [ 52.423452][ T4089] total_workingset_refault_file 698 [ 52.428649][ T4089] total_swap 180224 [ 52.432461][ T4089] total_swapcached 8192 [ 52.436788][ T4089] total_pgpgin 5918 [ 52.440682][ T4089] total_pgpgout 5916 [ 52.444766][ T4089] total_pgfault 6983 [ 52.448721][ T4089] total_pgmajfault 22 [ 52.452847][ T4089] total_inactive_anon 8192 [ 52.457300][ T4089] total_active_anon 0 [ 52.461310][ T4089] total_inactive_file 0 [ 52.465531][ T4089] total_active_file 0 [ 52.469694][ T4089] total_unevictable 0 [ 52.473747][ T4089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.157,pid=4089,uid=0 [ 52.488902][ T4089] Memory cgroup out of memory: Killed process 4089 (syz.0.157) total-vm:95680kB, anon-rss:1072kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 52.536414][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.