last executing test programs: 19.070740404s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@dioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000740)='kfree\x00', r10}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000003"], 0x118}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000003080300000000000000000003000005090700000000000000000000090000f3ff3f0000050003008400000000e0d19895b437d577ae1417200028636a631a37ae2c1bc73c651c81bf61037134bd88a0a5bc67"], 0x30}, 0x1, 0x0, 0x0, 0x4c080}, 0x24000001) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f0000000040)={0xfbffdff4, 0xffff, 0xfffffffd, 0x2, 0x9, "04020000000000000049fb730d77080100", 0x7, 0x240}) r12 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x126) r13 = socket$netlink(0x10, 0x3, 0x0) copy_file_range(r13, 0x0, r12, 0x0, 0x6, 0x0) 18.305037318s ago: executing program 1 (id=12): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x207, 0x9, 0x0, 0x19, "000000000000c500"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) 17.763233337s ago: executing program 0 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000280)=0x14) read(r2, &(0x7f00000019c0)=""/4097, 0x1001) 17.692716918s ago: executing program 0 (id=19): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) close(r1) 17.61518019s ago: executing program 0 (id=20): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, 0xffffffffffffffff, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300)}}, 0x18) 17.567881871s ago: executing program 0 (id=23): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@dioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r6, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000740)='kfree\x00', r10}, 0x18) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000003"], 0x118}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000003080300000000000000000003000005090700000000000000000000090000f3ff3f0000050003008400000000e0d19895b437d577ae1417200028636a631a37ae2c1bc73c651c81bf61037134bd88a0a5bc67"], 0x30}, 0x1, 0x0, 0x0, 0x4c080}, 0x24000001) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f0000000040)={0xfbffdff4, 0xffff, 0xfffffffd, 0x2, 0x9, "04020000000000000049fb730d77080100", 0x7, 0x240}) r12 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x126) r13 = socket$netlink(0x10, 0x3, 0x0) copy_file_range(r13, 0x0, r12, 0x0, 0x6, 0x0) 17.240627907s ago: executing program 0 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f00000001c0)=0x8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14.768424122s ago: executing program 1 (id=63): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) io_setup(0x2004, &(0x7f0000000680)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) gettid() timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mblk_io_submit}]}, 0x1, 0x4bd, &(0x7f0000000540)="$eJzs3U9vVF0ZAPDn3ra0lEKLkvgnKogoGsJMO0BDWOFGYwiJkbhyAbUdmqYznaYzRVpZlO9gIokr/QjuXJiwcu9Od25wYYJKNNTExby5d6bQt3TaAu0MML9fcrn33DMzz3MY7jnD6fSeAPrWuYjYiIhjEXEvIsbb55P2FjdbW/a4ly8ezW6+eDSbRLN5519JXp+di23PyZxov+ZIRPzkhxE/T96MW19bX5ypVMor7XKxUV0u1tfWLy9UZ+bL8+WlUml6anry+pVrpUNr69nq75//YOHWT//4h68/+/PG936ZpTXWrtvejsPUavrQqziZwYi4dRTBemCg3Z5jvU6Ed5JGxBci4nx2/Td7nQ0A0A3N5ng0x7eXAYBPXZrPgSVpoT0XMJb/2XImRtNKrd64dL+2ujTXmiubiKH0/kKlPNmeK5yIoSQrT+XHr8ulHeUrEXE6In41fDwvF2ZrlbnefOQBgL53Ysf4/9/hNC0Uep0VAHDkRt7xebt8rwcA+Ei86/gPAHy8jP8A0H+M/wDQf4z/ANB/jP8A0H+M/wDQV358+3a2NTfb97+ee7C2ulh7cHmuXF8sVFdnC7O1leXCfK02n9+zp7rf61VqteWpq7H6sNgo1xvF+tr63WptdalxN7+v993yUFdaBQDs5fTZp39NImLjxvF8i21rORir4dOW9joBoGcGduyB/jHY6wSAnvF/fGC/W3l2/IrQk8PPBeiOi18x/w/9yvw/9C/z/tC/zP9D/2o2k7dZ83/gbR4MAHyYzPEDfv4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb28s35K00F4LfCzStFCIOBkREzGU3F+olCcj4lRE/GV4aDgrT/U6aQDgPaX/SNrrf10cvzC2s/ZY8r/hfB8Rv/jNnV8/nGk0Vqay8/8e2TrfeNI+X+pF/gDAfrbG6a1xfMvLF49mt7Zu5vP8+63FRbO4m+2tVTMYg/l+JIYiYvQ/Sbvckn1eGTiE+BuPI+LLu7U/yedGJtorn+6Mn8U+2dX46efip3lda5/9XXzxEHKBfvM0639u7nb9pXEu3+9+/Y/kPdT72+r/Nt/o/9JX/d9Ah/7v3EFjXP3TjzrWPY746uBu8ZNX8ZMO8S8cMP7fvvaN853qmr+NuBi7x98eq9ioLhfra+uXF6oz8+X58lKpND01PXn9yrVSMZ+jLm7NVL/pnzcundqr/aMd4o/s0/5vH7D9v/v/vZ99c4/43/3W7u//mT3iZ2Pidw4Yf2a08+reWfy5Du3f7/2/dMD4z/6+PnfAhwIAXVBfW1+cqVTKKw66dpB9dvsA0nDQs4PsX8BhvM6XjjDVXvdMwFF7fdH3OhMAAAAAAAAAAAAAAKCTbvzCU6/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKfrswAAAP//qkjTjA==") unlink(&(0x7f0000000080)='./file1\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0xe, 0xe, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x20132, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x100001, 0x102, 0x3, 0x0, 0x6, 0x1, 0x40, 0x0, 0x44, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) 14.768086682s ago: executing program 32 (id=63): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) io_setup(0x2004, &(0x7f0000000680)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) gettid() timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mblk_io_submit}]}, 0x1, 0x4bd, &(0x7f0000000540)="$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") unlink(&(0x7f0000000080)='./file1\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0xe, 0xe, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x20132, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x100001, 0x102, 0x3, 0x0, 0x6, 0x1, 0x40, 0x0, 0x44, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) 14.540017796s ago: executing program 0 (id=68): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf2508"], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 14.539861806s ago: executing program 33 (id=68): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf2508"], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 5.307868244s ago: executing program 3 (id=155): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$isdn(0x22, 0x3, 0x3) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) 5.271962154s ago: executing program 3 (id=158): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1e00000000000000050000000700000002010000", @ANYRES32=0x1, @ANYBLOB="000000000000000000743c2a1a253abcf6c23458", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x200400) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f0000000700)="121cffbb4f1fbf7e5b85fd73c664dbbe35068c4621eea2e1c740ddf0887afb3c32b3fefb9a0d1e6d175ecca65c8435a2c7bfa0dfe4244c34c7ac15da6f9a0e7fcdc1c6afb9af011e543e0933c9af270e5479a3fa1684f12ad616088da499347780ac4d54b892ec42190bbe8bef32acafbe8b1d7113909885ba9468d87eff632ecfca35dd628588cfb0ed243f659d242d56868969e2b73af0daafb401c63b58e0ad805eb8a037bd819ba3c015c28518f6a582935035fa7beca149441a33e6e6a51d329f64d079abf9713f3df36afc0af39933080b6bdd33a048347f48e28b675a25fa3ccc233afdb2a3408d1675", &(0x7f0000000980)=""/133, &(0x7f0000000540)="a86014d34774a928619ea48a50d45f34daff3ecf95baaaafa17cf27127fb1735b9c160", &(0x7f0000000b00)="6778bbc5ec063260729c1525efba09cb0df9d6ecb5168fdcfbb8c740c9fd864bee2ad0332b0fe6c000c1ce1c269b61034503de6310a584ab038e2c94b29130c6902cafb4e596daf71f7f214705d73215e152af0121954899c77b4635af8fce03045eee1b16f3eb367217447f", 0xfffffff9, r1}, 0x38) write$qrtrtun(r2, &(0x7f0000000340)="84afecd4d6cd47bba629bc4345b036cafded9e3035ec9781841dd3e75ac980b878ff55c44a2eb7f8fbae031c5f9c7d57ae8153dee5e0bff26d4a789c87ae1bd4e4bb0543dad4196a2fd4ebfb92c3bdc27164b94128c2da9c79bb2d63ef06cebf5ca4f64a1bdade3320bdd5462b412d0ed65de0add8b3812fbabd5152133729f62fd8109c3f6a", 0x86) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x4) vmsplice(r6, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000000440)="15", 0x1}, {&(0x7f0000003040)="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", 0xfc1}, {&(0x7f0000000480)='7', 0x1}], 0x7, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000002c0), r7}}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r8, 0x0, 0x100000000}, 0x18) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000c40)="b0", 0x1}], 0x1}, 0x20000805) close(r3) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYRES16=r9, @ANYRES64=r1, @ANYRES8=r0, @ANYBLOB="a633d2b0a3e9b7742b0fb05b121ba1e479b5703b1d95b4bb7443e57cb167edf0e705539fe641f032769fb3d74f7b4d122cbd33f62a13ff6d1c23ddaf711113e61d56353e762be85b41d377cddf8c258c5d186a1607064281557a802de0db53c8c0b20969c0cd8b7af4b535e979d8a0de", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.848093809s ago: executing program 5 (id=210): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcd8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 2.835687719s ago: executing program 5 (id=212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x2, 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x8, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) clock_adjtime(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$unix(0x1, 0x1, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000100), 0x80000001, 0x80000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'veth1_vlan\x00'}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(0xffffffffffffffff, &(0x7f00000008c0), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040045}, 0x40) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000140)="f321ae9b9cbdfd3f62340a1578be2de89d3ce7610d2a147c2447948fb54967bcd68702039dc4ca4e", 0x28) r8 = syz_open_dev$vcsu(&(0x7f0000000100), 0x80000001, 0x80000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'veth1_vlan\x00'}) 2.75276055s ago: executing program 5 (id=215): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xa0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x7, 0x3}, &(0x7f00000009c0)=0x10) sendmmsg$inet_sctp(r1, &(0x7f0000000a40)=[{&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)="f12a24e10f4dcefcd3a1c3d7ec9e979e9e34adb1e092ef389988144235bc1ca334c3ca26f774e4a83fc74e44a4c46a0a1b87f16c9d60967076430702a938672b5bd91a84ced53f8afe8a481d062fca62829aa0093ffa3b093da795e9294173c291ac47543c8fb38e45072f1cf0b7bb22ca2386b8b51f9895f5ac486c9851e16f2cd4114a0852e5462e3a8d86dd00c7f0adaefa4a8a8ce8e244f07466ae94d69d455c01bfb9e00f84f6bd473dc1eb469d6031be14fc41a5e8edf17320400ac8eff49aa5905e44d73412", 0xc9}, {&(0x7f0000000240)="14bae466b69d60ce09b87bf202074c9cdd82629b3cff91d0acba8393a16578c96fdaae5fef2aa91cefd71d69da8a384ac6c1daf71dd5d0462df07d8e0a5d1a245c79853cf8bf9a9aaf2ca3cbae696ae4003f6f87ebfdca392a911b8beae75a01ec190f2efcd9ff168f2344aae88b47bc393cd5a834c36898d640030b2972a202534bb6009a015bc97556f07a36e7b4ba127b", 0x92}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000300)="12387f6cbd09b5f10ed54cbccb7fac6f92ed5516966294e39f1a37ba45595523e734b2332941156c1acd477a27fa7f86ba1edae69af8291a04a414cabf259ae11299b6bafc0f80a0d34cd65d02dfc6ad273894be4fa13caec6b6b38d72c134e1b82acc1a39e47bb43d58c4341f538563b2896f4d1819b88ce282a60be860a11756d7149ee50f6c8f518c5b6320932c55a3b72c9196a55f124aba69654bdcf825230451dcb2be54fdc3bf0f270ce541a260a462824166", 0xb6}, {&(0x7f0000000180)="1002efc22f7dd9d39dd53b6982ae5ec1ec4aee89c82624d3f0616bd458f54b0cf86e9b8e24e700a7a3d4cf3effef8b80ae1828207636bfe92d7b6c3c0827211dac7d437cbca6a0b38e8aa2462249e31663fe5a4e1e377a", 0x57}, {&(0x7f00000003c0)="f3fa5cf7b19587decb43006e20528de9e7818c42a2f8d9246683715f495bcb4b8751121b910b5ba0a25e186d16234154060b1841f437df5d4601bd1729ebc9d5406d8abdb8c8e15b0115b5", 0x4b}], 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa000000001800000000000000840000000000000009000000030081002000000000000000840000000800000000000000000000000000000000000001180000000000000084000000070000007f00a05b0000000018000000000000008400000007000000e000000200000000", @ANYRES64=r0, @ANYRESDEC=r1], 0x80, 0x4000041}, {&(0x7f00000004c0)=@in6={0xa, 0x4e23, 0xfff, @mcast1, 0x1ff}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000580)="994c1682d5bb9d1b5f4692845ad3765fd0803fb3c7cb1a65cba4b76c147f87b28db79048c647bac6691858f1ebb34cfbc99f4e6ab54521a61de1868865df4e24649b497eb31f375b1d7ed192bd21a44c1409eaaa42", 0x55}, {&(0x7f0000000600)="d64c4040b701dc98b53707982d7a8627043fc70ef4ffc1975fab68e6de08f349f49ed01df2a16e86f393faf97529500e4726fca512e744f5c26bd345b75c3a519fc7821449113119adffb0b99882e2775b193a00a3c0f5d6a960078a6ca03880a1fe6e84c2c9a9b8a52f7329616b369249237bcb8d149d2780c1252d2cadc9d82b384bb4c6b61dbb3b4d5a6ab33cf4d724650d8bf32d9cfb6a48a8f884a6d09da5bbb042235b28756716587e64cdd005a2d6dee41f381521345ffa3dbb697aedbc9bf4593a0d61e8200462f8dd94e5534a4658f5c5d8b3a606131b42d13694d2e021a43b7392be345b6ab6a441", 0xed}, {&(0x7f0000000700)="b58970d794c0", 0x6}, {&(0x7f0000000740)="91f1ec35e0b1ce017c911b4d2686ef290c2e0eae9488e6ab2a4a0300c629e97df6da673c90fdc88ebc3f1f1ff7ee83c6ddb446cfc1445ccba3fd920a3c90f786c9b8cde9d79425663c71099e8082d319aa6c7be98b2c78508f5303c2613a5290e4be9ae614ef1e80823a57ad210471925000bb19f7437fa2eae285e8c024f8d7ddaa3a03ad5f31ef41d410536ce0e127efe277ba16954a646eda438deb1ca02c9b97b535ffc445ea40f619e694d0fb13d75fcc39d9acdb", 0xb7}, {&(0x7f0000000800)="e72180a129327f3f4448390d3e8f5f8fa6c67a392bd6cf9e53f0fd331d54d14873bdafef5a1fa383ecb98b7735f4ba6c3e1699487dc84479e62cd5e326681ea0eb9929d43aabc735cdba4a5c3a44865cd28f3416dbbacd14c6a8d2fb10149400ebeec385567069bff6d9c9f9548a63975e828879b7a10d3fa0aef65766e0e7ad2ad26bf2b72314473a81a55a613e522c63715861f59297976ced2032b2a337ce2e2b42cd96dc0354ae271d7802c591", 0xaf}, {&(0x7f00000008c0)="9ffaef8a", 0x4}], 0x6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="3000000000000000840000000100000001000a00010000009a72e760750f00000a0000000100007aa88700008dfc7389e21960c346c19e3c5003469a9b8b4ffe1023ab7b0aa5554b3ab50acf3022bfb8ac09ee3bf950aca65bd2619d8abe1d439ae3585c37362f7fcabd4f10d643c93788852221bc91a04e22d9b9890365ac10ebaf294123b3c618878384cc4c9eee342e35531c55b132f6a20b110243b004242d0f95d0d12d8977e664ff", @ANYRES32=r3], 0x30, 0x20000012}], 0x2, 0x2400c850) 2.552521194s ago: executing program 6 (id=219): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 2.370807067s ago: executing program 5 (id=223): epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x5, 0xfbffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x201}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x200c0d32) keyctl$read(0xb, r2, &(0x7f00000010c0)=""/4098, 0x1002) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r3 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x400002d5}, &(0x7f0000000180), &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf25030000000c000f000700000000000000060001000400000008000c000000090206001d000001000214100000000000000000000000100000000000bb06001d0081000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000a, 0x1010, r5, 0xffffc000) syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd, 0xbe9, 0x0, 0x803a}) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/13, 0xd, 0x0, &(0x7f0000000080)={0x23, 0x7f, 0xa, 0x40}, 0x10) io_uring_enter(r3, 0x7330, 0x0, 0x0, 0x0, 0x0) 2.23593614s ago: executing program 3 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001000000022000000600000000000000", @ANYRES32=0x1, @ANYBLOB="ffca000000000000000000000000a2df94f4deff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7, 0x0, 0x9}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000380)=""/72, 0x48, 0x0, &(0x7f0000000180)=""/19, 0x13}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, @local}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100039042abd7000e6ffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008ffffffffffffffff00028006000e000010000008000200ac14142d4cc1026ec6f2a5d23e87455ed56f680f6f6cca5f36da9871d5dbe9267baf0b93d71a3ec8cfde2a06a3f7e7eec232468322e39abaa2703091c3b8f20202e0ba9e336066d25f0a677256a202223d00143ccb703be6b004e013bdb64ccf647dc6c0146556c3aacc720def01b4c701ffdfaca192c69fe4a7100deb44bc1abc6f01f68c725493c5f79f56fc3ad10b774c2e620b4edcc75e9d5ba2bed3d268b58ed830e902be506a408cfbdfc79ef2d82ca457"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) flock(0xffffffffffffffff, 0x2) 1.683125949s ago: executing program 5 (id=227): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 1.563886332s ago: executing program 5 (id=229): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x2, &(0x7f0000000400)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x10, r0, 0x0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f00000004c0)="43e234534ab8d73fa9e0c801d3a83ea2792849b2609884792e9b35efbfe59fedc0c1e0380c9d3052284ecbbf0c30687b85b6cb3d7b08b6ffe1d2699f0bc784c9ec95a7043a06547d2ea21b086ced03ddf2f2333f218722cea9f4d63e3849aee8e8d830cf58b869c90b166b918304e2a11d6783d2bab2f0e0f54aba1398e263733a43cf4e45ffb00216459701d4b2fa364042cb2f906ba58d91b0862373d5fa86f94ea2fba00e14e3407d722ccf4dfea063549998ef84e374b7057e84833f8ab45463dcf988b7be68ff860dd49664dad5949638acca1ff3be04542150cb7899efd27c9307c518a26b7c2b798ca43d9825", 0xf0, 0x7, 0x0, 0x3, r3}]) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000940)={[], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@uid_eq}, {@euid_gt}, {@euid_gt}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) ioctl$SG_GET_COMMAND_Q(r7, 0x2270, &(0x7f0000000300)) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x1d) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01192abd7000fcdbdf051800fd001800018b140002006970fd14e4877f42e416000000160000"], 0x2c}}, 0x40000) ftruncate(r8, 0x2007ffc) socket(0x10, 0x3, 0x0) r11 = memfd_secret(0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r12) sendmsg$NLBL_MGMT_C_ADDDEF(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r13, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) ftruncate(r11, 0x51a9497) finit_module(r11, 0x0, 0x3) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r14}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.549813212s ago: executing program 6 (id=230): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000001000)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x61, 0x7fff0000}]}) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.360699645s ago: executing program 3 (id=232): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="e4ffffffffff"], 0xe) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, &(0x7f0000000280)=0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffec, 0x400, 0x103fe, 0x379}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10) sendmsg$rds(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x2, 0xffff, @rand_addr=0x64010102}, 0x10, 0x0}, 0x4000000) close_range(r4, 0xffffffffffffffff, 0x0) 1.232079708s ago: executing program 3 (id=233): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) lseek(0xffffffffffffffff, 0xfffffffffffffff6, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b33000000000000000005"], 0x28}}, 0x0) 1.141215169s ago: executing program 6 (id=235): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x101018, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x50) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8040, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r2 = syz_open_pts(r1, 0x141601) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x8, &(0x7f0000000340)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], &(0x7f0000000380)='GPL\x00', 0xb, 0x1000, &(0x7f0000000f80)=""/4096, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x8, 0x6, 0x2}, 0x10, 0x2e9bd, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3], 0x0, 0x10, 0x12a0}, 0x94) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x0, 0x200007, 0x19, "680c1acfa4a5000000070000faffffff000800"}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x19}, 0xfffffffffffffef4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 1.13147293s ago: executing program 3 (id=236): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1e00000000000000050000000700000002010000", @ANYRES32=0x1, @ANYBLOB="000000000000000000743c2a1a253abcf6c23458", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x200400) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f0000000700)="121cffbb4f1fbf7e5b85fd73c664dbbe35068c4621eea2e1c740ddf0887afb3c32b3fefb9a0d1e6d175ecca65c8435a2c7bfa0dfe4244c34c7ac15da6f9a0e7fcdc1c6afb9af011e543e0933c9af270e5479a3fa1684f12ad616088da499347780ac4d54b892ec42190bbe8bef32acafbe8b1d7113909885ba9468d87eff632ecfca35dd628588cfb0ed243f659d242d56868969e2b73af0daafb401c63b58e0ad805eb8a037bd819ba3c015c28518f6a582935035fa7beca149441a33e6e6a51d329f64d079abf9713f3df36afc0af39933080b6bdd33a048347f48e28b675a25fa3ccc233afdb2a3408d1675", &(0x7f0000000980)=""/133, &(0x7f0000000540)="a86014d34774a928619ea48a50d45f34daff3ecf95baaaafa17cf27127fb1735b9c160", &(0x7f0000000b00)="6778bbc5ec063260729c1525efba09cb0df9d6ecb5168fdcfbb8c740c9fd864bee2ad0332b0fe6c000c1ce1c269b61034503de6310a584ab038e2c94b29130c6902cafb4e596daf71f7f214705d73215e152af0121954899c77b4635af8fce03045eee1b16f3eb367217447f", 0xfffffff9, r1}, 0x38) write$qrtrtun(r2, &(0x7f0000000340)="84afecd4d6cd47bba629bc4345b036cafded9e3035ec9781841dd3e75ac980b878ff55c44a2eb7f8fbae031c5f9c7d57ae8153dee5e0bff26d4a789c87ae1bd4e4bb0543dad4196a2fd4ebfb92c3bdc27164b94128c2da9c79bb2d63ef06cebf5ca4f64a1bdade3320bdd5462b412d0ed65de0add8b3812fbabd5152133729f62fd8109c3f6a", 0x86) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x4) vmsplice(r6, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000000440)="15", 0x1}, {&(0x7f0000003040)="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", 0xfc1}, {&(0x7f0000000480)='7', 0x1}], 0x7, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000002c0), r7}}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r8, 0x0, 0x100000000}, 0x18) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000c40)="b0", 0x1}], 0x1}, 0x20000805) close(r3) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYRES16=r9, @ANYRES64=r1, @ANYRES8=r0, @ANYBLOB="a633d2b0a3e9b7742b0fb05b121ba1e479b5703b1d95b4bb7443e57cb167edf0e705539fe641f032769fb3d74f7b4d122cbd33f62a13ff6d1c23ddaf711113e61d56353e762be85b41d377cddf8c258c5d186a1607064281557a802de0db53c8c0b20969c0cd8b7af4b535e979d8a0de", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.07823774s ago: executing program 4 (id=238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0xf00, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 1.044541321s ago: executing program 4 (id=239): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 1.044375011s ago: executing program 2 (id=240): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 1.044154111s ago: executing program 4 (id=241): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2eef000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 1.022625782s ago: executing program 2 (id=242): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x20}, 0x18) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) (rerun: 32) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async, rerun: 32) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000003c0)=""/82, &(0x7f0000000340)=0x52) (rerun: 32) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40881, 0x64088}, [@IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_MASTER={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000180)="010400001bfa64", 0x5}], 0x2) (async) socket(0x1, 0x803, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) syz_usbip_server_init(0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) creat(&(0x7f00000000c0)='./file0\x00', 0xc22cddfde31e1cc9) (async, rerun: 32) chmod(&(0x7f0000000140)='./file0\x00', 0x4) 932.490183ms ago: executing program 2 (id=243): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) close_range(r1, r2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x24004059) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0xde8d}, 0x10008, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0x80b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x40}, 0x18) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x4, 0x0) 932.353743ms ago: executing program 4 (id=244): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 887.953154ms ago: executing program 4 (id=245): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8=r3, @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0f000000000000000000000070afecf452c858bf", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r1], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a70000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r10, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r10, &(0x7f00000187c0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000700)='A', 0x1}], 0x1}}], 0x1, 0x4008440) setsockopt$inet_tcp_int(r10, 0x6, 0x3, &(0x7f0000000840), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) 851.073174ms ago: executing program 2 (id=246): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000001000)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x61, 0x7fff0000}]}) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 813.301785ms ago: executing program 4 (id=247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xcd8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 651.134678ms ago: executing program 2 (id=248): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="e4ffffffffff"], 0xe) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, &(0x7f0000000780)}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r4, 0x400}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f00000000c0)=0x1, 0x4) io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffec, 0x400, 0x103fe, 0x379}) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 618.422499ms ago: executing program 2 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4040014) 205.464146ms ago: executing program 6 (id=250): pipe2$watch_queue(&(0x7f0000000240), 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) write$selinux_validatetrans(r5, 0x0, 0x79) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r6) 154.256477ms ago: executing program 6 (id=251): unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) socket(0x10, 0x803, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x33) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000800850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r6}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1cc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20060400) r8 = inotify_init1(0x800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x26004808) inotify_add_watch(r8, &(0x7f0000000140)='./cgroup\x00', 0x24) connect$inet6(r5, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 0s ago: executing program 6 (id=252): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0xe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setns(r2, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 26.693748][ T29] audit: type=1400 audit(1759395832.233:62): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.716738][ T29] audit: type=1400 audit(1759395832.253:63): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.717793][ T3288] cgroup: Unknown subsys name 'net' [ 26.744508][ T29] audit: type=1400 audit(1759395832.283:64): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.878096][ T3288] cgroup: Unknown subsys name 'cpuset' [ 26.884318][ T3288] cgroup: Unknown subsys name 'rlimit' [ 27.025827][ T29] audit: type=1400 audit(1759395832.563:65): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.049140][ T29] audit: type=1400 audit(1759395832.563:66): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.069609][ T29] audit: type=1400 audit(1759395832.563:67): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.090006][ T29] audit: type=1400 audit(1759395832.563:68): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.110411][ T29] audit: type=1400 audit(1759395832.563:69): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.119363][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.135226][ T29] audit: type=1400 audit(1759395832.563:70): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.167442][ T29] audit: type=1400 audit(1759395832.713:71): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.213440][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.419665][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 28.457111][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 28.496363][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.521030][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 28.592053][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.599143][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.606272][ T3305] bridge_slave_0: entered allmulticast mode [ 28.612857][ T3305] bridge_slave_0: entered promiscuous mode [ 28.619277][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 28.628744][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.635792][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.642902][ T3299] bridge_slave_0: entered allmulticast mode [ 28.649404][ T3299] bridge_slave_0: entered promiscuous mode [ 28.655998][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.663167][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.670351][ T3299] bridge_slave_1: entered allmulticast mode [ 28.676650][ T3299] bridge_slave_1: entered promiscuous mode [ 28.695016][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.702154][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.709614][ T3305] bridge_slave_1: entered allmulticast mode [ 28.716026][ T3305] bridge_slave_1: entered promiscuous mode [ 28.737465][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.744591][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.751885][ T3301] bridge_slave_0: entered allmulticast mode [ 28.758340][ T3301] bridge_slave_0: entered promiscuous mode [ 28.787440][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.794609][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.802081][ T3301] bridge_slave_1: entered allmulticast mode [ 28.808582][ T3301] bridge_slave_1: entered promiscuous mode [ 28.818422][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.828515][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.838584][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.865519][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.881697][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.888940][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.896127][ T3309] bridge_slave_0: entered allmulticast mode [ 28.902796][ T3309] bridge_slave_0: entered promiscuous mode [ 28.910449][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.920839][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.950009][ T3305] team0: Port device team_slave_0 added [ 28.956441][ T3305] team0: Port device team_slave_1 added [ 28.967293][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.974452][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.981684][ T3309] bridge_slave_1: entered allmulticast mode [ 28.988225][ T3309] bridge_slave_1: entered promiscuous mode [ 29.000185][ T3299] team0: Port device team_slave_0 added [ 29.026681][ T3299] team0: Port device team_slave_1 added [ 29.032588][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.039704][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.047477][ T3298] bridge_slave_0: entered allmulticast mode [ 29.054023][ T3298] bridge_slave_0: entered promiscuous mode [ 29.060720][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.067744][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.093748][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.110005][ T3301] team0: Port device team_slave_0 added [ 29.124911][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.132051][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.140207][ T3298] bridge_slave_1: entered allmulticast mode [ 29.146703][ T3298] bridge_slave_1: entered promiscuous mode [ 29.153109][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.160099][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.186019][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.198096][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.207794][ T3301] team0: Port device team_slave_1 added [ 29.214425][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.223855][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.230812][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.256715][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.289694][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.296659][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.322572][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.339173][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.360128][ T3309] team0: Port device team_slave_0 added [ 29.367064][ T3309] team0: Port device team_slave_1 added [ 29.378100][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.392090][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.399052][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.425012][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.451443][ T3305] hsr_slave_0: entered promiscuous mode [ 29.457782][ T3305] hsr_slave_1: entered promiscuous mode [ 29.471489][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.478640][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.504595][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.530807][ T3298] team0: Port device team_slave_0 added [ 29.543299][ T3299] hsr_slave_0: entered promiscuous mode [ 29.549467][ T3299] hsr_slave_1: entered promiscuous mode [ 29.555329][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 29.561118][ T3299] Cannot create hsr debugfs directory [ 29.566847][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.573849][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.599781][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.611188][ T3298] team0: Port device team_slave_1 added [ 29.633458][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.640609][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.666587][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.692277][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.699276][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.725239][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.747153][ T3301] hsr_slave_0: entered promiscuous mode [ 29.753192][ T3301] hsr_slave_1: entered promiscuous mode [ 29.759016][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 29.764739][ T3301] Cannot create hsr debugfs directory [ 29.770571][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.777561][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.803694][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.865086][ T3298] hsr_slave_0: entered promiscuous mode [ 29.871210][ T3298] hsr_slave_1: entered promiscuous mode [ 29.877076][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 29.882889][ T3298] Cannot create hsr debugfs directory [ 29.890743][ T3309] hsr_slave_0: entered promiscuous mode [ 29.896943][ T3309] hsr_slave_1: entered promiscuous mode [ 29.902963][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 29.908725][ T3309] Cannot create hsr debugfs directory [ 30.091099][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.100012][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.108669][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.119800][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.140060][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.149686][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.162156][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.178851][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.196022][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.205778][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.215554][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.224980][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.273954][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.283098][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.293016][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.305555][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.341068][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.357151][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.367191][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.376649][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.385794][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.426916][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.437095][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.444177][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.453712][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.466943][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.480245][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.491213][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.498307][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.511012][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.522613][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.531187][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.538266][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.557188][ T1803] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.564284][ T1803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.573230][ T1803] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.580284][ T1803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.600898][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.607977][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.622978][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.645667][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.652757][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.661455][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.668624][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.692176][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.725436][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.735922][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.766988][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.802808][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.813490][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.861583][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.872146][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.929115][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.940084][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.968117][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.975271][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.984272][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.991434][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.007790][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.016745][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.085399][ T3298] veth0_vlan: entered promiscuous mode [ 31.109138][ T3299] veth0_vlan: entered promiscuous mode [ 31.116688][ T3299] veth1_vlan: entered promiscuous mode [ 31.130352][ T3298] veth1_vlan: entered promiscuous mode [ 31.148794][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.174478][ T3305] veth0_vlan: entered promiscuous mode [ 31.192583][ T3299] veth0_macvtap: entered promiscuous mode [ 31.200854][ T3298] veth0_macvtap: entered promiscuous mode [ 31.209203][ T3305] veth1_vlan: entered promiscuous mode [ 31.216599][ T3299] veth1_macvtap: entered promiscuous mode [ 31.224090][ T3298] veth1_macvtap: entered promiscuous mode [ 31.245901][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.260107][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.275724][ T3309] veth0_vlan: entered promiscuous mode [ 31.284479][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.293076][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.308125][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.320277][ T3309] veth1_vlan: entered promiscuous mode [ 31.334925][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.344434][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.359084][ T3301] veth0_vlan: entered promiscuous mode [ 31.364786][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.374516][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.384738][ T3301] veth1_vlan: entered promiscuous mode [ 31.394770][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.411319][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.428647][ T3305] veth0_macvtap: entered promiscuous mode [ 31.438933][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.452751][ T3305] veth1_macvtap: entered promiscuous mode [ 31.465555][ T3309] veth0_macvtap: entered promiscuous mode [ 31.474288][ T3301] veth0_macvtap: entered promiscuous mode [ 31.485213][ T3309] veth1_macvtap: entered promiscuous mode [ 31.492454][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.494072][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.520760][ T3301] veth1_macvtap: entered promiscuous mode [ 31.528863][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.543540][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.559618][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.590388][ T3470] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 31.598505][ T3472] loop1: detected capacity change from 0 to 1024 [ 31.604942][ T3470] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.611752][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.633834][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.641479][ T3472] ======================================================= [ 31.641479][ T3472] WARNING: The mand mount option has been deprecated and [ 31.641479][ T3472] and is ignored by this kernel. Remove the mand [ 31.641479][ T3472] option from the mount to silence this warning. [ 31.641479][ T3472] ======================================================= [ 31.642598][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.692968][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.722616][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 31.722633][ T29] audit: type=1400 audit(1759395837.243:114): avc: denied { create } for pid=3473 comm="syz.4.6" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 31.750442][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.779784][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.788902][ T29] audit: type=1400 audit(1759395837.313:115): avc: denied { write } for pid=3476 comm="syz.4.7" name="raw6" dev="proc" ino=4026532450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 31.790398][ T3472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 31.824534][ T3472] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.826435][ T29] audit: type=1400 audit(1759395837.373:116): avc: denied { mount } for pid=3471 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.879154][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.908293][ T29] audit: type=1400 audit(1759395837.443:117): avc: denied { mounton } for pid=3471 comm="syz.1.2" path="/0/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.913727][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.931122][ T29] audit: type=1400 audit(1759395837.443:118): avc: denied { mount } for pid=3471 comm="syz.1.2" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 31.983778][ T29] audit: type=1400 audit(1759395837.503:119): avc: denied { create } for pid=3483 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.003047][ T29] audit: type=1400 audit(1759395837.503:120): avc: denied { add_name } for pid=3471 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.023515][ T29] audit: type=1400 audit(1759395837.503:121): avc: denied { create } for pid=3471 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.043560][ T29] audit: type=1400 audit(1759395837.503:122): avc: denied { read write } for pid=3471 comm="syz.1.2" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.066196][ T29] audit: type=1400 audit(1759395837.503:123): avc: denied { open } for pid=3471 comm="syz.1.2" path="/0/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.092370][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.101429][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.101523][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.101695][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.101789][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.101864][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.102083][ T3488] loop4: detected capacity change from 0 to 512 [ 32.148728][ T3488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.149091][ T3488] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.251761][ T3501] loop2: detected capacity change from 0 to 1024 [ 32.254125][ T3501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.304974][ T3501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.330286][ T3505] loop0: detected capacity change from 0 to 1024 [ 32.337065][ T3493] loop3: detected capacity change from 0 to 512 [ 32.347089][ T3505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.369704][ T3298] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /0/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 32.401376][ T3298] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 32.426035][ T3298] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 32.426239][ T3505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.447111][ T3298] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 32.478322][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.489971][ T3298] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 32.499358][ T3493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.524388][ T3298] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 32.524570][ T3493] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.567811][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.569646][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.589641][ T3298] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 32.626936][ T3298] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 32.682809][ T3517] loop2: detected capacity change from 0 to 1024 [ 32.699345][ T3515] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.14' sets config #1 [ 32.708781][ T3517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.735566][ T3298] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 32.775005][ T3298] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /0/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 32.844564][ T2989] udevd[2989]: worker [3498] terminated by signal 33 (Unknown signal 33) [ 32.846442][ T3517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.925282][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.037566][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.086594][ T3550] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 33.093336][ T3554] loop2: detected capacity change from 0 to 1024 [ 33.105071][ T3554] EXT4-fs: inline encryption not supported [ 33.108300][ T3553] loop0: detected capacity change from 0 to 1024 [ 33.111029][ T3554] EXT4-fs: Ignoring removed i_version option [ 33.130582][ T3556] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 33.145806][ T3554] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.157841][ T3554] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.24: lblock 2 mapped to illegal pblock 2 (length 1) [ 33.159585][ T3553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.171930][ T3554] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.24: lblock 0 mapped to illegal pblock 48 (length 1) [ 33.213873][ T3554] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.24: Failed to acquire dquot type 0 [ 33.226778][ T3554] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 33.235497][ T3553] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.243991][ T3565] capability: warning: `syz.3.27' uses deprecated v2 capabilities in a way that may be insecure [ 33.257000][ T3554] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.24: mark_inode_dirty error [ 33.257166][ T3554] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 33.278561][ T3563] loop4: detected capacity change from 0 to 1024 [ 33.287482][ T3554] EXT4-fs (loop2): 1 orphan inode deleted [ 33.304572][ T3563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.312106][ T3554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.318971][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 33.343973][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 0 [ 33.364120][ T3563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.378610][ T3554] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.410043][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /6/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 33.450131][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 33.498710][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.510985][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.526564][ T3301] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 33.546973][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 33.570607][ T3301] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 33.594910][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 33.617826][ T3301] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 33.672877][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 33.728944][ T3301] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 33.760257][ T3579] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 33.771634][ T3301] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 33.819601][ T3581] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3581 comm=syz.3.36 [ 33.856468][ T3581] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=3581 comm=syz.3.36 [ 33.888860][ T3581] netlink: 2168 bytes leftover after parsing attributes in process `syz.3.36'. [ 33.948406][ T3581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 34.126447][ T3594] process 'syz.3.42' launched './file1' with NULL argv: empty string added [ 34.301704][ T3613] loop4: detected capacity change from 0 to 1024 [ 34.316729][ T3613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.337792][ T3614] loop2: detected capacity change from 0 to 512 [ 34.349886][ T3614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.367607][ T3613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.379711][ T3614] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.408255][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.434837][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.471960][ T3636] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.45' sets config #1 [ 34.508495][ T3643] loop2: detected capacity change from 0 to 1024 [ 34.515397][ T3643] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.529146][ T3643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.553437][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.656387][ T3706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.48'. [ 34.672445][ T3706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.48'. [ 34.709209][ T3706] loop4: detected capacity change from 0 to 2048 [ 34.749873][ T3706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 34.822754][ T3765] loop2: detected capacity change from 0 to 1024 [ 34.830846][ T3765] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 34.841881][ T3765] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 34.853585][ T3765] JBD2: no valid journal superblock found [ 34.859443][ T3765] EXT4-fs (loop2): Could not load journal inode [ 34.936376][ T3669] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.951658][ T3669] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 34.964113][ T3669] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.964113][ T3669] [ 34.973768][ T3669] EXT4-fs (loop4): Total free blocks count 0 [ 34.979765][ T3669] EXT4-fs (loop4): Free/Dirty block details [ 34.985839][ T3669] EXT4-fs (loop4): free_blocks=2415919104 [ 34.991572][ T3669] EXT4-fs (loop4): dirty_blocks=5424 [ 34.996866][ T3669] EXT4-fs (loop4): Block reservation details [ 35.002980][ T3669] EXT4-fs (loop4): i_reserved_data_blocks=339 [ 35.029627][ T3669] syz.4.48 (3669) used greatest stack depth: 10120 bytes left [ 35.042303][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 35.130887][ T3770] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 35.162987][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.172814][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.230433][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.276904][ T3381] hid-generic 0000:FFFFFFFD:0000.0001: unknown main item tag 0x0 [ 35.284744][ T3381] hid-generic 0000:FFFFFFFD:0000.0001: unknown main item tag 0x0 [ 35.292539][ T3381] hid-generic 0000:FFFFFFFD:0000.0001: unknown main item tag 0x0 [ 35.300342][ T3381] hid-generic 0000:FFFFFFFD:0000.0001: unknown main item tag 0x0 [ 35.308100][ T3381] hid-generic 0000:FFFFFFFD:0000.0001: unknown main item tag 0x0 [ 35.315960][ T3381] hid-generic 0000:FFFFFFFD:0000.0001: unknown main item tag 0x0 [ 35.323736][ T3381] hid-generic 0000:FFFFFFFD:0000.0001: unknown main item tag 0x0 [ 35.331524][ T3381] hid-generic 0000:FFFFFFFD:0000.0001: unknown main item tag 0x0 [ 35.339348][ T3381] hid-generic 0000:FFFFFFFD:0000.0001: unknown main item tag 0x0 [ 35.347083][ T3381] hid-generic 0000:FFFFFFFD:0000.0001: unknown main item tag 0x0 [ 35.362191][ T3773] loop4: detected capacity change from 0 to 256 [ 35.373601][ T3774] loop3: detected capacity change from 0 to 1024 [ 35.391338][ T3774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.402109][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.415189][ T3381] hid-generic 0000:FFFFFFFD:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 35.428383][ T3774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.485591][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.556126][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.586056][ T31] bridge_slave_1: left allmulticast mode [ 35.592160][ T31] bridge_slave_1: left promiscuous mode [ 35.597864][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.616965][ T31] bridge_slave_0: left allmulticast mode [ 35.622913][ T31] bridge_slave_0: left promiscuous mode [ 35.628860][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.830695][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.842023][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.854873][ T31] bond0 (unregistering): Released all slaves [ 35.920473][ T31] hsr_slave_0: left promiscuous mode [ 35.945117][ T31] hsr_slave_1: left promiscuous mode [ 35.958040][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.965683][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.985869][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.993838][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.005937][ T31] veth1_macvtap: left promiscuous mode [ 36.011547][ T31] veth0_macvtap: left promiscuous mode [ 36.017338][ T31] veth1_vlan: left promiscuous mode [ 36.024840][ T31] veth0_vlan: left promiscuous mode [ 36.039809][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.177452][ T31] team0 (unregistering): Port device team_slave_1 removed [ 36.188099][ T31] team0 (unregistering): Port device team_slave_0 removed [ 36.444603][ T3859] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 36.646286][ T3891] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3891 comm=syz.3.73 [ 36.669608][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.669881][ T3891] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=3891 comm=syz.3.73 [ 36.704286][ T3891] netlink: 2168 bytes leftover after parsing attributes in process `syz.3.73'. [ 36.716256][ T3819] chnl_net:caif_netlink_parms(): no params data found [ 36.736870][ T3891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73'. [ 36.819787][ T3798] chnl_net:caif_netlink_parms(): no params data found [ 36.849733][ T29] kauditd_printk_skb: 2475 callbacks suppressed [ 36.849752][ T29] audit: type=1400 audit(1759395842.393:2596): avc: denied { map } for pid=3904 comm="syz.3.74" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.854677][ T3819] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.856108][ T29] audit: type=1400 audit(1759395842.393:2597): avc: denied { read write } for pid=3904 comm="syz.3.74" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.880623][ T3819] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.920379][ T3819] bridge_slave_0: entered allmulticast mode [ 36.927046][ T3819] bridge_slave_0: entered promiscuous mode [ 36.933884][ T3819] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.941092][ T3819] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.948656][ T3819] bridge_slave_1: entered allmulticast mode [ 36.955181][ T3819] bridge_slave_1: entered promiscuous mode [ 36.973546][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.034337][ T3819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.060732][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.084401][ T29] audit: type=1326 audit(1759395842.623:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 37.107752][ T29] audit: type=1326 audit(1759395842.623:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 37.132769][ T29] audit: type=1326 audit(1759395842.653:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 37.156230][ T29] audit: type=1326 audit(1759395842.653:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 37.179567][ T29] audit: type=1326 audit(1759395842.653:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 37.203265][ T29] audit: type=1326 audit(1759395842.653:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 37.227002][ T29] audit: type=1326 audit(1759395842.653:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 37.250343][ T29] audit: type=1326 audit(1759395842.653:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 37.279841][ T3798] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.286932][ T3798] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.299659][ T3798] bridge_slave_0: entered allmulticast mode [ 37.308869][ T3798] bridge_slave_0: entered promiscuous mode [ 37.321157][ T3819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.339195][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.357587][ T3798] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.364747][ T3798] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.373326][ T3798] bridge_slave_1: entered allmulticast mode [ 37.379860][ T3798] bridge_slave_1: entered promiscuous mode [ 37.416791][ T3819] team0: Port device team_slave_0 added [ 37.425099][ T3798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.448490][ T3819] team0: Port device team_slave_1 added [ 37.470707][ T3798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.493300][ T3819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.500317][ T3819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.526320][ T3819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.559606][ T3798] team0: Port device team_slave_0 added [ 37.570257][ T3798] team0: Port device team_slave_1 added [ 37.576233][ T31] bridge_slave_1: left allmulticast mode [ 37.582016][ T31] bridge_slave_1: left promiscuous mode [ 37.587764][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.598079][ T31] bridge_slave_0: left allmulticast mode [ 37.603768][ T31] bridge_slave_0: left promiscuous mode [ 37.609624][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.713851][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.729173][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.746259][ T31] bond0 (unregistering): Released all slaves [ 37.779485][ T3819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.786494][ T3819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.812601][ T3819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.871266][ T3798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.878315][ T3798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.904226][ T3798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.920179][ T3798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.927204][ T3798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.953168][ T3798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.968145][ T31] hsr_slave_0: left promiscuous mode [ 37.973829][ T31] hsr_slave_1: left promiscuous mode [ 37.980825][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.988267][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.007661][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.015058][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.022720][ T3984] FAULT_INJECTION: forcing a failure. [ 38.022720][ T3984] name failslab, interval 1, probability 0, space 0, times 1 [ 38.035477][ T3984] CPU: 0 UID: 0 PID: 3984 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.035511][ T3984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 38.035527][ T3984] Call Trace: [ 38.035535][ T3984] [ 38.035542][ T3984] __dump_stack+0x1d/0x30 [ 38.035578][ T3984] dump_stack_lvl+0xe8/0x140 [ 38.035634][ T3984] dump_stack+0x15/0x1b [ 38.035649][ T3984] should_fail_ex+0x265/0x280 [ 38.035672][ T3984] should_failslab+0x8c/0xb0 [ 38.035693][ T3984] kmem_cache_alloc_noprof+0x50/0x310 [ 38.035721][ T3984] ? skb_clone+0x151/0x1f0 [ 38.035825][ T3984] skb_clone+0x151/0x1f0 [ 38.035928][ T3984] __netlink_deliver_tap+0x2c9/0x500 [ 38.035964][ T3984] netlink_unicast+0x66b/0x690 [ 38.036045][ T3984] netlink_sendmsg+0x58b/0x6b0 [ 38.036079][ T3984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.036111][ T3984] __sock_sendmsg+0x145/0x180 [ 38.036175][ T3984] ____sys_sendmsg+0x31e/0x4e0 [ 38.036202][ T3984] ___sys_sendmsg+0x17b/0x1d0 [ 38.036247][ T3984] __x64_sys_sendmsg+0xd4/0x160 [ 38.036371][ T3984] x64_sys_call+0x191e/0x3000 [ 38.036455][ T3984] do_syscall_64+0xd2/0x200 [ 38.036492][ T3984] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 38.036558][ T3984] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 38.036628][ T3984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.036680][ T3984] RIP: 0033:0x7fe2a1d3eec9 [ 38.036694][ T3984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.036711][ T3984] RSP: 002b:00007fe2a079f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.036800][ T3984] RAX: ffffffffffffffda RBX: 00007fe2a1f95fa0 RCX: 00007fe2a1d3eec9 [ 38.036816][ T3984] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 38.036829][ T3984] RBP: 00007fe2a079f090 R08: 0000000000000000 R09: 0000000000000000 [ 38.036840][ T3984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.036851][ T3984] R13: 00007fe2a1f96038 R14: 00007fe2a1f95fa0 R15: 00007fffe99167a8 [ 38.036933][ T3984] [ 38.244807][ T3986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3986 comm=syz.2.80 [ 38.257261][ T31] veth1_macvtap: left promiscuous mode [ 38.258391][ T3986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=3986 comm=syz.2.80 [ 38.262878][ T31] veth0_macvtap: left promiscuous mode [ 38.280653][ T31] veth1_vlan: left promiscuous mode [ 38.285868][ T31] veth0_vlan: left promiscuous mode [ 38.345132][ T31] team0 (unregistering): Port device team_slave_1 removed [ 38.355771][ T31] team0 (unregistering): Port device team_slave_0 removed [ 38.391761][ T3986] netlink: 2168 bytes leftover after parsing attributes in process `syz.2.80'. [ 38.401521][ T3987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.80'. [ 38.440435][ T3819] hsr_slave_0: entered promiscuous mode [ 38.453228][ T3819] hsr_slave_1: entered promiscuous mode [ 38.460383][ T3819] debugfs: 'hsr0' already exists in 'hsr' [ 38.466129][ T3819] Cannot create hsr debugfs directory [ 38.482322][ T3995] netlink: 'syz.4.85': attribute type 13 has an invalid length. [ 38.505233][ T3997] loop2: detected capacity change from 0 to 512 [ 38.511944][ T3997] EXT4-fs: Ignoring removed orlov option [ 38.517688][ T3997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.525614][ T3997] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 38.533573][ T3997] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0002] [ 38.541687][ T3997] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 38.545591][ T3999] loop4: detected capacity change from 0 to 512 [ 38.551205][ T3997] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 38.551781][ T3997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.583012][ T3997] EXT4-fs: Ignoring removed orlov option [ 38.585306][ T3999] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.588831][ T3997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.608609][ T3999] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.620836][ T3997] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 38.646872][ T3995] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.654290][ T3995] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.656464][ T3999] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 38.673832][ T3997] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.86: dx entry: limit 65535 != root limit 120 [ 38.677439][ T3999] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.687705][ T3997] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.86: Corrupt directory, running e2fsck is recommended [ 38.737206][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.746671][ T3999] EXT4-fs (loop4): 1 truncate cleaned up [ 38.760400][ T3999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.796057][ T3995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.833392][ T3995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.951853][ T3798] hsr_slave_0: entered promiscuous mode [ 38.958886][ T3798] hsr_slave_1: entered promiscuous mode [ 38.970894][ T3798] debugfs: 'hsr0' already exists in 'hsr' [ 38.976656][ T3798] Cannot create hsr debugfs directory [ 39.005056][ T4013] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 39.012460][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.013460][ T288] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.037902][ T288] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.050788][ T288] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.062108][ T288] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.125262][ T4022] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4022 comm=syz.2.92 [ 39.148715][ T4022] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=4022 comm=syz.2.92 [ 39.179863][ T4022] netlink: 2168 bytes leftover after parsing attributes in process `syz.2.92'. [ 39.231305][ T164] nci: nci_rx_work: unknown MT 0x4 [ 40.001570][ T3798] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.011299][ T3819] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 40.023189][ T3798] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.045028][ T3798] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.060688][ T3798] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.122675][ T4143] SELinux: failed to load policy [ 40.132765][ T4143] syz.4.98 uses obsolete (PF_INET,SOCK_PACKET) [ 40.161183][ T3819] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 40.188963][ T3819] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 40.207219][ T3819] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 40.392061][ T4169] FAULT_INJECTION: forcing a failure. [ 40.392061][ T4169] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.405341][ T4169] CPU: 1 UID: 0 PID: 4169 Comm: syz.4.101 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.405371][ T4169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 40.405387][ T4169] Call Trace: [ 40.405395][ T4169] [ 40.405405][ T4169] __dump_stack+0x1d/0x30 [ 40.405474][ T4169] dump_stack_lvl+0xe8/0x140 [ 40.405495][ T4169] dump_stack+0x15/0x1b [ 40.405535][ T4169] should_fail_ex+0x265/0x280 [ 40.405573][ T4169] should_fail+0xb/0x20 [ 40.405653][ T4169] should_fail_usercopy+0x1a/0x20 [ 40.405683][ T4169] strncpy_from_user+0x25/0x230 [ 40.405718][ T4169] ? __kmalloc_cache_noprof+0x189/0x320 [ 40.405749][ T4169] __se_sys_memfd_create+0x1ff/0x590 [ 40.405786][ T4169] __x64_sys_memfd_create+0x31/0x40 [ 40.405815][ T4169] x64_sys_call+0x2ac2/0x3000 [ 40.405865][ T4169] do_syscall_64+0xd2/0x200 [ 40.405902][ T4169] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.405936][ T4169] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.405970][ T4169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.405991][ T4169] RIP: 0033:0x7fe0adc3eec9 [ 40.406021][ T4169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.406042][ T4169] RSP: 002b:00007fe0ac6a6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 40.406065][ T4169] RAX: ffffffffffffffda RBX: 000000000000045c RCX: 00007fe0adc3eec9 [ 40.406081][ T4169] RDX: 00007fe0ac6a6ef0 RSI: 0000000000000000 RDI: 00007fe0adcc2960 [ 40.406096][ T4169] RBP: 0000200000002400 R08: 00007fe0ac6a6bb7 R09: 00007fe0ac6a6e40 [ 40.406142][ T4169] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 40.406153][ T4169] R13: 00007fe0ac6a6ef0 R14: 00007fe0ac6a6eb0 R15: 0000200000000680 [ 40.406172][ T4169] [ 40.671232][ T4177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4177 comm=syz.4.104 [ 40.705664][ T3798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.713709][ T4177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=4177 comm=syz.4.104 [ 40.751160][ T3819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.778405][ T3798] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.789771][ T4181] netlink: 2168 bytes leftover after parsing attributes in process `syz.4.104'. [ 40.804249][ T3819] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.813664][ T4183] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 40.821390][ T4183] netlink: 224 bytes leftover after parsing attributes in process `syz.2.105'. [ 40.830921][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.838095][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.862088][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.869256][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.912330][ T4194] Zero length message leads to an empty skb [ 40.931682][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.938872][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.951818][ T3798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.962310][ T3798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.980919][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.988069][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.044194][ T3819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.054666][ T3819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.085359][ T3398] hid_parser_main: 73 callbacks suppressed [ 41.085382][ T3398] hid-generic 0000:FFFFFFFD:0000.0002: unknown main item tag 0x0 [ 41.099083][ T3398] hid-generic 0000:FFFFFFFD:0000.0002: unknown main item tag 0x0 [ 41.106833][ T3398] hid-generic 0000:FFFFFFFD:0000.0002: unknown main item tag 0x0 [ 41.112389][ T3798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.114645][ T3398] hid-generic 0000:FFFFFFFD:0000.0002: unknown main item tag 0x0 [ 41.129177][ T3398] hid-generic 0000:FFFFFFFD:0000.0002: unknown main item tag 0x0 [ 41.136916][ T3398] hid-generic 0000:FFFFFFFD:0000.0002: unknown main item tag 0x0 [ 41.144706][ T3398] hid-generic 0000:FFFFFFFD:0000.0002: unknown main item tag 0x0 [ 41.152547][ T3398] hid-generic 0000:FFFFFFFD:0000.0002: unknown main item tag 0x0 [ 41.160335][ T3398] hid-generic 0000:FFFFFFFD:0000.0002: unknown main item tag 0x0 [ 41.160468][ T4212] loop2: detected capacity change from 0 to 256 [ 41.168082][ T3398] hid-generic 0000:FFFFFFFD:0000.0002: unknown main item tag 0x0 [ 41.170611][ T3398] hid-generic 0000:FFFFFFFD:0000.0002: hidraw0: HID v0.03 Device [syz1] on syz1 [ 41.201072][ T4220] loop4: detected capacity change from 0 to 1024 [ 41.222106][ T4220] EXT4-fs: inline encryption not supported [ 41.228049][ T4220] EXT4-fs: Ignoring removed i_version option [ 41.244699][ T3819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.252794][ T4220] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.274526][ T4220] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.109: lblock 2 mapped to illegal pblock 2 (length 1) [ 41.289428][ T4220] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.109: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.305047][ T4220] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.109: Failed to acquire dquot type 0 [ 41.318539][ T4220] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 41.329667][ T4220] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.109: mark_inode_dirty error [ 41.349215][ T4220] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 41.364168][ T4220] EXT4-fs (loop4): 1 orphan inode deleted [ 41.377643][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.377990][ T4220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.410336][ T4231] loop2: detected capacity change from 0 to 512 [ 41.416942][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 41.441960][ T3798] veth0_vlan: entered promiscuous mode [ 41.450937][ T3798] veth1_vlan: entered promiscuous mode [ 41.451643][ T4231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.466169][ T3798] veth0_macvtap: entered promiscuous mode [ 41.476778][ T3798] veth1_macvtap: entered promiscuous mode [ 41.488296][ T3798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.497693][ T4231] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.509475][ T3798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.518808][ T4220] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 41.539615][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.564869][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.582293][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.601156][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.619786][ T3819] veth0_vlan: entered promiscuous mode [ 41.639937][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.649699][ T3819] veth1_vlan: entered promiscuous mode [ 41.660921][ T4258] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4258 comm=syz.3.115 [ 41.673320][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.690594][ T4261] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4261 comm=syz.5.64 [ 41.693124][ T3819] veth0_macvtap: entered promiscuous mode [ 41.710895][ T4258] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=4258 comm=syz.3.115 [ 41.727161][ T4261] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=4261 comm=syz.5.64 [ 41.739554][ T4258] netlink: 2168 bytes leftover after parsing attributes in process `syz.3.115'. [ 41.749803][ T3819] veth1_macvtap: entered promiscuous mode [ 41.765887][ T4258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.115'. [ 41.776760][ T4261] netlink: 2168 bytes leftover after parsing attributes in process `syz.5.64'. [ 41.790253][ T3819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.815715][ T3819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.833290][ T4261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.64'. [ 41.869724][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 41.869743][ T29] audit: type=1400 audit(1759395847.403:2862): avc: denied { mount } for pid=4262 comm="syz.2.113" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 41.889579][ T4271] loop5: detected capacity change from 0 to 256 [ 41.898918][ T29] audit: type=1400 audit(1759395847.413:2863): avc: denied { search } for pid=4262 comm="syz.2.113" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 41.898948][ T29] audit: type=1400 audit(1759395847.413:2864): avc: denied { search } for pid=4262 comm="syz.2.113" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 41.905518][ T3364] hid-generic 0000:FFFFFFFD:0000.0003: hidraw0: HID v0.03 Device [syz1] on syz1 [ 41.927413][ T29] audit: type=1400 audit(1759395847.413:2865): avc: denied { read open } for pid=4262 comm="syz.2.113" path="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 41.959813][ T4264] loop4: detected capacity change from 0 to 8192 [ 41.994140][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.017265][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.031755][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.061859][ T36] hid-generic 0000:FFFFFFFD:0000.0004: hidraw0: HID v0.03 Device [syz1] on syz1 [ 42.063197][ T29] audit: type=1400 audit(1759395847.593:2866): avc: denied { create } for pid=4275 comm="syz.6.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 42.074506][ T4279] loop3: detected capacity change from 0 to 256 [ 42.095131][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.169315][ T29] audit: type=1326 audit(1759395847.713:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 42.243670][ T4299] loop2: detected capacity change from 0 to 512 [ 42.251526][ T29] audit: type=1326 audit(1759395847.713:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 42.275074][ T29] audit: type=1326 audit(1759395847.713:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 42.298893][ T29] audit: type=1326 audit(1759395847.713:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 42.300063][ T4299] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.322655][ T29] audit: type=1326 audit(1759395847.713:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a1d3eec9 code=0x7ffc0000 [ 42.375902][ T4299] EXT4-fs (loop2): 1 truncate cleaned up [ 42.382405][ T4299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.447551][ T4290] loop3: detected capacity change from 0 to 512 [ 42.510304][ T4290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.597740][ T4290] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.732341][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.848786][ T4335] loop3: detected capacity change from 0 to 512 [ 42.873622][ T4335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.997724][ T4335] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.147604][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.303853][ T4316] syz.2.125 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 43.318051][ T4316] CPU: 1 UID: 0 PID: 4316 Comm: syz.2.125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.318156][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 43.318171][ T4316] Call Trace: [ 43.318179][ T4316] [ 43.318187][ T4316] __dump_stack+0x1d/0x30 [ 43.318208][ T4316] dump_stack_lvl+0xe8/0x140 [ 43.318233][ T4316] dump_stack+0x15/0x1b [ 43.318255][ T4316] dump_header+0x81/0x220 [ 43.318332][ T4316] oom_kill_process+0x342/0x400 [ 43.318370][ T4316] out_of_memory+0x979/0xb80 [ 43.318458][ T4316] try_charge_memcg+0x5e6/0x9e0 [ 43.318506][ T4316] obj_cgroup_charge_pages+0xa6/0x150 [ 43.318560][ T4316] __memcg_kmem_charge_page+0x9f/0x170 [ 43.318596][ T4316] __alloc_frozen_pages_noprof+0x188/0x360 [ 43.318636][ T4316] alloc_pages_mpol+0xb3/0x250 [ 43.318665][ T4316] alloc_pages_noprof+0x90/0x130 [ 43.318747][ T4316] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 43.318799][ T4316] __kvmalloc_node_noprof+0x30f/0x4e0 [ 43.318827][ T4316] ? ip_set_alloc+0x1f/0x30 [ 43.318857][ T4316] ? ip_set_alloc+0x1f/0x30 [ 43.318931][ T4316] ip_set_alloc+0x1f/0x30 [ 43.318951][ T4316] hash_netiface_create+0x282/0x740 [ 43.319019][ T4316] ? __pfx_hash_netiface_create+0x10/0x10 [ 43.319050][ T4316] ip_set_create+0x3cc/0x960 [ 43.319141][ T4316] ? __nla_parse+0x40/0x60 [ 43.319175][ T4316] nfnetlink_rcv_msg+0x4c6/0x590 [ 43.319284][ T4316] netlink_rcv_skb+0x120/0x220 [ 43.319312][ T4316] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 43.319395][ T4316] nfnetlink_rcv+0x16b/0x1690 [ 43.319441][ T4316] ? nlmon_xmit+0x4f/0x60 [ 43.319489][ T4316] ? consume_skb+0x49/0x150 [ 43.319517][ T4316] ? nlmon_xmit+0x4f/0x60 [ 43.319571][ T4316] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 43.319705][ T4316] ? __dev_queue_xmit+0x1200/0x2000 [ 43.319728][ T4316] ? __dev_queue_xmit+0x182/0x2000 [ 43.319817][ T4316] ? ref_tracker_free+0x37d/0x3e0 [ 43.319846][ T4316] ? __netlink_deliver_tap+0x4dc/0x500 [ 43.319880][ T4316] netlink_unicast+0x5c0/0x690 [ 43.319918][ T4316] netlink_sendmsg+0x58b/0x6b0 [ 43.319974][ T4316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.320141][ T4316] __sock_sendmsg+0x145/0x180 [ 43.320180][ T4316] ____sys_sendmsg+0x31e/0x4e0 [ 43.320208][ T4316] ___sys_sendmsg+0x17b/0x1d0 [ 43.320249][ T4316] __x64_sys_sendmsg+0xd4/0x160 [ 43.320349][ T4316] x64_sys_call+0x191e/0x3000 [ 43.320378][ T4316] do_syscall_64+0xd2/0x200 [ 43.320414][ T4316] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.320479][ T4316] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 43.320584][ T4316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.320628][ T4316] RIP: 0033:0x7f14e7a0eec9 [ 43.320645][ T4316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.320663][ T4316] RSP: 002b:00007f14e6456038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.320680][ T4316] RAX: ffffffffffffffda RBX: 00007f14e7c66090 RCX: 00007f14e7a0eec9 [ 43.320753][ T4316] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000d [ 43.320769][ T4316] RBP: 00007f14e7a91f91 R08: 0000000000000000 R09: 0000000000000000 [ 43.320785][ T4316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.320800][ T4316] R13: 00007f14e7c66128 R14: 00007f14e7c66090 R15: 00007ffeec7ffa58 [ 43.320822][ T4316] [ 43.320830][ T4316] memory: usage 307200kB, limit 307200kB, failcnt 269 [ 43.653150][ T4316] memory+swap: usage 307544kB, limit 9007199254740988kB, failcnt 0 [ 43.661117][ T4316] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 43.668522][ T4316] Memory cgroup stats for /syz2: [ 43.682351][ T4316] cache 24576 [ 43.690726][ T4316] rss 65536 [ 43.693846][ T4316] shmem 8192 [ 43.697121][ T4316] mapped_file 212992 [ 43.701083][ T4316] dirty 4096 [ 43.704343][ T4316] writeback 0 [ 43.707690][ T4316] workingset_refault_anon 74 [ 43.712325][ T4316] workingset_refault_file 33 [ 43.716959][ T4316] swap 397312 [ 43.720304][ T4316] swapcached 69632 [ 43.724260][ T4316] pgpgin 30182 [ 43.727742][ T4316] pgpgout 30159 [ 43.731476][ T4316] pgfault 12577 [ 43.735049][ T4316] pgmajfault 34 [ 43.738548][ T4316] inactive_anon 12288 [ 43.742618][ T4316] active_anon 65536 [ 43.746498][ T4316] inactive_file 12288 [ 43.750530][ T4316] active_file 0 [ 43.754055][ T4316] unevictable 0 [ 43.757615][ T4316] hierarchical_memory_limit 314572800 [ 43.763050][ T4316] hierarchical_memsw_limit 9223372036854771712 [ 43.769224][ T4316] total_cache 24576 [ 43.773149][ T4316] total_rss 65536 [ 43.776807][ T4316] total_shmem 8192 [ 43.780544][ T4316] total_mapped_file 212992 [ 43.784969][ T4316] total_dirty 4096 [ 43.788717][ T4316] total_writeback 0 [ 43.792559][ T4316] total_workingset_refault_anon 74 [ 43.797727][ T4316] total_workingset_refault_file 33 [ 43.803039][ T4316] total_swap 397312 [ 43.806872][ T4316] total_swapcached 69632 [ 43.811186][ T4316] total_pgpgin 30182 [ 43.815077][ T4316] total_pgpgout 30159 [ 43.819079][ T4316] total_pgfault 12577 [ 43.823053][ T4316] total_pgmajfault 34 [ 43.827035][ T4316] total_inactive_anon 12288 [ 43.831827][ T4316] total_active_anon 65536 [ 43.836167][ T4316] total_inactive_file 12288 [ 43.840897][ T4316] total_active_file 0 [ 43.844898][ T4316] total_unevictable 0 [ 43.848954][ T4316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.125,pid=4297,uid=0 [ 43.863501][ T4316] Memory cgroup out of memory: Killed process 4297 (syz.2.125) total-vm:96340kB, anon-rss:1136kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 43.919166][ T4297] syz.2.125 (4297) used greatest stack depth: 10040 bytes left [ 44.007560][ T4299] syz.2.125 (4299) used greatest stack depth: 9240 bytes left [ 44.053932][ T4316] syz.2.125 (4316) used greatest stack depth: 7320 bytes left [ 44.210789][ T4395] loop3: detected capacity change from 0 to 1024 [ 44.217813][ T4395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.231001][ T4395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.259691][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.738442][ T1034] hid-generic 0000:FFFFFFFD:0000.0005: hidraw0: HID v0.03 Device [syz1] on syz1 [ 44.751800][ T4454] loop4: detected capacity change from 0 to 256 [ 44.760064][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.790985][ T4459] SELinux: failed to load policy [ 44.842924][ T3466] hid-generic 0000:FFFFFFFD:0000.0006: hidraw0: HID v0.03 Device [syz1] on syz1 [ 44.849067][ T4470] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 44.863247][ T4468] loop4: detected capacity change from 0 to 256 [ 44.917763][ T4474] loop2: detected capacity change from 0 to 512 [ 44.929391][ T4479] bond1: entered promiscuous mode [ 44.934537][ T4479] bond1: entered allmulticast mode [ 44.941355][ T4479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.951532][ T4474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.964241][ T4474] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.018027][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.062462][ T4488] loop2: detected capacity change from 0 to 512 [ 45.084855][ T4488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.117203][ T4488] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.158285][ T4498] loop6: detected capacity change from 0 to 1024 [ 45.165371][ T4498] EXT4-fs: inline encryption not supported [ 45.171251][ T4498] EXT4-fs: Ignoring removed i_version option [ 45.190775][ T4498] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.204190][ T4502] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 45.244734][ T4498] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.150: lblock 2 mapped to illegal pblock 2 (length 1) [ 45.263676][ T4498] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.150: lblock 0 mapped to illegal pblock 48 (length 1) [ 45.283137][ T4498] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.150: Failed to acquire dquot type 0 [ 45.322633][ T4498] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 45.340423][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.361465][ T4498] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.150: mark_inode_dirty error [ 45.382228][ T4498] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 45.399078][ T4515] loop5: detected capacity change from 0 to 512 [ 45.411248][ T4498] EXT4-fs (loop6): 1 orphan inode deleted [ 45.418930][ T4498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.431219][ T31] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.446122][ T31] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 45.452806][ T4515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.470916][ T4515] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.484888][ T4498] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 45.505727][ T3819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.533409][ T3798] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.590305][ T4541] loop2: detected capacity change from 0 to 512 [ 45.597091][ T4541] EXT4-fs: Ignoring removed orlov option [ 45.602932][ T4541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.618615][ T4541] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 45.626607][ T4541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0002] [ 45.641078][ T4541] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 45.650626][ T4541] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 45.665404][ T4541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.671341][ T4553] loop6: detected capacity change from 0 to 512 [ 45.681465][ T4541] EXT4-fs: Ignoring removed orlov option [ 45.684165][ T4553] EXT4-fs: Ignoring removed orlov option [ 45.689443][ T4541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.695064][ T4553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.708452][ T4541] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 45.709446][ T4553] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 45.726040][ T4553] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0002] [ 45.734535][ T4553] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 45.744093][ T4553] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 45.754211][ T4555] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 45.754318][ T4553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.779107][ T4541] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.166: dx entry: limit 65535 != root limit 120 [ 45.791534][ T4541] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.166: Corrupt directory, running e2fsck is recommended [ 45.801678][ T4553] EXT4-fs: Ignoring removed orlov option [ 45.810095][ T4553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.817628][ T4553] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 45.831342][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.846430][ T4553] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.169: dx entry: limit 65535 != root limit 120 [ 45.858748][ T4553] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.169: Corrupt directory, running e2fsck is recommended [ 45.888995][ T3819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.910813][ T4561] SELinux: failed to load policy [ 46.021710][ T4571] loop6: detected capacity change from 0 to 512 [ 46.040651][ T4571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.053628][ T4571] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.099436][ T3819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.179784][ T4591] loop2: detected capacity change from 0 to 512 [ 46.186479][ T4591] EXT4-fs: Ignoring removed orlov option [ 46.192241][ T4591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.201318][ T4591] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 46.209391][ T4591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0002] [ 46.218786][ T4591] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 46.228511][ T4591] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 46.239151][ T4591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.279888][ T4591] EXT4-fs: Ignoring removed orlov option [ 46.285587][ T4591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.296291][ T4591] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 46.360707][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.385199][ T4602] SELinux: failed to load policy [ 46.698200][ T4632] FAULT_INJECTION: forcing a failure. [ 46.698200][ T4632] name failslab, interval 1, probability 0, space 0, times 0 [ 46.711029][ T4632] CPU: 0 UID: 0 PID: 4632 Comm: syz.2.196 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.711054][ T4632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 46.711065][ T4632] Call Trace: [ 46.711070][ T4632] [ 46.711076][ T4632] __dump_stack+0x1d/0x30 [ 46.711099][ T4632] dump_stack_lvl+0xe8/0x140 [ 46.711154][ T4632] dump_stack+0x15/0x1b [ 46.711168][ T4632] should_fail_ex+0x265/0x280 [ 46.711189][ T4632] should_failslab+0x8c/0xb0 [ 46.711209][ T4632] __kmalloc_noprof+0xa5/0x3e0 [ 46.711268][ T4632] ? iter_file_splice_write+0xf9/0xa60 [ 46.711297][ T4632] iter_file_splice_write+0xf9/0xa60 [ 46.711358][ T4632] ? copy_splice_read+0x623/0x660 [ 46.711460][ T4632] ? copy_splice_read+0x623/0x660 [ 46.711488][ T4632] ? __pfx_iter_file_splice_write+0x10/0x10 [ 46.711585][ T4632] direct_splice_actor+0x153/0x2a0 [ 46.711613][ T4632] ? splice_grow_spd+0x91/0xe0 [ 46.711650][ T4632] splice_direct_to_actor+0x30f/0x680 [ 46.711714][ T4632] ? __pfx_direct_splice_actor+0x10/0x10 [ 46.711747][ T4632] do_splice_direct+0xda/0x150 [ 46.711798][ T4632] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 46.711835][ T4632] do_sendfile+0x380/0x650 [ 46.711859][ T4632] __x64_sys_sendfile64+0x105/0x150 [ 46.711932][ T4632] x64_sys_call+0x2bb4/0x3000 [ 46.711952][ T4632] do_syscall_64+0xd2/0x200 [ 46.711981][ T4632] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.712067][ T4632] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.712126][ T4632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.712151][ T4632] RIP: 0033:0x7f14e7a0eec9 [ 46.712165][ T4632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.712193][ T4632] RSP: 002b:00007f14e6477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 46.712213][ T4632] RAX: ffffffffffffffda RBX: 00007f14e7c65fa0 RCX: 00007f14e7a0eec9 [ 46.712224][ T4632] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 46.712237][ T4632] RBP: 00007f14e6477090 R08: 0000000000000000 R09: 0000000000000000 [ 46.712250][ T4632] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000001 [ 46.712301][ T4632] R13: 00007f14e7c66038 R14: 00007f14e7c65fa0 R15: 00007ffeec7ffa58 [ 46.712322][ T4632] [ 47.079113][ T29] kauditd_printk_skb: 548 callbacks suppressed [ 47.079130][ T29] audit: type=1400 audit(1759395852.623:3417): avc: denied { connect } for pid=4637 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.106949][ T4639] loop4: detected capacity change from 0 to 128 [ 47.113699][ T4640] SELinux: failed to load policy [ 47.129398][ T4639] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.145853][ T4639] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.165769][ T29] audit: type=1400 audit(1759395852.703:3418): avc: denied { connect } for pid=4637 comm="syz.4.198" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.187217][ T29] audit: type=1400 audit(1759395852.733:3419): avc: denied { write } for pid=4637 comm="syz.4.198" path="socket:[8303]" dev="sockfs" ino=8303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.226200][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.253373][ T4647] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4647 comm=syz.2.201 [ 47.268696][ T4649] program syz.4.200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.293573][ T4647] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=4647 comm=syz.2.201 [ 47.316360][ T4647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.201'. [ 47.352132][ T4653] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.203' sets config #1 [ 47.442770][ T4655] loop2: detected capacity change from 0 to 512 [ 47.449714][ T29] audit: type=1326 audit(1759395852.993:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0adc3eec9 code=0x7ffc0000 [ 47.473224][ T29] audit: type=1326 audit(1759395852.993:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0adc3eec9 code=0x7ffc0000 [ 47.503668][ T29] audit: type=1326 audit(1759395853.043:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0adc3eec9 code=0x7ffc0000 [ 47.527045][ T29] audit: type=1326 audit(1759395853.043:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0adc3eec9 code=0x7ffc0000 [ 47.550436][ T29] audit: type=1326 audit(1759395853.043:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0adc3eec9 code=0x7ffc0000 [ 47.573880][ T29] audit: type=1326 audit(1759395853.043:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0adc3eec9 code=0x7ffc0000 [ 47.577292][ T4655] EXT4-fs warning (device loop2): ext4_xattr_inode_get:556: inode #11: comm syz.2.206: EA inode hash validation failed [ 47.597414][ T29] audit: type=1326 audit(1759395853.043:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0adc3eec9 code=0x7ffc0000 [ 47.610916][ T4655] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.206: corrupted inode contents [ 47.646421][ T4655] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.206: mark_inode_dirty error [ 47.659035][ T4655] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.206: corrupted inode contents [ 47.671306][ T4655] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #15: comm syz.2.206: mark_inode_dirty error [ 47.684890][ T4655] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #15: comm syz.2.206: mark inode dirty (error -117) [ 47.699544][ T4655] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 47.708649][ T4655] EXT4-fs (loop2): 1 orphan inode deleted [ 47.715025][ T4655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.733453][ T4667] netlink: 40 bytes leftover after parsing attributes in process `syz.5.209'. [ 47.786684][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.820538][ T4679] SELinux: failed to load policy [ 48.202767][ T4735] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 48.293675][ T4752] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 48.300312][ T4752] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.307899][ T4752] vhci_hcd vhci_hcd.0: Device attached [ 48.315308][ T4752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.324375][ T4752] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(11) [ 48.331008][ T4752] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 48.338471][ T4752] vhci_hcd vhci_hcd.0: Device attached [ 48.354683][ T4752] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(13) [ 48.361342][ T4752] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 48.368978][ T4752] vhci_hcd vhci_hcd.0: Device attached [ 48.377515][ T4752] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(15) [ 48.384300][ T4752] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 48.391973][ T4752] vhci_hcd vhci_hcd.0: Device attached [ 48.426707][ T4752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.435618][ T4752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 48.448906][ T4758] vhci_hcd: connection closed [ 48.449029][ T4767] vhci_hcd: connection closed [ 48.453887][ T164] vhci_hcd: stop threads [ 48.454330][ T4762] vhci_hcd: connection closed [ 48.458621][ T164] vhci_hcd: release socket [ 48.458637][ T164] vhci_hcd: disconnect device [ 48.467597][ T4754] vhci_hcd: connection closed [ 48.481128][ T4778] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 48.495279][ T164] vhci_hcd: stop threads [ 48.499751][ T164] vhci_hcd: release socket [ 48.504287][ T164] vhci_hcd: disconnect device [ 48.509278][ T3398] vhci_hcd: vhci_device speed not set [ 48.515105][ T164] vhci_hcd: stop threads [ 48.519544][ T164] vhci_hcd: release socket [ 48.523984][ T164] vhci_hcd: disconnect device [ 48.529962][ T164] vhci_hcd: stop threads [ 48.534253][ T164] vhci_hcd: release socket [ 48.538713][ T164] vhci_hcd: disconnect device [ 48.577416][ T3398] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 48.584938][ T3398] usb 11-1: enqueue for inactive port 0 [ 48.592351][ T3398] usb 11-1: enqueue for inactive port 0 [ 48.598047][ T3398] usb 11-1: enqueue for inactive port 0 [ 48.667433][ T3398] vhci_hcd: vhci_device speed not set [ 48.986155][ T4843] loop2: detected capacity change from 0 to 1024 [ 48.994402][ T4843] EXT4-fs: inline encryption not supported [ 49.000894][ T4843] EXT4-fs: Ignoring removed i_version option [ 49.008469][ T4843] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.021059][ T4843] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.228: lblock 2 mapped to illegal pblock 2 (length 1) [ 49.036773][ T4843] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.228: lblock 0 mapped to illegal pblock 48 (length 1) [ 49.052171][ T4843] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.228: Failed to acquire dquot type 0 [ 49.063800][ T4843] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 49.074410][ T4843] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.228: mark_inode_dirty error [ 49.089588][ T4843] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 49.100382][ T4843] EXT4-fs (loop2): 1 orphan inode deleted [ 49.106768][ T4843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.122585][ T164] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.137119][ T4854] loop6: detected capacity change from 0 to 1024 [ 49.143774][ T4854] EXT4-fs: inline encryption not supported [ 49.145541][ T4855] loop5: detected capacity change from 0 to 1024 [ 49.149817][ T4854] EXT4-fs: Ignoring removed i_version option [ 49.156626][ T4855] ext4: Unknown parameter 'fsmagic' [ 49.162941][ T4854] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.177445][ T164] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 49.179960][ T4854] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.230: lblock 2 mapped to illegal pblock 2 (length 1) [ 49.199900][ T4843] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.205953][ T4854] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.230: lblock 0 mapped to illegal pblock 48 (length 1) [ 49.226487][ T4854] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.230: Failed to acquire dquot type 0 [ 49.240678][ T4854] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 49.267000][ T4854] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.230: mark_inode_dirty error [ 49.300323][ T4854] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 49.311394][ T4860] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 49.334108][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.354459][ T4854] EXT4-fs (loop6): 1 orphan inode deleted [ 49.365656][ T4854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.378898][ T1803] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.404596][ T1803] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:7: Failed to release dquot type 0 [ 49.428877][ T4864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4864 comm=syz.3.233 [ 49.471826][ T4864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.233'. [ 49.487913][ T4854] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.508859][ T3819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.636441][ T4882] netlink: 'syz.4.241': attribute type 10 has an invalid length. [ 49.652335][ T4882] team0: Port device dummy0 added [ 49.808828][ T4900] loop2: detected capacity change from 0 to 1024 [ 49.816076][ T4900] EXT4-fs: inline encryption not supported [ 49.821999][ T4900] EXT4-fs: Ignoring removed i_version option [ 49.836761][ T4900] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.852634][ T4900] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.246: lblock 2 mapped to illegal pblock 2 (length 1) [ 49.866985][ T4900] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.246: lblock 0 mapped to illegal pblock 48 (length 1) [ 49.882343][ T4900] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.246: Failed to acquire dquot type 0 [ 49.893901][ T4900] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 49.903509][ T4900] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.246: mark_inode_dirty error [ 49.914874][ T4900] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 49.925249][ T4900] EXT4-fs (loop2): 1 orphan inode deleted [ 49.931418][ T4900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.943544][ T164] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.965327][ T164] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:4: Failed to release dquot type 0 [ 49.977776][ T4900] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.999726][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.510426][ T4968] Failed to initialize the IGMP autojoin socket (err -2) [ 50.624143][ T4982] Failed to initialize the IGMP autojoin socket (err -2) [ 50.688199][ T4902] ================================================================== [ 50.696333][ T4902] BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async [ 50.704085][ T4902] [ 50.706411][ T4902] write to 0xffff888106e08058 of 8 bytes by task 4903 on cpu 0: [ 50.714055][ T4902] fasync_remove_entry+0xcc/0x120 [ 50.719094][ T4902] fasync_helper+0x97/0xc0 [ 50.723523][ T4902] sock_fasync+0x58/0xc0 [ 50.727784][ T4902] __fput+0x5e3/0x650 [ 50.731773][ T4902] ____fput+0x1c/0x30 [ 50.735763][ T4902] task_work_run+0x12e/0x1a0 [ 50.740365][ T4902] exit_to_user_mode_loop+0xe1/0xf0 [ 50.745567][ T4902] do_syscall_64+0x1d6/0x200 [ 50.750180][ T4902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.756089][ T4902] [ 50.758422][ T4902] read to 0xffff888106e08058 of 8 bytes by task 4902 on cpu 1: [ 50.766053][ T4902] sock_wake_async+0x29/0x110 [ 50.770754][ T4902] unix_write_space+0x13b/0x140 [ 50.775624][ T4902] sock_wfree+0x148/0x3c0 [ 50.779972][ T4902] unix_destruct_scm+0xc3/0xf0 [ 50.784761][ T4902] skb_release_head_state+0xb7/0x1a0 [ 50.790073][ T4902] __kfree_skb+0x18/0x150 [ 50.794430][ T4902] sk_skb_reason_drop+0xbd/0x270 [ 50.799373][ T4902] unix_release_sock+0x661/0x7b0 [ 50.804320][ T4902] unix_release+0x58/0x80 [ 50.808693][ T4902] sock_close+0x6b/0x150 [ 50.813031][ T4902] __fput+0x29b/0x650 [ 50.817015][ T4902] ____fput+0x1c/0x30 [ 50.821091][ T4902] task_work_run+0x12e/0x1a0 [ 50.825688][ T4902] exit_to_user_mode_loop+0xe1/0xf0 [ 50.830910][ T4902] do_syscall_64+0x1d6/0x200 [ 50.835511][ T4902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.841416][ T4902] [ 50.843735][ T4902] value changed: 0xffff888108c7df30 -> 0x0000000000000000 [ 50.850847][ T4902] [ 50.853179][ T4902] Reported by Kernel Concurrency Sanitizer on: [ 50.859324][ T4902] CPU: 1 UID: 0 PID: 4902 Comm: syz.4.247 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.868983][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 50.879059][ T4902] ==================================================================