last executing test programs: 2.735966658s ago: executing program 3 (id=322): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVin:Dd', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbfffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a10700, &(0x7f0000000380), 0x0, 0x44a, &(0x7f0000000880)="$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") chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 1.95284411s ago: executing program 1 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffffff, 0x0, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000700, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") 1.825715692s ago: executing program 3 (id=333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) setsockopt$inet6_mreq(r3, 0x29, 0x1c, 0x0, 0x0) unshare(0x2c020400) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000700000000000c000780080006400056a7000500010006000000050005000a00000005000400000000000900020073797a31000000000d00030068617368"], 0x54}}, 0x0) unshare(0x40020000) creat(&(0x7f00000001c0)='./file0\x00', 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=@base={0x5, 0x1, 0x6c02, 0x3e, 0x111, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 1.770145543s ago: executing program 1 (id=335): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000459404cb34b54c899c6900950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0xc}, 0x115428, 0x0, 0x0, 0x7, 0x5f4b, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgctl$IPC_SET(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) setfsuid(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32250000000900010073797a3000000000080005400000001f"], 0xec}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000700), 0x2000) getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./bus\x00', &(0x7f00000007c0), 0x100) creat(&(0x7f00000004c0)='./bus\x00', 0x11d) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x81000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 1.344917089s ago: executing program 1 (id=341): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x9, 0x2000, @fd_index=0x7, 0xd, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x10, 0x1, {0x2}}) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000400), 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r7, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) 1.33846712s ago: executing program 0 (id=342): syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffd, 0x0, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37ada0500000000000000e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 1.230374171s ago: executing program 0 (id=345): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92af, 0x10100, 0x1, 0x21a}, &(0x7f0000000640)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14a8}, 0x0, 0x0, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r7, 0x2285, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x6, &(0x7f0000000040), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r12}, 0x10) unshare(0x24020400) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") writev(r7, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x5e}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r13 = signalfd4(r5, 0x0, 0x0, 0x80000) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r14, 0x0, 0x192}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r13, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x4e, 0x12}, @sack_perm, @sack_perm, @mss={0x2, 0x401}, @timestamp, @window={0x3, 0x5, 0xff26}, @window={0x3, 0xe, 0xff}], 0x7) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 1.189699761s ago: executing program 2 (id=346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 1.105788023s ago: executing program 2 (id=347): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004a00003c000000000006907aac1e0001ac14140d8907a2ffffffff440405038606ffffffff000000000000000d4dadde3ed0e9f02f3b328d8000957ac1a946efc0f27a2e0a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 1.021637644s ago: executing program 2 (id=348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) listen(r1, 0x8957) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, 0x0, 0x0) 939.085765ms ago: executing program 2 (id=349): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) (fail_nth: 3) 932.883835ms ago: executing program 1 (id=350): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000240)={'ip6_vti0\x00', @ifru_data=&(0x7f0000000000)="a983bea75f0e028db7fb60b1eb34c5f946e1d83e89e7684fe9451d5e243028a3"}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES16=r9], &(0x7f0000000200)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r10}, 0x10) r11 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r11, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) (async) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) 807.595977ms ago: executing program 1 (id=351): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f6ff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(r6, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x2, 0x1a1}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x80}}, '\x00'}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) utime(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 806.999517ms ago: executing program 2 (id=352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r4, 0x0, 0x4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc2b4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff80}, @alu={0x4, 0x1, 0x8, 0x0, 0xb, 0xffffffffffffffc0, 0x1}, @generic={0x8, 0xc, 0xa, 0x1, 0xfffffc01}]}, &(0x7f0000000200)='GPL\x00', 0x7fffffff, 0x16, &(0x7f0000000280)=""/22, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x3, 0x7, 0x48}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x2, 0x5, 0x8}, {0x3, 0x2, 0x4, 0x2}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='locks_get_lock_context\x00', r5}, 0x18) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 806.600587ms ago: executing program 1 (id=353): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 779.288578ms ago: executing program 0 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000009e167e6a8ed4ddd40000", @ANYRES32=r0, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000500"/28], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x29, 0xc6, 0x3, 0x4, 0x2, @remote, @empty, 0x80, 0x700, 0x1, 0x5}}) r9 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000140)=""/77, 0x4d, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611052d0e51cbdc7b2ab5e0000000000950000ff00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x1b, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7b70}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3ff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', r8, @fallback=0x2a, r9, 0x8, &(0x7f0000000480)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x10, 0x7, 0x2}, 0x10, r10, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000800)=[{0x4, 0x5, 0xf, 0x4}, {0x2, 0x1, 0x9, 0x5}, {0x4, 0x1, 0x10, 0x6}], 0x10, 0x8001, @void, @value}, 0x94) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x3d) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r12, 0x8008f512, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) migrate_pages(0x0, 0x80000000, 0x0, 0x0) 705.338939ms ago: executing program 0 (id=355): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)="f822", 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000580)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x6, 0xa, "bfabd5e7827eb2a7"}, @ra={0x94, 0x4}, @end, @rr={0x7, 0x7, 0xd3, [@empty]}, @cipso={0x86, 0x16, 0x3, [{0x1, 0x3, "e8"}, {0x0, 0xd, "8c72498738142ffbcdc77c"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @multicast2}}}], 0x60}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) fadvise64(r2, 0x703, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffd, 0x0, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37ada0500000000000000e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000030601c59cc3bf57b43db300000000000500010007"], 0x1c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="807a", 0x2}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000008000000da"], 0x20}, 0x41) 692.121259ms ago: executing program 0 (id=356): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x3, '\x00', 0x0, r2, 0x3, 0x80, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 663.679099ms ago: executing program 0 (id=357): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 607.01653ms ago: executing program 2 (id=359): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 403.826304ms ago: executing program 4 (id=364): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f6ff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8) sendto$inet6(r6, &(0x7f0000001080)='\x00', 0x1, 0xc090, &(0x7f0000000100)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x2, 0x1a1}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x80}}, '\x00'}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) utime(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 364.503684ms ago: executing program 4 (id=365): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x1600, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 323.813585ms ago: executing program 4 (id=366): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x3, 0x401, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capget(&(0x7f0000000080)={0x19980330}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xd1170707f0656889, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80000000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x3920e, r0, 0x5, 0x1, 0x9000000, 0x6}) 173.404457ms ago: executing program 4 (id=367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)="f822", 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000580)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x6, 0xa, "bfabd5e7827eb2a7"}, @ra={0x94, 0x4}, @end, @rr={0x7, 0x7, 0xd3, [@empty]}, @cipso={0x86, 0x16, 0x3, [{0x1, 0x3, "e8"}, {0x0, 0xd, "8c72498738142ffbcdc77c"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @multicast2}}}], 0x60}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) fadvise64(r2, 0x703, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffd, 0x0, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37ada0500000000000000e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r6}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="807a", 0x2}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000008000000da"], 0x20}, 0x41) 159.435437ms ago: executing program 3 (id=368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x3, '\x00', 0x0, r2, 0x3, 0x80, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 143.098918ms ago: executing program 4 (id=369): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e20}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)="f822", 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000580)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x6, 0xa, "bfabd5e7827eb2a7"}, @ra={0x94, 0x4}, @end, @rr={0x7, 0x7, 0xd3, [@empty]}, @cipso={0x86, 0x16, 0x3, [{0x1, 0x3, "e8"}, {0x0, 0xd, "8c72498738142ffbcdc77c"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @multicast2}}}], 0x60}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) fadvise64(r2, 0x703, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffd, 0x0, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37ada0500000000000000e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000030601c59cc3bf57b43db300000000000500010007"], 0x1c}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0xb, 0x3, 0x200, 0x6, 0x8, 0x10000, 0xfffffffe, 0xe2, r6}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18) r11 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="807a", 0x2}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000008000000da"], 0x20}, 0x41) 137.519678ms ago: executing program 3 (id=370): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x9, 0x88002, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x10c001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, @perf_config_ext={0x340, 0x100000000}, 0x0, 0x0, 0x0, 0x5}) 77.668058ms ago: executing program 3 (id=371): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) listen(r1, 0x8957) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, 0x0, 0x0) 76.868708ms ago: executing program 3 (id=372): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x9, 0x2000, @fd_index=0x7, 0xd, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x10, 0x1, {0x2}}) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000400), 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r8, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) 0s ago: executing program 4 (id=373): r0 = syz_io_uring_setup(0x157b, &(0x7f0000000000)={0x0, 0x633a, 0x10000, 0x3, 0x18d}, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2050, &(0x7f0000000100)={0x0, 0xff5c, 0x1, 0x5, 0x2a4, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000200)=[{{0x4, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x7f, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x28) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000240)=0xfffffffe, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000280)=0x2, 0x4) (async) getsockopt(r2, 0x7, 0xa37, &(0x7f00000002c0)=""/65, &(0x7f0000000340)=0x41) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x80000001}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000400)={{0xe1}, 'port0\x00', 0x3a, 0x0, 0x0, 0x7000000, 0xffffffff, 0x9, 0x7, 0x0, 0x3, 0x4}) r6 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f00000004c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000500)=0x2c) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x10800) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000580)={{0x1}, 'port0\x00', 0x77, 0x110040, 0xffff8001, 0x7, 0x8, 0xff, 0x81, 0x0, 0x3, 0x8}) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000680)={{0x0, 0x7}, 'port1\x00', 0x64, 0x2, 0x6, 0x6, 0x1000, 0x80, 0xfffc0000, 0x0, 0x4, 0xd8}) (async) getpeername$inet(r4, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10) (async) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000007c0)=0xfffffffffffffffe) (async) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x3ff, 0x1, 0x7, 0x6, 0x5a1d, 0x8}, {0x8, 0x4, 0x100, 0x80000001, 0xfffffffffffffffa, 0x400}], ['\x00']}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r9, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc3, 0x74}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r8) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x128, r10, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x23}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x10}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x128}, 0x1, 0x0, 0x0, 0x400c002}, 0x40080) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000c80)='ext4_insert_range\x00', 0xffffffffffffffff, 0x0, 0xe000000000000000}, 0x18) socketpair(0x6, 0xa, 0x0, &(0x7f0000000d00)={0xffffffffffffffff}) setsockopt$inet6_tcp_int(r11, 0x6, 0x4, &(0x7f0000000d40)=0x3, 0x4) (async) syz_usb_connect$cdc_ncm(0x3, 0x79, &(0x7f0000000d80)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x48, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x4, 0x90, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x8, 0x0, 0x69}, {0x6, 0x24, 0x1a, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x2}, @acm={0x4, 0x24, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x230, 0xb7, 0x4, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0xd, 0xb6}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x250, 0x6, 0x9, 0x4, 0x20, 0x1}, 0xc0, &(0x7f0000000e40)={0x5, 0xf, 0xc0, 0x5, [@generic={0x35, 0x10, 0xb, "f2f6f728a06c7425ff0f19ca1dfcaf141bd65cf8176af8b272ce42e248801241e91fbe57bcd0e2a9a1faee8c526c936b046c"}, @ptm_cap={0x3}, @generic={0x6e, 0x10, 0xb, "f732107c09817bfc50678680e2ba51b3e51b44e80102b33be023e4c189b09bf51ca4c25a1f70b7493374cacf8ef74739de2996c84659785e638c2a3934583e259938ecf63d6e0a42a65469552462df42a432f88a748281b38c5d6d000f990692849b25b8b145e4c6158982"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xd9, 0x7, 0x9, 0x3, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x97, 0x1e, 0x8}]}, 0x3, [{0x45, &(0x7f0000000f00)=@string={0x45, 0x3, "5bd41c8cdf87e91f5d8c7b2f9c7cef080f88dc9ea73c3d604ecedb3f3ebdfa9e7da9532599eea9a0c11df21ec251da5a60534c93f7b0ca1c10a6e66678ba6180b275e6"}}, {0x94, &(0x7f0000000f80)=@string={0x94, 0x3, "fd1c4b0673188c2917fc7506fcfe003d26411ee3b76d9d15f9ac476230468df3e79197e338903de2d8c4bc9133190ef0cccf6f88037ff2c94d184d8e8f4464b08c46dedc208ad1584a8cf76c33d9bd5ab3ad882a9b6ec8556d493c182bae6388c977ade5a826b7b0874aded5da9b8903259e24da21dcf9120c7b852b1db8360b47b2a242932305d228084265b2d0a2a6875a"}}, {0x6c, &(0x7f0000001040)=@string={0x6c, 0x3, "6bc82e9dd173fe0cb39291af8973bf960b27ae612d140e5362f6797082036afae42f5ca14bbcfd07952df5346bd0a60fa63ccef2882af9573012ad21c390850281efbf1005a0a26a0343b93e423d47253b934f494eb839b95afd0ca1da006beb7870e810bd52c50af334"}}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001240)={@fallback=r6, r5, 0x35, 0x0, 0x0, @void, @value}, 0x20) kernel console output (not intermixed with test programs): [ 22.349802][ T29] audit: type=1400 audit(1742911316.284:81): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. [ 27.711066][ T29] audit: type=1400 audit(1742911321.644:82): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.712278][ T3289] cgroup: Unknown subsys name 'net' [ 27.733807][ T29] audit: type=1400 audit(1742911321.644:83): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.761228][ T29] audit: type=1400 audit(1742911321.674:84): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.940136][ T3289] cgroup: Unknown subsys name 'cpuset' [ 27.946364][ T3289] cgroup: Unknown subsys name 'rlimit' [ 28.137388][ T29] audit: type=1400 audit(1742911322.064:85): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.160699][ T29] audit: type=1400 audit(1742911322.064:86): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.181484][ T29] audit: type=1400 audit(1742911322.064:87): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.184764][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.202050][ T29] audit: type=1400 audit(1742911322.064:88): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.231023][ T29] audit: type=1400 audit(1742911322.074:89): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.236416][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.255886][ T29] audit: type=1400 audit(1742911322.074:90): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.255917][ T29] audit: type=1400 audit(1742911322.144:91): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.254981][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 30.310160][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 30.332038][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 30.357940][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 30.383454][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 30.404233][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.411556][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.418756][ T3301] bridge_slave_0: entered allmulticast mode [ 30.425225][ T3301] bridge_slave_0: entered promiscuous mode [ 30.453643][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.460803][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.468119][ T3301] bridge_slave_1: entered allmulticast mode [ 30.474813][ T3301] bridge_slave_1: entered promiscuous mode [ 30.533260][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.540748][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.548019][ T3302] bridge_slave_0: entered allmulticast mode [ 30.554686][ T3302] bridge_slave_0: entered promiscuous mode [ 30.570187][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.586729][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.594054][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.601215][ T3302] bridge_slave_1: entered allmulticast mode [ 30.608307][ T3302] bridge_slave_1: entered promiscuous mode [ 30.618243][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.632638][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.639809][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.647052][ T3299] bridge_slave_0: entered allmulticast mode [ 30.653660][ T3299] bridge_slave_0: entered promiscuous mode [ 30.677756][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.684982][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.692335][ T3308] bridge_slave_0: entered allmulticast mode [ 30.699105][ T3308] bridge_slave_0: entered promiscuous mode [ 30.706312][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.714009][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.721601][ T3299] bridge_slave_1: entered allmulticast mode [ 30.728332][ T3299] bridge_slave_1: entered promiscuous mode [ 30.753660][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.761038][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.768440][ T3308] bridge_slave_1: entered allmulticast mode [ 30.774900][ T3308] bridge_slave_1: entered promiscuous mode [ 30.791399][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.800732][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.807953][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.815141][ T3310] bridge_slave_0: entered allmulticast mode [ 30.821865][ T3310] bridge_slave_0: entered promiscuous mode [ 30.828947][ T3301] team0: Port device team_slave_0 added [ 30.835498][ T3301] team0: Port device team_slave_1 added [ 30.851746][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.862027][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.871456][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.878558][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.885909][ T3310] bridge_slave_1: entered allmulticast mode [ 30.892399][ T3310] bridge_slave_1: entered promiscuous mode [ 30.909342][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.919586][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.944435][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.954133][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.961245][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.987580][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.008486][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.022525][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.029518][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.055510][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.073955][ T3302] team0: Port device team_slave_0 added [ 31.080592][ T3302] team0: Port device team_slave_1 added [ 31.087246][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.102864][ T3308] team0: Port device team_slave_0 added [ 31.109945][ T3308] team0: Port device team_slave_1 added [ 31.116755][ T3299] team0: Port device team_slave_0 added [ 31.123499][ T3299] team0: Port device team_slave_1 added [ 31.169441][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.176512][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.202460][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.214614][ T3310] team0: Port device team_slave_0 added [ 31.221319][ T3310] team0: Port device team_slave_1 added [ 31.237008][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.244271][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.270255][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.287044][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.294222][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.320167][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.337543][ T3301] hsr_slave_0: entered promiscuous mode [ 31.343565][ T3301] hsr_slave_1: entered promiscuous mode [ 31.350826][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.357825][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.384040][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.395117][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.402146][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.428091][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.451163][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.458280][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.484301][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.500738][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.507723][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.533841][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.558029][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.565178][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.591164][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.625966][ T3302] hsr_slave_0: entered promiscuous mode [ 31.632151][ T3302] hsr_slave_1: entered promiscuous mode [ 31.638084][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.645698][ T3302] Cannot create hsr debugfs directory [ 31.655271][ T3299] hsr_slave_0: entered promiscuous mode [ 31.661392][ T3299] hsr_slave_1: entered promiscuous mode [ 31.667169][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.674802][ T3299] Cannot create hsr debugfs directory [ 31.715992][ T3308] hsr_slave_0: entered promiscuous mode [ 31.723517][ T3308] hsr_slave_1: entered promiscuous mode [ 31.729396][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.736969][ T3308] Cannot create hsr debugfs directory [ 31.760277][ T3310] hsr_slave_0: entered promiscuous mode [ 31.766324][ T3310] hsr_slave_1: entered promiscuous mode [ 31.772314][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.780005][ T3310] Cannot create hsr debugfs directory [ 31.938635][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.953769][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.966648][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.977953][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.987016][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.995908][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.005267][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.014277][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.049566][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.062207][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.070986][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.080718][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.125426][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.134144][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.155179][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.164070][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.182475][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.199530][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.210563][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.221756][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.231298][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.263667][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.277219][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.289229][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.296427][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.322037][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.329224][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.356047][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.367770][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.374887][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.398478][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.405600][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.419539][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.437436][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.448384][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.471159][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.478251][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.488373][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.495613][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.517789][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.545311][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.555832][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.570244][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.584719][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.603701][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.611452][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.621858][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.629212][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.645999][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.653145][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.667645][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.677859][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.684984][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.707065][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.741170][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.761049][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.836835][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.857722][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.903453][ T3299] veth0_vlan: entered promiscuous mode [ 32.941610][ T3299] veth1_vlan: entered promiscuous mode [ 32.971725][ T3308] veth0_vlan: entered promiscuous mode [ 32.993581][ T3308] veth1_vlan: entered promiscuous mode [ 33.005743][ T3301] veth0_vlan: entered promiscuous mode [ 33.024562][ T3301] veth1_vlan: entered promiscuous mode [ 33.035867][ T3299] veth0_macvtap: entered promiscuous mode [ 33.048106][ T3310] veth0_vlan: entered promiscuous mode [ 33.059262][ T3299] veth1_macvtap: entered promiscuous mode [ 33.067539][ T3310] veth1_vlan: entered promiscuous mode [ 33.075188][ T3308] veth0_macvtap: entered promiscuous mode [ 33.090678][ T3308] veth1_macvtap: entered promiscuous mode [ 33.107289][ T3301] veth0_macvtap: entered promiscuous mode [ 33.115157][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.123518][ T3301] veth1_macvtap: entered promiscuous mode [ 33.135718][ T3310] veth0_macvtap: entered promiscuous mode [ 33.143609][ T3310] veth1_macvtap: entered promiscuous mode [ 33.152861][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.167516][ T3302] veth0_vlan: entered promiscuous mode [ 33.175281][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.184223][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.193011][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.201938][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.217175][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.231237][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.243246][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.252289][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.263173][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.274002][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.282021][ T3302] veth1_vlan: entered promiscuous mode [ 33.298559][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.309405][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.319248][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.329894][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.340566][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.349371][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.360067][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.370031][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.380564][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.390468][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.401285][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.412326][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.421808][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.430745][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.439535][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.448300][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.464134][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.474891][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.484882][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.495356][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.506264][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.520726][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.531269][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.541233][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.551927][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.561763][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.572209][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.583815][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.598715][ T3302] veth0_macvtap: entered promiscuous mode [ 33.606889][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.615729][ T3308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.624743][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.633712][ T3308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.646938][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 33.646957][ T29] audit: type=1400 audit(1742911327.574:110): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.xc4C14/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.677484][ T29] audit: type=1400 audit(1742911327.574:111): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.700925][ T29] audit: type=1400 audit(1742911327.574:112): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.xc4C14/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.702223][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.726787][ T29] audit: type=1400 audit(1742911327.574:113): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.735702][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.759642][ T29] audit: type=1400 audit(1742911327.574:114): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.xc4C14/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.768605][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.795274][ T29] audit: type=1400 audit(1742911327.574:115): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.xc4C14/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.803986][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.831536][ T29] audit: type=1400 audit(1742911327.574:116): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.861557][ T29] audit: type=1400 audit(1742911327.794:117): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.884487][ T29] audit: type=1400 audit(1742911327.794:118): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="gadgetfs" ino=3637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.895608][ T3302] veth1_macvtap: entered promiscuous mode [ 33.920768][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.944060][ T29] audit: type=1400 audit(1742911327.874:119): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.976922][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.987486][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.997383][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.007873][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.017770][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.028271][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.038128][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.048593][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.059632][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.080026][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.090641][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.100492][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.111064][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.120971][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.131437][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.141281][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.151729][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.164174][ T3443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'. [ 34.169545][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.243417][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.252405][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.261280][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.270150][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.322821][ T3453] FAULT_INJECTION: forcing a failure. [ 34.322821][ T3453] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.336050][ T3453] CPU: 0 UID: 0 PID: 3453 Comm: syz.3.4 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 34.336079][ T3453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 34.336097][ T3453] Call Trace: [ 34.336104][ T3453] [ 34.336112][ T3453] dump_stack_lvl+0xf2/0x150 [ 34.336172][ T3453] dump_stack+0x15/0x1a [ 34.336245][ T3453] should_fail_ex+0x24a/0x260 [ 34.336293][ T3453] should_fail+0xb/0x10 [ 34.336333][ T3453] should_fail_usercopy+0x1a/0x20 [ 34.336355][ T3453] _copy_from_user+0x1c/0xa0 [ 34.336417][ T3453] memdup_user+0x6b/0xd0 [ 34.336454][ T3453] strndup_user+0x68/0xa0 [ 34.336489][ T3453] __se_sys_mount+0x4e/0x2d0 [ 34.336583][ T3453] ? fput+0x99/0xd0 [ 34.336624][ T3453] ? ksys_write+0x176/0x1b0 [ 34.336660][ T3453] __x64_sys_mount+0x67/0x80 [ 34.336698][ T3453] x64_sys_call+0xd11/0x2e10 [ 34.336827][ T3453] do_syscall_64+0xc9/0x1c0 [ 34.336853][ T3453] ? clear_bhb_loop+0x55/0xb0 [ 34.336887][ T3453] ? clear_bhb_loop+0x55/0xb0 [ 34.336922][ T3453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.337021][ T3453] RIP: 0033:0x7fc0c3ccd169 [ 34.337039][ T3453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.337059][ T3453] RSP: 002b:00007fc0c2337038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.337087][ T3453] RAX: ffffffffffffffda RBX: 00007fc0c3ee5fa0 RCX: 00007fc0c3ccd169 [ 34.337139][ T3453] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 34.337153][ T3453] RBP: 00007fc0c2337090 R08: 0000200000000200 R09: 0000000000000000 [ 34.337165][ T3453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.337180][ T3453] R13: 0000000000000000 R14: 00007fc0c3ee5fa0 R15: 00007ffd17443548 [ 34.337203][ T3453] [ 34.344380][ T3455] loop1: detected capacity change from 0 to 512 [ 34.542938][ T3455] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.592392][ T3457] FAULT_INJECTION: forcing a failure. [ 34.592392][ T3457] name failslab, interval 1, probability 0, space 0, times 1 [ 34.600098][ C0] hrtimer: interrupt took 48076 ns [ 34.606006][ T3457] CPU: 1 UID: 0 PID: 3457 Comm: syz.0.10 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 34.606046][ T3457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 34.606062][ T3457] Call Trace: [ 34.606069][ T3457] [ 34.606078][ T3457] dump_stack_lvl+0xf2/0x150 [ 34.606174][ T3457] dump_stack+0x15/0x1a [ 34.606213][ T3457] should_fail_ex+0x24a/0x260 [ 34.606256][ T3457] should_failslab+0x8f/0xb0 [ 34.606327][ T3457] __kvmalloc_node_noprof+0x127/0x500 [ 34.606356][ T3457] ? rhashtable_init_noprof+0x312/0x450 [ 34.606385][ T3457] rhashtable_init_noprof+0x312/0x450 [ 34.606484][ T3457] rhltable_init_noprof+0x1e/0x40 [ 34.606509][ T3457] nf_tables_newtable+0x54d/0xee0 [ 34.606560][ T3457] nfnetlink_rcv+0xb3e/0x15d0 [ 34.606593][ T3457] ? kmem_cache_free+0xdc/0x2d0 [ 34.606678][ T3457] netlink_unicast+0x599/0x670 [ 34.606723][ T3457] netlink_sendmsg+0x5bf/0x6e0 [ 34.606822][ T3457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.606890][ T3457] __sock_sendmsg+0x140/0x180 [ 34.606918][ T3457] ____sys_sendmsg+0x332/0x4c0 [ 34.607045][ T3457] __sys_sendmsg+0x19d/0x230 [ 34.607098][ T3457] __x64_sys_sendmsg+0x46/0x50 [ 34.607135][ T3457] x64_sys_call+0x26f3/0x2e10 [ 34.607265][ T3457] do_syscall_64+0xc9/0x1c0 [ 34.607292][ T3457] ? clear_bhb_loop+0x55/0xb0 [ 34.607327][ T3457] ? clear_bhb_loop+0x55/0xb0 [ 34.607364][ T3457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.607397][ T3457] RIP: 0033:0x7f528a3ad169 [ 34.607416][ T3457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.607438][ T3457] RSP: 002b:00007f5288a17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.607461][ T3457] RAX: ffffffffffffffda RBX: 00007f528a5c5fa0 RCX: 00007f528a3ad169 [ 34.607478][ T3457] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 34.607548][ T3457] RBP: 00007f5288a17090 R08: 0000000000000000 R09: 0000000000000000 [ 34.607624][ T3457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 34.607638][ T3457] R13: 0000000000000000 R14: 00007f528a5c5fa0 R15: 00007ffffeab0e68 [ 34.607660][ T3457] [ 34.841618][ T3455] EXT4-fs (loop1): 1 orphan inode deleted [ 34.856734][ T3455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.872197][ T310] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 34.884597][ T3455] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.931217][ T3470] loop4: detected capacity change from 0 to 512 [ 34.943068][ T3461] loop3: detected capacity change from 0 to 512 [ 34.952903][ T3470] ======================================================= [ 34.952903][ T3470] WARNING: The mand mount option has been deprecated and [ 34.952903][ T3470] and is ignored by this kernel. Remove the mand [ 34.952903][ T3470] option from the mount to silence this warning. [ 34.952903][ T3470] ======================================================= [ 35.012131][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.026708][ T3470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.046691][ T3470] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.073899][ T3461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.102824][ T3470] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 35.116378][ T3461] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.164408][ T3481] : renamed from bond0 (while UP) [ 35.194502][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.208261][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.225162][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 35.235993][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 35.296331][ T3492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 35.305477][ T3492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 35.336945][ T3494] loop4: detected capacity change from 0 to 1024 [ 35.360873][ T3497] loop1: detected capacity change from 0 to 256 [ 35.375063][ T3494] EXT4-fs: Ignoring removed orlov option [ 35.380915][ T3494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.395138][ T3497] netlink: 'syz.1.21': attribute type 7 has an invalid length. [ 35.402853][ T3497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 35.474271][ T3494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.534929][ T3511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 35.577563][ T3511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.585476][ T3511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.618288][ T3511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.625898][ T3511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.697487][ T3518] loop3: detected capacity change from 0 to 2048 [ 35.789929][ T3518] loop3: p1 < > p4 [ 35.794733][ T3518] loop3: p4 size 8388608 extends beyond EOD, truncated [ 36.233338][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.303227][ T3524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28'. [ 36.312155][ T3524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28'. [ 36.338582][ T3524] ip6gretap0: entered promiscuous mode [ 36.346604][ T3524] syz_tun: entered promiscuous mode [ 36.391559][ T3523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.29'. [ 36.587055][ T3541] loop4: detected capacity change from 0 to 4096 [ 36.597171][ T3543] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 36.597463][ T3541] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 36.638043][ T3543] SELinux: failed to load policy [ 36.835722][ T3547] loop4: detected capacity change from 0 to 128 [ 36.848056][ T3547] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.862215][ T3547] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.925457][ T3556] loop0: detected capacity change from 0 to 512 [ 36.943730][ T3556] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.38: corrupted in-inode xattr: invalid ea_ino [ 36.958097][ T3556] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.38: couldn't read orphan inode 15 (err -117) [ 36.971921][ T3556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.243722][ T3566] loop3: detected capacity change from 0 to 128 [ 37.262586][ T3569] loop2: detected capacity change from 0 to 512 [ 37.264960][ T3566] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.283743][ T3566] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.291303][ T3569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 37.307050][ T3569] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.417118][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.427971][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 37.513857][ T3582] 9pnet_fd: Insufficient options for proto=fd [ 37.671465][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.730798][ T3592] FAULT_INJECTION: forcing a failure. [ 37.730798][ T3592] name failslab, interval 1, probability 0, space 0, times 0 [ 37.743578][ T3592] CPU: 0 UID: 0 PID: 3592 Comm: syz.0.48 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 37.743619][ T3592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 37.743632][ T3592] Call Trace: [ 37.743640][ T3592] [ 37.743658][ T3592] dump_stack_lvl+0xf2/0x150 [ 37.743691][ T3592] dump_stack+0x15/0x1a [ 37.743711][ T3592] should_fail_ex+0x24a/0x260 [ 37.743819][ T3592] ? audit_log_d_path+0x8e/0x150 [ 37.743853][ T3592] should_failslab+0x8f/0xb0 [ 37.743963][ T3592] __kmalloc_cache_noprof+0x4e/0x320 [ 37.743990][ T3592] audit_log_d_path+0x8e/0x150 [ 37.744047][ T3592] audit_log_d_path_exe+0x42/0x70 [ 37.744082][ T3592] audit_log_task+0x1ec/0x250 [ 37.744111][ T3592] audit_seccomp+0x68/0x130 [ 37.744215][ T3592] __seccomp_filter+0x692/0x10e0 [ 37.744246][ T3592] ? __perf_event_task_sched_out+0x138/0x1010 [ 37.744331][ T3592] __secure_computing+0x7e/0x160 [ 37.744418][ T3592] syscall_trace_enter+0xcf/0x1f0 [ 37.744448][ T3592] do_syscall_64+0xaa/0x1c0 [ 37.744471][ T3592] ? clear_bhb_loop+0x55/0xb0 [ 37.744498][ T3592] ? clear_bhb_loop+0x55/0xb0 [ 37.744576][ T3592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.744603][ T3592] RIP: 0033:0x7f528a3ad169 [ 37.744617][ T3592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.744663][ T3592] RSP: 002b:00007f5288a17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.744710][ T3592] RAX: ffffffffffffffda RBX: 00007f528a5c5fa0 RCX: 00007f528a3ad169 [ 37.744725][ T3592] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 37.744739][ T3592] RBP: 00007f5288a17090 R08: 0000000000000000 R09: 0000000000000000 [ 37.744753][ T3592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.744766][ T3592] R13: 0000000000000000 R14: 00007f528a5c5fa0 R15: 00007ffffeab0e68 [ 37.744784][ T3592] [ 38.006137][ T3594] FAULT_INJECTION: forcing a failure. [ 38.006137][ T3594] name failslab, interval 1, probability 0, space 0, times 0 [ 38.019237][ T3594] CPU: 1 UID: 0 PID: 3594 Comm: syz.0.50 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 38.019265][ T3594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.019284][ T3594] Call Trace: [ 38.019293][ T3594] [ 38.019355][ T3594] dump_stack_lvl+0xf2/0x150 [ 38.019382][ T3594] dump_stack+0x15/0x1a [ 38.019403][ T3594] should_fail_ex+0x24a/0x260 [ 38.019483][ T3594] ? v9fs_mount+0x53/0x570 [ 38.019510][ T3594] should_failslab+0x8f/0xb0 [ 38.019546][ T3594] __kmalloc_cache_noprof+0x4e/0x320 [ 38.019628][ T3594] v9fs_mount+0x53/0x570 [ 38.019734][ T3594] ? __pfx_v9fs_mount+0x10/0x10 [ 38.019756][ T3594] legacy_get_tree+0x77/0xd0 [ 38.019841][ T3594] vfs_get_tree+0x56/0x1e0 [ 38.019869][ T3594] do_new_mount+0x227/0x690 [ 38.019899][ T3594] path_mount+0x49b/0xb30 [ 38.020007][ T3594] __se_sys_mount+0x27f/0x2d0 [ 38.020035][ T3594] ? fput+0x99/0xd0 [ 38.020055][ T3594] __x64_sys_mount+0x67/0x80 [ 38.020107][ T3594] x64_sys_call+0xd11/0x2e10 [ 38.020138][ T3594] do_syscall_64+0xc9/0x1c0 [ 38.020255][ T3594] ? clear_bhb_loop+0x55/0xb0 [ 38.020283][ T3594] ? clear_bhb_loop+0x55/0xb0 [ 38.020361][ T3594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.020393][ T3594] RIP: 0033:0x7f528a3ad169 [ 38.020412][ T3594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.020442][ T3594] RSP: 002b:00007f5288a17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.020533][ T3594] RAX: ffffffffffffffda RBX: 00007f528a5c5fa0 RCX: 00007f528a3ad169 [ 38.020545][ T3594] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 38.020555][ T3594] RBP: 00007f5288a17090 R08: 0000200000000600 R09: 0000000000000000 [ 38.020566][ T3594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.020577][ T3594] R13: 0000000000000000 R14: 00007f528a5c5fa0 R15: 00007ffffeab0e68 [ 38.020596][ T3594] [ 38.267318][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.275292][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.284005][ T3599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.292562][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.550753][ T3608] Falling back ldisc for ttyS3. [ 38.562769][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.614415][ T3614] loop3: detected capacity change from 0 to 512 [ 38.628151][ T3616] loop2: detected capacity change from 0 to 1024 [ 38.644849][ T3616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.661302][ T3614] __quota_error: 337 callbacks suppressed [ 38.661320][ T3614] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 38.663757][ T3616] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.667226][ T3614] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 38.681503][ T29] audit: type=1400 audit(1742911332.614:456): avc: denied { connect } for pid=3615 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.688416][ T3614] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.57: Failed to acquire dquot type 1 [ 38.700439][ T29] audit: type=1400 audit(1742911332.634:457): avc: denied { name_connect } for pid=3615 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 38.752429][ T3614] EXT4-fs (loop3): 1 truncate cleaned up [ 38.759568][ T3614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.773160][ T3614] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.784271][ T29] audit: type=1326 audit(1742911332.724:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0c3ccbad0 code=0x7ffc0000 [ 38.808694][ T29] audit: type=1326 audit(1742911332.724:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc0c3ccbeb7 code=0x7ffc0000 [ 38.832979][ T29] audit: type=1326 audit(1742911332.724:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0c3ccbad0 code=0x7ffc0000 [ 38.857252][ T29] audit: type=1326 audit(1742911332.724:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c3ccd169 code=0x7ffc0000 [ 38.881784][ T29] audit: type=1326 audit(1742911332.724:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c3ccd169 code=0x7ffc0000 [ 38.905839][ T29] audit: type=1326 audit(1742911332.744:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.3.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0c3ccd169 code=0x7ffc0000 [ 38.941788][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.149713][ T3639] netlink: 'syz.3.66': attribute type 11 has an invalid length. [ 39.162908][ T3639] process 'syz.3.66' launched './file0' with NULL argv: empty string added [ 39.176773][ T3639] loop3: detected capacity change from 0 to 512 [ 39.186358][ T3637] syz.1.65 (3637) used greatest stack depth: 9448 bytes left [ 39.186901][ T3639] EXT4-fs (loop3): Invalid log block size: 256 [ 39.263125][ T3646] __nla_validate_parse: 14 callbacks suppressed [ 39.263143][ T3646] netlink: 100 bytes leftover after parsing attributes in process `syz.4.69'. [ 39.286377][ T3646] netlink: 100 bytes leftover after parsing attributes in process `syz.4.69'. [ 39.295813][ T3646] netlink: 100 bytes leftover after parsing attributes in process `syz.4.69'. [ 39.312582][ T3650] loop3: detected capacity change from 0 to 4096 [ 39.320726][ T3647] Zero length message leads to an empty skb [ 39.321600][ T3650] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 39.327208][ T3646] netlink: 100 bytes leftover after parsing attributes in process `syz.4.69'. [ 39.355097][ T3646] netlink: 100 bytes leftover after parsing attributes in process `syz.4.69'. [ 39.380804][ T3646] netlink: 100 bytes leftover after parsing attributes in process `syz.4.69'. [ 39.390150][ T3646] netlink: 100 bytes leftover after parsing attributes in process `syz.4.69'. [ 39.399542][ T3646] netlink: 100 bytes leftover after parsing attributes in process `syz.4.69'. [ 39.436333][ T3646] netlink: 100 bytes leftover after parsing attributes in process `syz.4.69'. [ 39.469056][ T3646] netlink: 100 bytes leftover after parsing attributes in process `syz.4.69'. [ 39.536290][ T3654] loop3: detected capacity change from 0 to 128 [ 39.627143][ T3654] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.640303][ T3654] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.666338][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.993503][ T3670] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 40.020813][ T3670] bridge0: port 3(vlan2) entered blocking state [ 40.027330][ T3670] bridge0: port 3(vlan2) entered disabled state [ 40.035468][ T3670] vlan2: entered allmulticast mode [ 40.050806][ T3670] vlan2: left allmulticast mode [ 40.066109][ T3672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3672 comm=syz.2.72 [ 40.173792][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.235808][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.243738][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.254174][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.261770][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.295991][ T3691] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.757192][ T3718] FAULT_INJECTION: forcing a failure. [ 40.757192][ T3718] name failslab, interval 1, probability 0, space 0, times 0 [ 40.769965][ T3718] CPU: 0 UID: 0 PID: 3718 Comm: syz.3.91 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 40.769989][ T3718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.770003][ T3718] Call Trace: [ 40.770010][ T3718] [ 40.770018][ T3718] dump_stack_lvl+0xf2/0x150 [ 40.770060][ T3718] dump_stack+0x15/0x1a [ 40.770102][ T3718] should_fail_ex+0x24a/0x260 [ 40.770142][ T3718] ? v9fs_mount+0x53/0x570 [ 40.770233][ T3718] should_failslab+0x8f/0xb0 [ 40.770262][ T3718] __kmalloc_cache_noprof+0x4e/0x320 [ 40.770295][ T3718] v9fs_mount+0x53/0x570 [ 40.770326][ T3718] ? __pfx_v9fs_mount+0x10/0x10 [ 40.770368][ T3718] legacy_get_tree+0x77/0xd0 [ 40.770397][ T3718] vfs_get_tree+0x56/0x1e0 [ 40.770495][ T3718] do_new_mount+0x227/0x690 [ 40.770536][ T3718] path_mount+0x49b/0xb30 [ 40.770564][ T3718] __se_sys_mount+0x27f/0x2d0 [ 40.770681][ T3718] ? fput+0x99/0xd0 [ 40.770702][ T3718] __x64_sys_mount+0x67/0x80 [ 40.770792][ T3718] x64_sys_call+0xd11/0x2e10 [ 40.770844][ T3718] do_syscall_64+0xc9/0x1c0 [ 40.770911][ T3718] ? clear_bhb_loop+0x55/0xb0 [ 40.770944][ T3718] ? clear_bhb_loop+0x55/0xb0 [ 40.770976][ T3718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.771065][ T3718] RIP: 0033:0x7fc0c3ccd169 [ 40.771081][ T3718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.771096][ T3718] RSP: 002b:00007fc0c2337038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.771112][ T3718] RAX: ffffffffffffffda RBX: 00007fc0c3ee5fa0 RCX: 00007fc0c3ccd169 [ 40.771122][ T3718] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 40.771132][ T3718] RBP: 00007fc0c2337090 R08: 00002000000003c0 R09: 0000000000000000 [ 40.771142][ T3718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.771222][ T3718] R13: 0000000000000000 R14: 00007fc0c3ee5fa0 R15: 00007ffd17443548 [ 40.771237][ T3718] [ 41.006231][ T3721] loop3: detected capacity change from 0 to 512 [ 41.083468][ T3721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.106427][ T3721] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.222142][ T3747] FAULT_INJECTION: forcing a failure. [ 41.222142][ T3747] name failslab, interval 1, probability 0, space 0, times 0 [ 41.235032][ T3747] CPU: 1 UID: 0 PID: 3747 Comm: syz.4.102 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 41.235098][ T3747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.235110][ T3747] Call Trace: [ 41.235117][ T3747] [ 41.235124][ T3747] dump_stack_lvl+0xf2/0x150 [ 41.235158][ T3747] dump_stack+0x15/0x1a [ 41.235198][ T3747] should_fail_ex+0x24a/0x260 [ 41.235241][ T3747] should_failslab+0x8f/0xb0 [ 41.235283][ T3747] kmem_cache_alloc_node_noprof+0x59/0x320 [ 41.235311][ T3747] ? __alloc_skb+0x10b/0x310 [ 41.235344][ T3747] __alloc_skb+0x10b/0x310 [ 41.235427][ T3747] netlink_alloc_large_skb+0xad/0xe0 [ 41.235470][ T3747] netlink_sendmsg+0x3b1/0x6e0 [ 41.235501][ T3747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.235545][ T3747] __sock_sendmsg+0x140/0x180 [ 41.235571][ T3747] ____sys_sendmsg+0x332/0x4c0 [ 41.235609][ T3747] __sys_sendmsg+0x19d/0x230 [ 41.235721][ T3747] __x64_sys_sendmsg+0x46/0x50 [ 41.235757][ T3747] x64_sys_call+0x26f3/0x2e10 [ 41.235861][ T3747] do_syscall_64+0xc9/0x1c0 [ 41.235887][ T3747] ? clear_bhb_loop+0x55/0xb0 [ 41.235921][ T3747] ? clear_bhb_loop+0x55/0xb0 [ 41.235997][ T3747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.236024][ T3747] RIP: 0033:0x7f60eef3d169 [ 41.236039][ T3747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.236057][ T3747] RSP: 002b:00007f60ed5a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.236143][ T3747] RAX: ffffffffffffffda RBX: 00007f60ef155fa0 RCX: 00007f60eef3d169 [ 41.236159][ T3747] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 41.236175][ T3747] RBP: 00007f60ed5a1090 R08: 0000000000000000 R09: 0000000000000000 [ 41.236190][ T3747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.236205][ T3747] R13: 0000000000000000 R14: 00007f60ef155fa0 R15: 00007ffca8746b18 [ 41.236224][ T3747] [ 41.716241][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.899938][ T3786] atomic_op ffff88811853b928 conn xmit_atomic 0000000000000000 [ 41.959758][ T3799] FAULT_INJECTION: forcing a failure. [ 41.959758][ T3799] name failslab, interval 1, probability 0, space 0, times 0 [ 41.972502][ T3799] CPU: 0 UID: 0 PID: 3799 Comm: syz.3.121 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 41.972534][ T3799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.972549][ T3799] Call Trace: [ 41.972558][ T3799] [ 41.972568][ T3799] dump_stack_lvl+0xf2/0x150 [ 41.972608][ T3799] dump_stack+0x15/0x1a [ 41.972701][ T3799] should_fail_ex+0x24a/0x260 [ 41.972749][ T3799] should_failslab+0x8f/0xb0 [ 41.972783][ T3799] kmem_cache_alloc_noprof+0x52/0x320 [ 41.972844][ T3799] ? _sctp_make_chunk+0xba/0x210 [ 41.972876][ T3799] _sctp_make_chunk+0xba/0x210 [ 41.972907][ T3799] sctp_make_init+0x41f/0x8e0 [ 41.972940][ T3799] sctp_sf_do_prm_asoc+0x7f/0x1e0 [ 41.972977][ T3799] sctp_do_sm+0xb8/0x31a0 [ 41.973043][ T3799] ? xfrm_lookup_route+0xcf/0x110 [ 41.973097][ T3799] sctp_primitive_ASSOCIATE+0x72/0x90 [ 41.973134][ T3799] sctp_sendmsg_to_asoc+0x97b/0xbe0 [ 41.973175][ T3799] sctp_sendmsg+0x144e/0x18f0 [ 41.973280][ T3799] ? __pfx_sctp_sendmsg+0x10/0x10 [ 41.973306][ T3799] inet_sendmsg+0xc5/0xd0 [ 41.973342][ T3799] __sock_sendmsg+0x102/0x180 [ 41.973367][ T3799] ____sys_sendmsg+0x332/0x4c0 [ 41.973463][ T3799] __sys_sendmmsg+0x227/0x4b0 [ 41.973517][ T3799] __x64_sys_sendmmsg+0x57/0x70 [ 41.973595][ T3799] x64_sys_call+0x2b53/0x2e10 [ 41.973629][ T3799] do_syscall_64+0xc9/0x1c0 [ 41.973652][ T3799] ? clear_bhb_loop+0x55/0xb0 [ 41.973686][ T3799] ? clear_bhb_loop+0x55/0xb0 [ 41.973718][ T3799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.973754][ T3799] RIP: 0033:0x7fc0c3ccd169 [ 41.973768][ T3799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.973863][ T3799] RSP: 002b:00007fc0c2337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 41.973887][ T3799] RAX: ffffffffffffffda RBX: 00007fc0c3ee5fa0 RCX: 00007fc0c3ccd169 [ 41.973942][ T3799] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 41.973967][ T3799] RBP: 00007fc0c2337090 R08: 0000000000000000 R09: 0000000000000000 [ 41.973978][ T3799] R10: 0000000014004841 R11: 0000000000000246 R12: 0000000000000002 [ 41.974058][ T3799] R13: 0000000000000000 R14: 00007fc0c3ee5fa0 R15: 00007ffd17443548 [ 41.974080][ T3799] [ 42.214786][ T3807] FAULT_INJECTION: forcing a failure. [ 42.214786][ T3807] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 42.228203][ T3807] CPU: 1 UID: 0 PID: 3807 Comm: syz.3.123 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 42.228226][ T3807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.228237][ T3807] Call Trace: [ 42.228243][ T3807] [ 42.228251][ T3807] dump_stack_lvl+0xf2/0x150 [ 42.228356][ T3807] dump_stack+0x15/0x1a [ 42.228375][ T3807] should_fail_ex+0x24a/0x260 [ 42.228406][ T3807] should_fail_alloc_page+0xfd/0x110 [ 42.228517][ T3807] __alloc_frozen_pages_noprof+0x109/0x340 [ 42.228544][ T3807] alloc_pages_mpol+0xb4/0x260 [ 42.228565][ T3807] alloc_pages_noprof+0xe8/0x130 [ 42.228585][ T3807] __pmd_alloc+0x4b/0x430 [ 42.228601][ T3807] handle_mm_fault+0x1a8c/0x2b00 [ 42.228683][ T3807] exc_page_fault+0x3b9/0x650 [ 42.228711][ T3807] asm_exc_page_fault+0x26/0x30 [ 42.228745][ T3807] RIP: 0033:0x7fc0c3b8fc86 [ 42.228758][ T3807] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 42.228773][ T3807] RSP: 002b:00007fc0c23364a0 EFLAGS: 00010246 [ 42.228786][ T3807] RAX: 0000000000000001 RBX: 00007fc0c2336540 RCX: 0000000000000101 [ 42.228796][ T3807] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fc0c23365e0 [ 42.228806][ T3807] RBP: 0000000000000102 R08: 00007fc0b9f17000 R09: 0000000000000000 [ 42.228816][ T3807] R10: 0000000000000000 R11: 00007fc0c2336550 R12: 0000000000000001 [ 42.228826][ T3807] R13: 00007fc0c3d693e0 R14: 0000000000000000 R15: 00007fc0c23365e0 [ 42.228851][ T3807] [ 42.228868][ T3807] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 42.397720][ T3807] loop3: detected capacity change from 0 to 512 [ 42.404931][ T3807] journal_path: Lookup failure for './file0/../file0' [ 42.412034][ T3807] EXT4-fs: error: could not find journal device path [ 42.501742][ T3817] loop2: detected capacity change from 0 to 512 [ 42.508615][ T3817] journal_path: Lookup failure for './file0/../file0' [ 42.515483][ T3817] EXT4-fs: error: could not find journal device path [ 42.617510][ T3825] FAULT_INJECTION: forcing a failure. [ 42.617510][ T3825] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 42.630889][ T3825] CPU: 1 UID: 0 PID: 3825 Comm: syz.2.131 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 42.630925][ T3825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.631004][ T3825] Call Trace: [ 42.631013][ T3825] [ 42.631022][ T3825] dump_stack_lvl+0xf2/0x150 [ 42.631054][ T3825] dump_stack+0x15/0x1a [ 42.631080][ T3825] should_fail_ex+0x24a/0x260 [ 42.631161][ T3825] should_fail_alloc_page+0xfd/0x110 [ 42.631227][ T3825] __alloc_frozen_pages_noprof+0x109/0x340 [ 42.631259][ T3825] alloc_pages_mpol+0xb4/0x260 [ 42.631284][ T3825] alloc_pages_noprof+0xe8/0x130 [ 42.631331][ T3825] kimage_alloc_control_pages+0x14a/0x730 [ 42.631380][ T3825] do_kexec_load+0x2c9/0x510 [ 42.631489][ T3825] __se_sys_kexec_load+0x12b/0x160 [ 42.631516][ T3825] __x64_sys_kexec_load+0x55/0x70 [ 42.631579][ T3825] x64_sys_call+0xded/0x2e10 [ 42.631611][ T3825] do_syscall_64+0xc9/0x1c0 [ 42.631646][ T3825] ? clear_bhb_loop+0x55/0xb0 [ 42.631671][ T3825] ? clear_bhb_loop+0x55/0xb0 [ 42.631732][ T3825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.631766][ T3825] RIP: 0033:0x7fdacba9d169 [ 42.631782][ T3825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.631799][ T3825] RSP: 002b:00007fdaca107038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 42.631822][ T3825] RAX: ffffffffffffffda RBX: 00007fdacbcb5fa0 RCX: 00007fdacba9d169 [ 42.631837][ T3825] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000 [ 42.631952][ T3825] RBP: 00007fdaca107090 R08: 0000000000000000 R09: 0000000000000000 [ 42.631963][ T3825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.632013][ T3825] R13: 0000000000000001 R14: 00007fdacbcb5fa0 R15: 00007ffdb83fb3e8 [ 42.632036][ T3825] [ 42.632044][ T3825] kexec: Could not allocate control_code_buffer [ 42.765146][ T3830] loop1: detected capacity change from 0 to 512 [ 42.844073][ T3830] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.128: corrupted in-inode xattr: invalid ea_ino [ 42.857916][ T3830] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.128: couldn't read orphan inode 15 (err -117) [ 42.876402][ T3830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.893216][ T3842] FAULT_INJECTION: forcing a failure. [ 42.893216][ T3842] name failslab, interval 1, probability 0, space 0, times 0 [ 42.906072][ T3842] CPU: 1 UID: 0 PID: 3842 Comm: syz.0.136 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 42.906097][ T3842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.906109][ T3842] Call Trace: [ 42.906117][ T3842] [ 42.906127][ T3842] dump_stack_lvl+0xf2/0x150 [ 42.906159][ T3842] dump_stack+0x15/0x1a [ 42.906259][ T3842] should_fail_ex+0x24a/0x260 [ 42.906296][ T3842] should_failslab+0x8f/0xb0 [ 42.906341][ T3842] kmem_cache_alloc_noprof+0x52/0x320 [ 42.906364][ T3842] ? audit_log_start+0x34c/0x6b0 [ 42.906405][ T3842] ? audit_log_end+0x1d0/0x1e0 [ 42.906430][ T3842] audit_log_start+0x34c/0x6b0 [ 42.906531][ T3842] ? kmem_cache_free+0xdc/0x2d0 [ 42.906601][ T3842] audit_seccomp+0x4b/0x130 [ 42.906639][ T3842] __seccomp_filter+0x692/0x10e0 [ 42.906664][ T3842] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 42.906703][ T3842] ? vfs_write+0x644/0x920 [ 42.906789][ T3842] ? should_fail_ex+0xd7/0x260 [ 42.906824][ T3842] __secure_computing+0x7e/0x160 [ 42.906892][ T3842] syscall_trace_enter+0xcf/0x1f0 [ 42.906916][ T3842] ? fpregs_assert_state_consistent+0x83/0xa0 [ 42.906946][ T3842] do_syscall_64+0xaa/0x1c0 [ 42.906986][ T3842] ? clear_bhb_loop+0x55/0xb0 [ 42.907039][ T3842] ? clear_bhb_loop+0x55/0xb0 [ 42.907068][ T3842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.907099][ T3842] RIP: 0033:0x7f528a3abb7c [ 42.907186][ T3842] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 42.907205][ T3842] RSP: 002b:00007f5288a17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.907223][ T3842] RAX: ffffffffffffffda RBX: 00007f528a5c5fa0 RCX: 00007f528a3abb7c [ 42.907238][ T3842] RDX: 000000000000000f RSI: 00007f5288a170a0 RDI: 0000000000000005 [ 42.907266][ T3842] RBP: 00007f5288a17090 R08: 0000000000000000 R09: 0000000000000000 [ 42.907279][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.907293][ T3842] R13: 0000000000000000 R14: 00007f528a5c5fa0 R15: 00007ffffeab0e68 [ 42.907316][ T3842] [ 43.323511][ T2964] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 43.333297][ T2964] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.352594][ T3867] loop3: detected capacity change from 0 to 1024 [ 43.364591][ T3867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.380120][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.396562][ T3867] EXT4-fs: Mount option(s) incompatible with ext2 [ 43.499121][ T3883] FAULT_INJECTION: forcing a failure. [ 43.499121][ T3883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.512305][ T3883] CPU: 0 UID: 0 PID: 3883 Comm: syz.4.149 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 43.512400][ T3883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.512415][ T3883] Call Trace: [ 43.512423][ T3883] [ 43.512431][ T3883] dump_stack_lvl+0xf2/0x150 [ 43.512457][ T3883] dump_stack+0x15/0x1a [ 43.512477][ T3883] should_fail_ex+0x24a/0x260 [ 43.512543][ T3883] should_fail+0xb/0x10 [ 43.512576][ T3883] should_fail_usercopy+0x1a/0x20 [ 43.512639][ T3883] _copy_from_user+0x1c/0xa0 [ 43.512661][ T3883] restore_sigcontext+0x64/0x220 [ 43.512709][ T3883] __do_sys_rt_sigreturn+0xfd/0x160 [ 43.512748][ T3883] x64_sys_call+0x2b49/0x2e10 [ 43.512779][ T3883] do_syscall_64+0xc9/0x1c0 [ 43.512836][ T3883] ? clear_bhb_loop+0x55/0xb0 [ 43.512868][ T3883] ? clear_bhb_loop+0x55/0xb0 [ 43.512894][ T3883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.512924][ T3883] RIP: 0033:0x7f60eeed9359 [ 43.512948][ T3883] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 43.512992][ T3883] RSP: 002b:00007f60ed57fa80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 43.513010][ T3883] RAX: ffffffffffffffda RBX: 00007f60ef156080 RCX: 00007f60eeed9359 [ 43.513031][ T3883] RDX: 00007f60ed57fa80 RSI: 00007f60ed57fbb0 RDI: 0000000000000021 [ 43.513047][ T3883] RBP: 00007f60ed580090 R08: 0000000000000000 R09: 0000000000000000 [ 43.513061][ T3883] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 43.513072][ T3883] R13: 0000000000000000 R14: 00007f60ef156080 R15: 00007ffca8746b18 [ 43.513088][ T3883] [ 43.864489][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 43.864505][ T29] audit: type=1400 audit(1742911337.794:582): avc: denied { write } for pid=3895 comm="syz.1.156" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.125910][ T29] audit: type=1326 audit(1742911338.054:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a3ad169 code=0x7ffc0000 [ 44.137660][ T3906] SET target dimension over the limit! [ 44.149429][ T29] audit: type=1326 audit(1742911338.054:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a3ad169 code=0x7ffc0000 [ 44.186091][ T29] audit: type=1400 audit(1742911338.064:585): avc: denied { ioctl } for pid=3901 comm="syz.2.158" path="socket:[6363]" dev="sockfs" ino=6363 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.210617][ T29] audit: type=1400 audit(1742911338.064:586): avc: denied { bind } for pid=3901 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 44.230535][ T29] audit: type=1326 audit(1742911338.114:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a3ad169 code=0x7ffc0000 [ 44.256006][ T29] audit: type=1326 audit(1742911338.114:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a3ad169 code=0x7ffc0000 [ 44.279789][ T29] audit: type=1326 audit(1742911338.114:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a3ad169 code=0x7ffc0000 [ 44.346747][ T29] audit: type=1326 audit(1742911338.114:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f528a3ad169 code=0x7ffc0000 [ 44.371807][ T29] audit: type=1326 audit(1742911338.114:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528a3ad169 code=0x7ffc0000 [ 44.912613][ T3955] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 45.297655][ T3975] __nla_validate_parse: 70 callbacks suppressed [ 45.297674][ T3975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.180'. [ 45.313112][ T3975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.180'. [ 45.463128][ T3984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 45.473579][ T3984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 45.487806][ T3982] loop3: detected capacity change from 0 to 512 [ 45.495353][ T3982] EXT4-fs: inline encryption not supported [ 45.542164][ T3982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.589632][ T3982] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.871354][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.888353][ T4001] loop2: detected capacity change from 0 to 1024 [ 45.905161][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.964399][ T4003] loop1: detected capacity change from 0 to 512 [ 45.983590][ T3982] EXT4-fs error (device loop3): ext4_do_update_inode:5158: inode #2: comm syz.3.181: corrupted inode contents [ 46.004070][ T4001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.021572][ T4003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.063589][ T4003] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.094068][ T3982] EXT4-fs error (device loop3): ext4_dirty_inode:6046: inode #2: comm syz.3.181: mark_inode_dirty error [ 46.137450][ T3982] EXT4-fs error (device loop3): ext4_do_update_inode:5158: inode #2: comm syz.3.181: corrupted inode contents [ 46.179936][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.190236][ T4001] EXT4-fs: Mount option(s) incompatible with ext2 [ 46.191516][ T3982] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.181: mark_inode_dirty error [ 46.211628][ T4016] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 46.322757][ T4020] loop1: detected capacity change from 0 to 2048 [ 46.365363][ T4025] loop2: detected capacity change from 0 to 512 [ 46.375503][ T4020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.404246][ T4029] veth0_to_bond: entered promiscuous mode [ 46.457474][ T4025] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.480456][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 46.500410][ T4033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.197'. [ 46.509460][ T4033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.197'. [ 46.519166][ T4025] EXT4-fs (loop2): 1 truncate cleaned up [ 46.529829][ T4025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.578047][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.602253][ T4029] veth0_to_bond (unregistering): left promiscuous mode [ 46.630035][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.644741][ T4029] bond0: (slave bond_slave_0): Releasing backup interface [ 46.768148][ T4045] loop1: detected capacity change from 0 to 4096 [ 46.806058][ T4045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.835056][ T4047] bridge0: port 3(vlan2) entered blocking state [ 46.841638][ T4047] bridge0: port 3(vlan2) entered disabled state [ 46.848538][ T4047] vlan2: entered allmulticast mode [ 46.855192][ T4047] vlan2: left allmulticast mode [ 46.885861][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.947021][ T1053] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 46.956013][ T1053] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 47.108232][ T4067] block device autoloading is deprecated and will be removed. [ 47.124264][ T4065] loop1: detected capacity change from 0 to 512 [ 47.127465][ T4068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.210'. [ 47.140331][ T4068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.210'. [ 47.181544][ T4065] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 47.221106][ T4065] EXT4-fs (loop1): mount failed [ 47.270090][ T4076] netlink: 172 bytes leftover after parsing attributes in process `syz.4.211'. [ 47.544798][ T4088] FAULT_INJECTION: forcing a failure. [ 47.544798][ T4088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.558140][ T4088] CPU: 1 UID: 0 PID: 4088 Comm: syz.2.216 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 47.558206][ T4088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.558219][ T4088] Call Trace: [ 47.558225][ T4088] [ 47.558234][ T4088] dump_stack_lvl+0xf2/0x150 [ 47.558264][ T4088] dump_stack+0x15/0x1a [ 47.558286][ T4088] should_fail_ex+0x24a/0x260 [ 47.558323][ T4088] should_fail+0xb/0x10 [ 47.558361][ T4088] should_fail_usercopy+0x1a/0x20 [ 47.558382][ T4088] _copy_to_user+0x20/0xa0 [ 47.558407][ T4088] simple_read_from_buffer+0xb2/0x130 [ 47.558439][ T4088] proc_fail_nth_read+0xf9/0x140 [ 47.558475][ T4088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 47.558596][ T4088] vfs_read+0x19b/0x6f0 [ 47.558622][ T4088] ? ipv6_setsockopt+0x10f/0x130 [ 47.558645][ T4088] ? __rcu_read_unlock+0x4e/0x70 [ 47.558669][ T4088] ? __fget_files+0x180/0x1c0 [ 47.558762][ T4088] ksys_read+0xe8/0x1b0 [ 47.558806][ T4088] __x64_sys_read+0x42/0x50 [ 47.558834][ T4088] x64_sys_call+0x2a3b/0x2e10 [ 47.558862][ T4088] do_syscall_64+0xc9/0x1c0 [ 47.558884][ T4088] ? clear_bhb_loop+0x55/0xb0 [ 47.558942][ T4088] ? clear_bhb_loop+0x55/0xb0 [ 47.558970][ T4088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.559009][ T4088] RIP: 0033:0x7fdacba9bb7c [ 47.559025][ T4088] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 47.559068][ T4088] RSP: 002b:00007fdaca107030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.559087][ T4088] RAX: ffffffffffffffda RBX: 00007fdacbcb5fa0 RCX: 00007fdacba9bb7c [ 47.559099][ T4088] RDX: 000000000000000f RSI: 00007fdaca1070a0 RDI: 0000000000000004 [ 47.559166][ T4088] RBP: 00007fdaca107090 R08: 0000000000000000 R09: 0000000000000000 [ 47.559178][ T4088] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 47.559190][ T4088] R13: 0000000000000000 R14: 00007fdacbcb5fa0 R15: 00007ffdb83fb3e8 [ 47.559209][ T4088] [ 47.857003][ T4090] loop0: detected capacity change from 0 to 512 [ 47.877908][ T4090] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.214: corrupted in-inode xattr: invalid ea_ino [ 47.894161][ T4090] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.214: couldn't read orphan inode 15 (err -117) [ 47.906928][ T4090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.383021][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.449849][ T4110] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 48.693123][ T4135] FAULT_INJECTION: forcing a failure. [ 48.693123][ T4135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.706566][ T4135] CPU: 1 UID: 0 PID: 4135 Comm: syz.0.225 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 48.706591][ T4135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.706639][ T4135] Call Trace: [ 48.706649][ T4135] [ 48.706659][ T4135] dump_stack_lvl+0xf2/0x150 [ 48.706695][ T4135] dump_stack+0x15/0x1a [ 48.706721][ T4135] should_fail_ex+0x24a/0x260 [ 48.706818][ T4135] should_fail+0xb/0x10 [ 48.706852][ T4135] should_fail_usercopy+0x1a/0x20 [ 48.706874][ T4135] strncpy_from_user+0x25/0x230 [ 48.706907][ T4135] ? __kmalloc_cache_noprof+0x186/0x320 [ 48.706937][ T4135] __se_sys_memfd_create+0x218/0x5a0 [ 48.707035][ T4135] __x64_sys_memfd_create+0x31/0x40 [ 48.707059][ T4135] x64_sys_call+0x1163/0x2e10 [ 48.707090][ T4135] do_syscall_64+0xc9/0x1c0 [ 48.707117][ T4135] ? clear_bhb_loop+0x55/0xb0 [ 48.707174][ T4135] ? clear_bhb_loop+0x55/0xb0 [ 48.707225][ T4135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.707251][ T4135] RIP: 0033:0x7f528a3ad169 [ 48.707268][ T4135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.707290][ T4135] RSP: 002b:00007f52889d4e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 48.707348][ T4135] RAX: ffffffffffffffda RBX: 000000000000050a RCX: 00007f528a3ad169 [ 48.707359][ T4135] RDX: 00007f52889d4ef0 RSI: 0000000000000000 RDI: 00007f528a42ec3c [ 48.707370][ T4135] RBP: 0000200000000200 R08: 00007f52889d4bb7 R09: 00007f52889d4e40 [ 48.707381][ T4135] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 48.707392][ T4135] R13: 00007f52889d4ef0 R14: 00007f52889d4eb0 R15: 0000200000000940 [ 48.707409][ T4135] [ 48.898626][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.097683][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 49.097709][ T29] audit: type=1400 audit(1742911343.024:754): avc: denied { create } for pid=4141 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.226001][ T4142] loop3: detected capacity change from 0 to 1024 [ 49.271507][ T4142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.288422][ T4142] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.362148][ T29] audit: type=1400 audit(1742911343.294:755): avc: denied { connect } for pid=4141 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.425667][ T29] audit: type=1400 audit(1742911343.354:756): avc: denied { create } for pid=4151 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.584489][ T29] audit: type=1326 audit(1742911343.514:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacba9d169 code=0x7ffc0000 [ 49.660648][ T29] audit: type=1326 audit(1742911343.514:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacba9d169 code=0x7ffc0000 [ 49.684245][ T29] audit: type=1326 audit(1742911343.554:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdacba9d169 code=0x7ffc0000 [ 49.708033][ T29] audit: type=1326 audit(1742911343.554:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacba9d169 code=0x7ffc0000 [ 49.732539][ T29] audit: type=1326 audit(1742911343.554:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fdacba9d169 code=0x7ffc0000 [ 49.758349][ T29] audit: type=1326 audit(1742911343.554:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacba9d169 code=0x7ffc0000 [ 49.782350][ T29] audit: type=1326 audit(1742911343.554:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.2.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdacba9d169 code=0x7ffc0000 [ 49.945154][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.094243][ T4184] pim6reg: entered allmulticast mode [ 50.107534][ T4184] pim6reg: left allmulticast mode [ 50.231054][ T4188] SELinux: Context system_u:object_r:ssh_keysign_exec_t:s0 is not valid (left unmapped). [ 50.244583][ T4188] SELinux: Context system_u:object_r:dhcpd_unit_file_t:s0 is not valid (left unmapped). [ 50.254675][ T4188] FAULT_INJECTION: forcing a failure. [ 50.254675][ T4188] name failslab, interval 1, probability 0, space 0, times 0 [ 50.267461][ T4188] CPU: 0 UID: 0 PID: 4188 Comm: syz.4.247 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 50.267490][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.267504][ T4188] Call Trace: [ 50.267511][ T4188] [ 50.267539][ T4188] dump_stack_lvl+0xf2/0x150 [ 50.267662][ T4188] dump_stack+0x15/0x1a [ 50.267687][ T4188] should_fail_ex+0x24a/0x260 [ 50.267730][ T4188] should_failslab+0x8f/0xb0 [ 50.267795][ T4188] __kmalloc_noprof+0xab/0x3f0 [ 50.267886][ T4188] ? security_prepare_creds+0x53/0x120 [ 50.267930][ T4188] security_prepare_creds+0x53/0x120 [ 50.267972][ T4188] prepare_creds+0x346/0x480 [ 50.268009][ T4188] selinux_lsm_setattr+0x198/0x640 [ 50.268099][ T4188] selinux_setprocattr+0x4e/0x70 [ 50.268130][ T4188] security_setprocattr+0x198/0x1c0 [ 50.268161][ T4188] proc_pid_attr_write+0x1e7/0x220 [ 50.268200][ T4188] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 50.268324][ T4188] vfs_write+0x27d/0x920 [ 50.268351][ T4188] ? __fget_files+0x180/0x1c0 [ 50.268449][ T4188] ksys_write+0xe8/0x1b0 [ 50.268482][ T4188] __x64_sys_write+0x42/0x50 [ 50.268511][ T4188] x64_sys_call+0x2a45/0x2e10 [ 50.268536][ T4188] do_syscall_64+0xc9/0x1c0 [ 50.268561][ T4188] ? clear_bhb_loop+0x55/0xb0 [ 50.268601][ T4188] ? clear_bhb_loop+0x55/0xb0 [ 50.268684][ T4188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.268717][ T4188] RIP: 0033:0x7f60eef3d169 [ 50.268734][ T4188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.268757][ T4188] RSP: 002b:00007f60ed5a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.268774][ T4188] RAX: ffffffffffffffda RBX: 00007f60ef155fa0 RCX: 00007f60eef3d169 [ 50.268856][ T4188] RDX: 0000000000000027 RSI: 00002000000001c0 RDI: 0000000000000005 [ 50.268871][ T4188] RBP: 00007f60ed5a1090 R08: 0000000000000000 R09: 0000000000000000 [ 50.268883][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.268893][ T4188] R13: 0000000000000000 R14: 00007f60ef155fa0 R15: 00007ffca8746b18 [ 50.268910][ T4188] [ 50.588096][ T4200] __nla_validate_parse: 1 callbacks suppressed [ 50.588115][ T4200] netlink: 172 bytes leftover after parsing attributes in process `syz.4.250'. [ 50.611542][ T4203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 50.705217][ T4204] loop2: detected capacity change from 0 to 1024 [ 50.734899][ T4206] loop3: detected capacity change from 0 to 128 [ 50.744256][ T4204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.759617][ T4204] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.100176][ T3419] kworker/u8:7: attempt to access beyond end of device [ 51.100176][ T3419] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 51.143491][ T3419] kworker/u8:7: attempt to access beyond end of device [ 51.143491][ T3419] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 51.164611][ T3419] kworker/u8:7: attempt to access beyond end of device [ 51.164611][ T3419] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 51.179475][ T3419] kworker/u8:7: attempt to access beyond end of device [ 51.179475][ T3419] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 51.197075][ T3419] kworker/u8:7: attempt to access beyond end of device [ 51.197075][ T3419] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 51.216939][ T3419] kworker/u8:7: attempt to access beyond end of device [ 51.216939][ T3419] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 51.231317][ T3419] kworker/u8:7: attempt to access beyond end of device [ 51.231317][ T3419] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 51.245645][ T3419] kworker/u8:7: attempt to access beyond end of device [ 51.245645][ T3419] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 51.260446][ T3419] kworker/u8:7: attempt to access beyond end of device [ 51.260446][ T3419] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 51.274868][ T3419] kworker/u8:7: attempt to access beyond end of device [ 51.274868][ T3419] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 51.396983][ T4221] netlink: 36 bytes leftover after parsing attributes in process `syz.4.257'. [ 51.461277][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.106654][ T4243] loop4: detected capacity change from 0 to 2048 [ 52.120626][ T4243] EXT4-fs: Ignoring removed bh option [ 52.155642][ T4243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.298447][ T4241] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.266: corrupted in-inode xattr: e_name out of bounds [ 52.313365][ T4241] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.266: corrupted in-inode xattr: e_name out of bounds [ 52.329670][ T4241] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.266: corrupted in-inode xattr: e_name out of bounds [ 52.358612][ T4241] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.266: corrupted in-inode xattr: e_name out of bounds [ 52.483950][ T3419] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.498923][ T3419] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 52.511525][ T3419] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.511525][ T3419] [ 52.521434][ T3419] EXT4-fs (loop4): Total free blocks count 0 [ 52.527522][ T3419] EXT4-fs (loop4): Free/Dirty block details [ 52.533700][ T3419] EXT4-fs (loop4): free_blocks=2415919104 [ 52.540063][ T3419] EXT4-fs (loop4): dirty_blocks=8224 [ 52.545556][ T3419] EXT4-fs (loop4): Block reservation details [ 52.551608][ T3419] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 52.562824][ T3419] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 52.654867][ T4257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.272'. [ 52.664227][ T4257] bridge_slave_1: left allmulticast mode [ 52.670199][ T4257] bridge_slave_1: left promiscuous mode [ 52.675970][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.701821][ T4257] bridge_slave_0: left allmulticast mode [ 52.707987][ T4257] bridge_slave_0: left promiscuous mode [ 52.714654][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.750476][ T4266] loop4: detected capacity change from 0 to 1024 [ 52.761167][ T4266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.773709][ T4266] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.036364][ T4288] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 53.167635][ T4304] capability: warning: `syz.1.288' uses deprecated v2 capabilities in a way that may be insecure [ 53.178638][ T4304] program syz.1.288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.216874][ T4309] loop1: detected capacity change from 0 to 164 [ 53.302441][ T4315] program syz.1.292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.334400][ T4317] netlink: 1296 bytes leftover after parsing attributes in process `+}[@'. [ 53.344555][ T4317] netlink: '+}[@': attribute type 3 has an invalid length. [ 53.543797][ T4323] loop1: detected capacity change from 0 to 512 [ 53.562215][ T4323] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.295: corrupted in-inode xattr: invalid ea_ino [ 53.576021][ T4323] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.295: couldn't read orphan inode 15 (err -117) [ 53.588676][ T4323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.603179][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.626570][ T4326] loop4: detected capacity change from 0 to 164 [ 53.634529][ T4326] Unable to read rock-ridge attributes [ 53.641504][ T4326] Unable to read rock-ridge attributes [ 53.722899][ T4335] loop4: detected capacity change from 0 to 512 [ 53.730429][ T4335] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 54.178089][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 54.178104][ T29] audit: type=1326 audit(1742911348.104:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f528a3ad169 code=0x0 [ 54.292990][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.335214][ T29] audit: type=1326 audit(1742911348.264:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2b83d169 code=0x7ffc0000 [ 54.359375][ T29] audit: type=1326 audit(1742911348.264:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2b83d169 code=0x7ffc0000 [ 54.382900][ T29] audit: type=1326 audit(1742911348.264:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7faf2b83d169 code=0x7ffc0000 [ 54.406276][ T29] audit: type=1326 audit(1742911348.264:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2b83d169 code=0x7ffc0000 [ 54.431515][ T29] audit: type=1326 audit(1742911348.264:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf2b83d169 code=0x7ffc0000 [ 54.455935][ T29] audit: type=1326 audit(1742911348.264:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2b83d169 code=0x7ffc0000 [ 54.480190][ T29] audit: type=1326 audit(1742911348.264:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf2b83d169 code=0x7ffc0000 [ 54.489246][ T4372] loop1: detected capacity change from 0 to 512 [ 54.503606][ T29] audit: type=1326 audit(1742911348.264:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2b83d169 code=0x7ffc0000 [ 54.503645][ T29] audit: type=1326 audit(1742911348.264:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2b83d169 code=0x7ffc0000 [ 54.541721][ T4372] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.313: Failed to acquire dquot type 1 [ 54.569229][ T4372] EXT4-fs (loop1): 1 truncate cleaned up [ 54.575496][ T4372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.588199][ T4372] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.615088][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.654305][ T4379] FAULT_INJECTION: forcing a failure. [ 54.654305][ T4379] name failslab, interval 1, probability 0, space 0, times 0 [ 54.667199][ T4379] CPU: 1 UID: 0 PID: 4379 Comm: syz.1.315 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 54.667225][ T4379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.667239][ T4379] Call Trace: [ 54.667248][ T4379] [ 54.667258][ T4379] dump_stack_lvl+0xf2/0x150 [ 54.667297][ T4379] dump_stack+0x15/0x1a [ 54.667401][ T4379] should_fail_ex+0x24a/0x260 [ 54.667444][ T4379] should_failslab+0x8f/0xb0 [ 54.667510][ T4379] kmem_cache_alloc_noprof+0x52/0x320 [ 54.667538][ T4379] ? __anon_vma_prepare+0x73/0x310 [ 54.667649][ T4379] ? __alloc_frozen_pages_noprof+0x1bc/0x340 [ 54.667680][ T4379] __anon_vma_prepare+0x73/0x310 [ 54.667747][ T4379] ? do_wp_page+0x100e/0x2340 [ 54.667816][ T4379] do_wp_page+0x1016/0x2340 [ 54.667851][ T4379] ? __rcu_read_lock+0x36/0x50 [ 54.667876][ T4379] handle_mm_fault+0xc63/0x2b00 [ 54.667983][ T4379] exc_page_fault+0x3b9/0x650 [ 54.668107][ T4379] asm_exc_page_fault+0x26/0x30 [ 54.668132][ T4379] RIP: 0033:0x7faf2b6ffbe3 [ 54.668155][ T4379] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 54.668172][ T4379] RSP: 002b:00007faf29ea64a0 EFLAGS: 00010202 [ 54.668187][ T4379] RAX: 0000000000000400 RBX: 00007faf29ea6540 RCX: 00007faf21a87000 [ 54.668277][ T4379] RDX: 00007faf29ea66e0 RSI: 0000000000000011 RDI: 00007faf29ea65e0 [ 54.668288][ T4379] RBP: 00000000000000f9 R08: 000000000000000a R09: 00000000000003bd [ 54.668300][ T4379] R10: 00000000000003cc R11: 00007faf29ea6540 R12: 0000000000000001 [ 54.668311][ T4379] R13: 00007faf2b8d93e0 R14: 0000000000000020 R15: 00007faf29ea65e0 [ 54.668330][ T4379] [ 54.668341][ T4379] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 54.847550][ T4379] loop1: detected capacity change from 0 to 512 [ 54.871946][ T4379] EXT4-fs (loop1): 1 orphan inode deleted [ 54.878204][ T4379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.891403][ T310] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 54.910535][ T4379] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.938894][ T4379] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.015050][ T4393] FAULT_INJECTION: forcing a failure. [ 55.015050][ T4393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.028207][ T4393] CPU: 0 UID: 0 PID: 4393 Comm: syz.1.321 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 55.028231][ T4393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.028242][ T4393] Call Trace: [ 55.028287][ T4393] [ 55.028296][ T4393] dump_stack_lvl+0xf2/0x150 [ 55.028325][ T4393] dump_stack+0x15/0x1a [ 55.028344][ T4393] should_fail_ex+0x24a/0x260 [ 55.028442][ T4393] should_fail+0xb/0x10 [ 55.028478][ T4393] should_fail_usercopy+0x1a/0x20 [ 55.028502][ T4393] strncpy_from_user+0x25/0x230 [ 55.028529][ T4393] ? htab_map_hash+0x15a/0x1d0 [ 55.028557][ T4393] strncpy_from_user_nofault+0x66/0xe0 [ 55.028588][ T4393] bpf_probe_read_user_str+0x2a/0x70 [ 55.028634][ T4393] bpf_prog_1f2a558f99cc9b3e+0x3e/0x40 [ 55.028684][ T4393] bpf_trace_run2+0x104/0x1d0 [ 55.028715][ T4393] ? kernelmode_fixup_or_oops+0x58/0xb0 [ 55.028797][ T4393] ? bpf_obj_get_info_by_fd+0xfaa/0x1e00 [ 55.028830][ T4393] ? bpf_obj_get_info_by_fd+0xfaa/0x1e00 [ 55.028864][ T4393] __traceiter_kfree+0x2b/0x50 [ 55.028907][ T4393] ? bpf_obj_get_info_by_fd+0xfaa/0x1e00 [ 55.028947][ T4393] kfree+0x247/0x2f0 [ 55.028970][ T4393] bpf_obj_get_info_by_fd+0xfaa/0x1e00 [ 55.029098][ T4393] __sys_bpf+0x700/0x7c0 [ 55.029130][ T4393] __x64_sys_bpf+0x43/0x50 [ 55.029195][ T4393] x64_sys_call+0x23da/0x2e10 [ 55.029228][ T4393] do_syscall_64+0xc9/0x1c0 [ 55.029251][ T4393] ? clear_bhb_loop+0x55/0xb0 [ 55.029296][ T4393] ? clear_bhb_loop+0x55/0xb0 [ 55.029328][ T4393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.029361][ T4393] RIP: 0033:0x7faf2b83d169 [ 55.029379][ T4393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.029400][ T4393] RSP: 002b:00007faf29ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.029522][ T4393] RAX: ffffffffffffffda RBX: 00007faf2ba55fa0 RCX: 00007faf2b83d169 [ 55.029533][ T4393] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 000000000000000f [ 55.029544][ T4393] RBP: 00007faf29ea7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.029554][ T4393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.029565][ T4393] R13: 0000000000000000 R14: 00007faf2ba55fa0 R15: 00007ffe631fa998 [ 55.029618][ T4393] [ 55.259751][ T4395] mmap: syz.2.317 (4395) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.390184][ T4409] loop0: detected capacity change from 0 to 512 [ 55.397220][ T4409] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.409623][ T4409] EXT4-fs (loop0): 1 truncate cleaned up [ 55.415891][ T4409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.429034][ T4409] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.457415][ T4401] loop3: detected capacity change from 0 to 512 [ 55.484728][ T4401] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.322: corrupted in-inode xattr: invalid ea_ino [ 55.501441][ T4401] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.322: couldn't read orphan inode 15 (err -117) [ 55.528990][ T4405] loop4: detected capacity change from 0 to 512 [ 55.538960][ T4405] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.548280][ T4405] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 55.582514][ T4401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.587532][ T4405] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 55.617625][ T4405] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 55.627790][ T4406] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 55.649404][ T4405] System zones: 0-2, 18-18, 34-34 [ 55.659895][ T4405] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 55.724385][ T4405] EXT4-fs (loop4): 1 truncate cleaned up [ 55.733530][ T4405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.881272][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 56.057771][ T4436] loop1: detected capacity change from 0 to 512 [ 56.076690][ T4436] EXT4-fs (loop1): 1 orphan inode deleted [ 56.083753][ T4436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.097827][ T291] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 56.110980][ T4436] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.122858][ T4436] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.170852][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.215091][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.306653][ T4442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'. [ 56.330554][ T4449] loop3: detected capacity change from 0 to 128 [ 56.364215][ T4449] EXT4-fs: test_dummy_encryption option not supported [ 56.421346][ T4442] loop1: detected capacity change from 0 to 512 [ 56.443241][ T4455] bridge_slave_1: Device is already in use. [ 56.486412][ T4442] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.524229][ T4442] EXT4-fs (loop1): 1 truncate cleaned up [ 56.537134][ T4442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.552190][ T4442] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.578657][ T4460] netlink: 172 bytes leftover after parsing attributes in process `syz.4.339'. [ 56.872950][ T4475] loop0: detected capacity change from 0 to 512 [ 56.879983][ T4475] EXT4-fs: Ignoring removed oldalloc option [ 56.899552][ T4475] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.345: Parent and EA inode have the same ino 15 [ 56.927417][ T4475] EXT4-fs (loop0): Remounting filesystem read-only [ 56.934019][ T4475] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 56.947146][ T4475] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 56.957252][ T4475] EXT4-fs (loop0): 1 orphan inode deleted [ 56.986224][ T4475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.015859][ T4475] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 57.042560][ T4475] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.169659][ T4475] sg_write: data in/out 209152/46 bytes for SCSI command 0xf2-- guessing data in; [ 57.169659][ T4475] program syz.0.345 not setting count and/or reply_len properly [ 57.263564][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 57.266328][ T4500] syz.2.352 uses obsolete (PF_INET,SOCK_PACKET) [ 57.481380][ T4518] loop4: detected capacity change from 0 to 512 [ 57.488517][ T4518] EXT4-fs: Ignoring removed oldalloc option [ 57.499971][ T4518] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.363: Parent and EA inode have the same ino 15 [ 57.516004][ T4518] EXT4-fs (loop4): Remounting filesystem read-only [ 57.522968][ T4518] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 57.534921][ T4518] EXT4-fs (loop4): 1 orphan inode deleted [ 57.541409][ T4518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.555420][ T4518] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 57.562929][ T4518] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.639612][ T4525] lo: entered promiscuous mode [ 57.644460][ T4525] lo: entered allmulticast mode [ 57.676720][ T4527] loop4: detected capacity change from 0 to 512 [ 57.684361][ T4527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.702291][ T4527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.715748][ T4527] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.731566][ T4527] capability: warning: `syz.4.366' uses 32-bit capabilities (legacy support in use) [ 57.780427][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.004934][ T4547] ================================================================== [ 58.013084][ T4547] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 58.020857][ T4547] [ 58.023227][ T4547] write to 0xffff888103665460 of 8 bytes by task 4545 on cpu 1: [ 58.030887][ T4547] mas_wr_store_entry+0x1222/0x23f0 [ 58.036138][ T4547] mas_store_prealloc+0x6bf/0x960 [ 58.041192][ T4547] commit_merge+0x441/0x740 [ 58.045742][ T4547] vma_expand+0x211/0x360 [ 58.050111][ T4547] vma_merge_new_range+0x2da/0x340 [ 58.055254][ T4547] mmap_region+0x7e0/0x1620 [ 58.059814][ T4547] do_mmap+0x98a/0xc30 [ 58.063935][ T4547] vm_mmap_pgoff+0x16d/0x2d0 [ 58.068542][ T4547] ksys_mmap_pgoff+0xd0/0x330 [ 58.073261][ T4547] x64_sys_call+0x1945/0x2e10 [ 58.077989][ T4547] do_syscall_64+0xc9/0x1c0 [ 58.082534][ T4547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.088652][ T4547] [ 58.092234][ T4547] read to 0xffff888103665460 of 8 bytes by task 4547 on cpu 0: [ 58.102061][ T4547] mtree_range_walk+0x1b4/0x460 [ 58.107201][ T4547] mas_walk+0x16e/0x320 [ 58.111439][ T4547] lock_vma_under_rcu+0x95/0x270 [ 58.116920][ T4547] exc_page_fault+0x150/0x650 [ 58.121812][ T4547] asm_exc_page_fault+0x26/0x30 [ 58.127211][ T4547] [ 58.129579][ T4547] value changed: 0x00007f60ed30dfff -> 0x00007f60ed2ecfff [ 58.136783][ T4547] [ 58.139109][ T4547] Reported by Kernel Concurrency Sanitizer on: [ 58.145369][ T4547] CPU: 0 UID: 0 PID: 4547 Comm: syz.4.373 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 58.155760][ T4547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 58.165847][ T4547] ==================================================================