last executing test programs: 6.227729329s ago: executing program 1 (id=169): r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = semget(0x2, 0x1, 0x486) semop(r4, &(0x7f0000000080)=[{0x2, 0x3, 0x1800}, {0x4, 0x7, 0x800}, {0x4, 0x5e, 0x1000}], 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x4c, 0x1a, 0x138, 0x73, 0x208, 0x258, 0x258, 0x208, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'wg2\x00', 'pim6reg0\x00'}, 0x0, 0x118, 0x138, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1000000, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2, @loopback, [], [], 'nr0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 4.936493707s ago: executing program 1 (id=190): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) geteuid() ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x20004004) recvfrom$inet6(r0, &(0x7f0000000280)=""/140, 0x8c, 0x40000002, &(0x7f0000000000)={0xa, 0x4e27, 0x4, @local, 0xa215}, 0x1c) 4.018808727s ago: executing program 1 (id=202): inotify_init1(0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x141000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000034000000000000000000000095000000000000008520000005000000181b0000", @ANYRES32=r0, @ANYBLOB="0000000000266c17c603000000de000000000000008eb45aa4c068cdcb897af29b4c8699"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x1, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[r0, r0, r0, r0], &(0x7f0000000300)=[{0x5, 0x2, 0xd, 0x8}, {0x5, 0x1, 0xa, 0x4}, {0x1, 0x2, 0x2, 0x9}, {0x4, 0x4, 0xd, 0x9}, {0x5, 0x4, 0xb, 0x5}, {0x5, 0x5, 0x5, 0x8}, {0x5, 0x4, 0x1, 0x8}], 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001080)=[{&(0x7f0000001200)=""/130, 0x82}, {&(0x7f0000001800)=""/4093, 0xffd}], 0x2, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000400000000000008000000180001801400020073797a5f74756e0000000000000000001c0002800400010014000380"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x18) syz_usb_connect(0x6, 0x36, &(0x7f00000005c0)=ANY=[], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) readv(r7, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) signalfd4(r0, &(0x7f0000000600)={[0x6]}, 0x8, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='xen_mmu_set_p4d\x00', r1, 0x0, 0x7f}, 0x18) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r10, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.603514018s ago: executing program 3 (id=241): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x20000003, 0x0, 0x1ff}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r3], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x58, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1ff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000c1}, 0x400c010) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r4], &(0x7f0000001300)='GPL\x00', 0x0, 0xfffffffffffffd7c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="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"], 0x38}}, 0x0) 1.444410511s ago: executing program 3 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="38010000100023060000000000000000fc000000000000000000000000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900"/237], 0x138}}, 0x0) 1.442993261s ago: executing program 4 (id=245): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) set_robust_list(&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x5, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x7, r0}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x0, 0x80, 0x4, 0x615}, {0x5, 0x6, 0xfd, 0x100}, {0x401, 0x6, 0xc, 0x9}, {0x17, 0x1, 0x9, 0x7}, {0x0, 0x0, 0x3, 0xf8}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000000001865fae74656c18800"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6}, 0x57) gettid() r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x5607, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x7fff}}, './file0\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x59, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.391847684s ago: executing program 3 (id=248): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, 0x625a, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmctl$SHM_LOCK(0x0, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fgetxattr(r2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0x8000000000}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010004b04000000000000000500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677265001c00028006000e0001000000060003008000000008000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$sock_int(r5, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) 1.31681958s ago: executing program 2 (id=250): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000059eb00000000000000000000181200", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000000000000000007b8af8ff00000000bfa200000000000007020000f8fffff8b703000008f60000b704000001000000850000004300000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRESDEC=r1, @ANYRES64=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x14, &(0x7f00000010c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040002000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000e265fe845c73e842a2000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000000a780)=@newtfilter={0x2c, 0x2c, 0x605, 0x470bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x5, 0xffe0}, {}, {0x5, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0x20004084) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRESHEX=r4, @ANYRES16=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 1.311756951s ago: executing program 0 (id=251): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x3, 0x1a, 0x5c, 0x64, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x2}, @noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x8d, 0x3, 0x1, 0x1, 0x3, 0x4}, 0x1, {0x510}}}, {0x8, 0x22eb, 0x4, {{0xb, 0x2, 0x10, 0x1, 0x0, 0x3, 0x4, 0x7}, 0x2, {0x3, 0x6, 0x3, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1}}}}}}}}, 0x0) 1.290647982s ago: executing program 0 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000300)='./file0\x00', 0x21488b, &(0x7f00000001c0)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16=0x0, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8e8d089b806053c44bbc71da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec88", @ANYRESDEC], 0x1, 0x660, &(0x7f0000000840)="$eJzs3V1rG+n5x/HfyLKs+A/hT1uWEPJwJ+mCQ1NFkjcOIoV2OhrZs5U0YkZubSgs6cZeQuRsm6TQ+GTJSR9g+wb2bE+W0hdR6HHfRQ8LS3tW6MmUebJsS7LkRLF3t9+PiefWzDVzX/eMMxejh5EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAsp1mt1iy1ve7mlpnMaQZ+54Tl6dYWdTtt3B7T1RdH+pWs+J/KZV1KZ136znDxO/Gvm7qSPrqicjwpa///3vn/B98uFvL1T0jodSiSZthmKUvSmOcv9588HAx2ns05ka8AFWYIWne7Xuh7HXvdNV7om8baWvXuRis0La+kcDvsux3jBG6h7wdmxbltao3GqnEr2/5md71pt9185v3v16vVNfP+UrZn775fCZ0Nr932uutJTLw4jrlvPv15GuLaHWN2Hw92VqclGQfVpgYtzXDo69V6vVar12tr9xr37lerxZEZ1WM0EjH3P1p8zczv5A28oUJc//9uSW2V1dWmtmTG/jhqKpCvzoTlmbz+v3vXPbHfw/U/r/KXhosvK6n/19JH1ybV/3GZlJX9Hrs0XnHCCF7n57leal9P9FADDbSjZ/PZ7vX5Zfh2f9alouQplC9PHdlalyuTzTFqaE1rquoDbailUEYteWrLVahtherLVSc5JoFc2UkrtiJHt2VUU0MNrcrIVUXb8rWprtbVlK1/R1G0q8fJfl89IUflQbVZguonBE2q/7/4JM16av23RP3/RsvPX7PEAOcuyq7/T+n628kGAAAAAAC8DVby7LuVvHZ/VVKkltd2q+edFgAAAAAAmKPklf8r8WQxbl2VNeH6Pzr73AAAAAAAwHxYyWfsLEnLyZv6reEnoWZ5E8DCGaQIAAAAAADeUPL6/7WSFCX3Xrsu61TX/wAAAAAA4Gvg94fusV/M77Eb5S/rFySFvSXrL/9cUrBoveptfdfas+Ml9l4WM/IOgH7rsnUxu1FvMilJSh457hXrahqU3QTTylf/cnfavf6t4FgCpYX86YtpCawVs0f6VDfSmBvldPpov6BkSdrLcstruxXHbz+oybYvFvruVv/XTx//RgoOxrn7eLBT+fDjwaMkl1fxrFd7cR6fHEmnMC2XF8r2xdWxI76gVt7lH7qdZSvpt5qPf0H2XuFwR7ON/7e6mcbcXE6ny/vK9kQy/nI8/lolOWTD0cej+uxPw9HXjo983IGYkEU5yeJWGnNr5VY6yfPLsvjeglSvHD8GpfhPcLgv6oezmL4vrH+N7IspWcT7YjXO4q/xhoZ/CUeyWD1dFiNHBADOy+6wCiU3MR+9x/7xuvs6Z7np1f1HR3t58VmUfuBwQSpmr02c2EtZ8Rl9Jdm2SkpOrMXLB2fZvRv5Gb2a1ZWyJpzRq29Q3eK+/jz8DqQs7ZG68p8oih7Ukn7/eNBvWlU/j1f4fGK/Ybu+EI/w7ou9XyY3wI99tPPRztN6fXWt+l61eq+uxWQY2YTaAwAYY/p37EyNsN47uKp+9I9309aRivetg7cUVPShPtZAj3Qn/wqB6+O3unzobQh3Rq9a49gL0vHYmu5MvKpLamka+7Pt0g/ToOT3ovJVjlbq4XZX3+oxAADgrN1sZI0jdTh95nnW+n8nue6WtHL50HX3wTX7sVp+/BuCJ9Xc2hntAQAA/ve4wZfWcv93VhB4vQ9qjUbN7m+4JvCdn5jAa667xuv23cDZsLvrrukFft93/LbpBVrymm5ows1ezw/6puUHpueH3pZpeW3XZF/9Hrodu9v3nLDXdu3QNY7f7dtO3zS90DG9zR+3vXDDDZKVw57reC3Psfue3zWhvxk4bsWY0HUPBXpNt9v3Wl7c7Jpe4HXsYNv81G9vdlzTdEMn8Hp9P91g3pfXbflBJ9lsRdGpv+gQAIBvoucv9588HAx2nk1qJFf0U2KGjdK4DeZ98YozAABfDaNVeqLymSQEAAAAAAAAAAAAAAAAAAAAAABGTP9I3ykbi+M+LCgdzPnVxZm2Y2neiZ2mUXj91f92QsyFgzn57j8c8+ocRqq0UZz/li+c5mOjc2j8YDfdoxNj4oVjFy0dHIvi/P87xI2nX0xYFEVRdPLqS0f3YemkAR5tFCU9K73BITif8xGAs/PfAAAA///qND66") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000004c0)=""/144, 0xc7) 1.222774187s ago: executing program 0 (id=253): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x7, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000001c27c390ffd898f5dbc00240", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.18531157s ago: executing program 2 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x68, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) 1.18048448s ago: executing program 0 (id=255): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x0, 0x2, 0x6, 0xfffffffffffffffe}) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4075, 0xfeb}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x1000000}) 989.984965ms ago: executing program 2 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x45f2c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (fail_nth: 3) 989.230265ms ago: executing program 1 (id=257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xd9, 0x50, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x18002, 0x7ffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x4008090) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x3a) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="f7792500000180000000000000001c000380080003000000800008000100fcffffff08000200090000000800028004000400100004800c0007800800030004000000"], 0x48}, 0x1, 0x0, 0x0, 0x4050}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r3, &(0x7f0000000440)=[{&(0x7f0000000180)="aa", 0x1}], 0x1, 0x7fff, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) sendfile(r6, r3, &(0x7f0000000200)=0xffffffffffffff1a, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendfile(r3, r4, 0x0, 0x100001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000000000084000000080000001800000000000000840000000000000062"], 0x28}, 0x41) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) 516.740501ms ago: executing program 2 (id=258): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="0000000000000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000"], 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x38, r4, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r5, 0x0, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0xd80, 0x0) bind$rds(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) close_range(r0, r5, 0x0) 516.347771ms ago: executing program 1 (id=259): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x2, 0x1, 0x0, 0x0, 0xffffffff}, 0x45) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) socket$inet6(0xa, 0x3, 0x88) socket(0x10, 0x803, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000200)="115150f529aaf0fa99a8c82fad2b18a3f932c8fed02722c381d7b0ba1fef186b135ae148bbb7aa287034a291b5a79f33211faec90a2a19048aeb", 0x3a}, {0x0}, {0x0}], 0x3) socket$unix(0x1, 0x1, 0x0) 505.563091ms ago: executing program 4 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0x1ed7cfef}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000900)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad194301887b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c41f021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4ebe299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b95491ed", @ANYRES8=0x0], 0x3, 0x7dc, &(0x7f0000000d80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 437.533607ms ago: executing program 3 (id=261): creat(&(0x7f0000000040)='./file0\x00', 0x180) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x8001, 0x9}) 418.356368ms ago: executing program 2 (id=262): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 418.044898ms ago: executing program 4 (id=263): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@struct={0x9, 0x3, 0x0, 0x4, 0x1, 0x6, [{0xb, 0x5, 0x10}, {0x6, 0x0, 0x8}, {0xa, 0x3, 0x8000}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0x10}, {0x9, 0x1}, {0x10, 0x3}, {0xa, 0x5}, {0x4, 0x1}]}]}, {0x0, [0x61]}}, &(0x7f0000000380)=""/89, 0x87, 0x59, 0x0, 0x1ff, 0x0, @void, @value}, 0x28) 399.133069ms ago: executing program 2 (id=264): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) semop(0x0, &(0x7f0000000080)=[{0x2, 0x3, 0x1800}, {0x4, 0x7, 0x800}, {0x4, 0x5e, 0x1000}], 0x3) 355.940712ms ago: executing program 4 (id=265): r0 = syz_io_uring_setup(0x38, &(0x7f0000000640)={0x0, 0xadde, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) 355.374993ms ago: executing program 3 (id=266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xd9, 0x50, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x18002, 0x7ffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4008090) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x3a) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r1], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="f7792500000180000000000000001c000380080003000000800008000100fcffffff08000200090000000800028004000400100004800c0007800800030004000000"], 0x48}, 0x1, 0x0, 0x0, 0x4050}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f0000000440)=[{&(0x7f0000000180)="aa", 0x1}], 0x1, 0x7fff, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) sendfile(r7, r4, &(0x7f0000000200)=0xffffffffffffff1a, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sendfile(r4, r5, 0x0, 0x100001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r8}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000000000084000000080000001800000000000000840000000000000062"], 0x28}, 0x41) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) 340.185394ms ago: executing program 4 (id=267): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x280, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0xc0, 0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@broadcast, @broadcast, 0xff000000, 0xffffff00, 'bond_slave_1\x00', 'vlan0\x00', {0xff}, {0xff}, 0x6, 0x1, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x23, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) io_setup(0x227c, &(0x7f0000000400)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x1000000000007}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@struct={0x9, 0x3, 0x0, 0x4, 0x1, 0x6, [{0xb, 0x5, 0x10}, {0x6, 0x0, 0x8}, {0xa, 0x3, 0x8000}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0x10}, {0x9, 0x1}, {0x10, 0x3}, {0xa, 0x5}, {0x4, 0x1}]}]}, {0x0, [0x61]}}, &(0x7f0000000380)=""/89, 0x87, 0x59, 0x0, 0x1ff, 0x0, @void, @value}, 0x28) 328.382504ms ago: executing program 1 (id=268): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000010000000000000008000900", 0x20) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70a0000000000007b8af8ff00000002bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000959951e156cf8f206d1ebab39fca933c4f5ca9a259d485a246bdf72981da16595ff0de2f94240039b1bd1b478d802b02439f26b839d89903b7bd41ccfbc6249699655347808b09f0c0d2634b"], 0x0, 0x0, 0xfffffffffffffecd, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r5, 0x1e76, 0x0, 0x6, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_tables_targets\x00') socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mlockall(0x3) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/197, 0xc5}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r9, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000080)="441f0810000000e8c94ef56491ee54be0e1c2074ed27", 0x16) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mknod(0x0, 0x10, 0x6) 293.345017ms ago: executing program 0 (id=269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), 0x0}, 0x20) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000300)='./file0\x00', 0x21488b, &(0x7f00000001c0)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16=0x0, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8e8d089b806053c44bbc71da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec88", @ANYRESDEC], 0x1, 0x660, &(0x7f0000000840)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000004c0)=""/144, 0xc7) 203.954024ms ago: executing program 4 (id=270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xd9, 0x50, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x18002, 0x7ffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4008090) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x3a) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="f7792500000180000000000000001c000380080003000000800008000100fcffffff08000200090000000800028004000400100004800c0007800800030004000000"], 0x48}, 0x1, 0x0, 0x0, 0x4050}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r3, &(0x7f0000000440)=[{&(0x7f0000000180)="aa", 0x1}], 0x1, 0x7fff, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) sendfile(r6, r3, &(0x7f0000000200)=0xffffffffffffff1a, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendfile(r3, r4, 0x0, 0x100001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000000000084000000080000001800000000000000840000000000000062"], 0x28}, 0x41) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) 23.292787ms ago: executing program 0 (id=271): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r0, &(0x7f0000001fc0)=""/4086, 0xff6) 0s ago: executing program 3 (id=272): unshare(0x20400) flistxattr(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone3(&(0x7f0000000280)={0x8000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x1d}, &(0x7f0000000180)=""/4, 0x4, &(0x7f00000001c0)=""/67, &(0x7f0000000240)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) r1 = getpgid(r0) syz_open_procfs(r1, &(0x7f0000000300)='net/xfrm_stat\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) open(&(0x7f0000000980)='./file0\x00', 0x60840, 0x14) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000300)='.\x00', 0x400006c6) r3 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000400)='./file0\x00', r3, &(0x7f0000000440)='./file1\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x30000001}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x86580, 0x28, 0x16}, 0x18) getdents64(r6, &(0x7f0000001fc0)=""/4086, 0xff6) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 18.510906][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 18.510924][ T29] audit: type=1400 audit(1739427274.006:76): avc: denied { transition } for pid=3178 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.514942][ T29] audit: type=1400 audit(1739427274.006:77): avc: denied { noatsecure } for pid=3178 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.517617][ T29] audit: type=1400 audit(1739427274.006:78): avc: denied { write } for pid=3178 comm="sh" path="pipe:[1656]" dev="pipefs" ino=1656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 18.520801][ T29] audit: type=1400 audit(1739427274.006:79): avc: denied { rlimitinh } for pid=3178 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.523641][ T29] audit: type=1400 audit(1739427274.006:80): avc: denied { siginh } for pid=3178 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.549613][ T29] audit: type=1400 audit(1739427276.046:81): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 27.178837][ T29] audit: type=1400 audit(1739427282.676:82): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.179856][ T3288] cgroup: Unknown subsys name 'net' [ 27.201590][ T29] audit: type=1400 audit(1739427282.676:83): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.228944][ T29] audit: type=1400 audit(1739427282.706:84): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.354994][ T3288] cgroup: Unknown subsys name 'cpuset' [ 27.361193][ T3288] cgroup: Unknown subsys name 'rlimit' [ 27.531557][ T29] audit: type=1400 audit(1739427283.026:85): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.554884][ T29] audit: type=1400 audit(1739427283.026:86): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.575361][ T29] audit: type=1400 audit(1739427283.026:87): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.595803][ T29] audit: type=1400 audit(1739427283.026:88): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.602961][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.616110][ T29] audit: type=1400 audit(1739427283.036:89): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.649624][ T29] audit: type=1400 audit(1739427283.036:90): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.673019][ T29] audit: type=1400 audit(1739427283.126:91): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.702174][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.572508][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 29.616864][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 29.680749][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.691483][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 29.748724][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.764151][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.771323][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.778602][ T3300] bridge_slave_0: entered allmulticast mode [ 29.785104][ T3300] bridge_slave_0: entered promiscuous mode [ 29.791450][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.798542][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.805675][ T3306] bridge_slave_0: entered allmulticast mode [ 29.812151][ T3306] bridge_slave_0: entered promiscuous mode [ 29.826550][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.833624][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.840854][ T3300] bridge_slave_1: entered allmulticast mode [ 29.847279][ T3300] bridge_slave_1: entered promiscuous mode [ 29.853343][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.860440][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.867585][ T3306] bridge_slave_1: entered allmulticast mode [ 29.874136][ T3306] bridge_slave_1: entered promiscuous mode [ 29.908343][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.915503][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.922594][ T3304] bridge_slave_0: entered allmulticast mode [ 29.929034][ T3304] bridge_slave_0: entered promiscuous mode [ 29.951709][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.958803][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.966014][ T3304] bridge_slave_1: entered allmulticast mode [ 29.972267][ T3304] bridge_slave_1: entered promiscuous mode [ 29.984328][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.997128][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.016564][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.033052][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.046671][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.053722][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.061073][ T3298] bridge_slave_0: entered allmulticast mode [ 30.067495][ T3298] bridge_slave_0: entered promiscuous mode [ 30.075006][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.093690][ T3300] team0: Port device team_slave_0 added [ 30.099567][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.106731][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.113900][ T3298] bridge_slave_1: entered allmulticast mode [ 30.120190][ T3298] bridge_slave_1: entered promiscuous mode [ 30.127179][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.145721][ T3306] team0: Port device team_slave_0 added [ 30.151973][ T3300] team0: Port device team_slave_1 added [ 30.180334][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.187509][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.194769][ T3302] bridge_slave_0: entered allmulticast mode [ 30.201129][ T3302] bridge_slave_0: entered promiscuous mode [ 30.208007][ T3306] team0: Port device team_slave_1 added [ 30.213856][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.220939][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.228197][ T3302] bridge_slave_1: entered allmulticast mode [ 30.234580][ T3302] bridge_slave_1: entered promiscuous mode [ 30.245980][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.252934][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.278912][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.290702][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.300429][ T3304] team0: Port device team_slave_0 added [ 30.319599][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.326585][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.352701][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.364516][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.374188][ T3304] team0: Port device team_slave_1 added [ 30.385279][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.392301][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.418232][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.430141][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.442388][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.469064][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.476113][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.502047][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.518660][ T3298] team0: Port device team_slave_0 added [ 30.524807][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.531783][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.557681][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.570863][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.577949][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.603878][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.620277][ T3298] team0: Port device team_slave_1 added [ 30.652724][ T3302] team0: Port device team_slave_0 added [ 30.659666][ T3302] team0: Port device team_slave_1 added [ 30.665608][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.672547][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.698575][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.713813][ T3300] hsr_slave_0: entered promiscuous mode [ 30.719775][ T3300] hsr_slave_1: entered promiscuous mode [ 30.740263][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.747294][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.773416][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.791106][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.798176][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.824142][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.837309][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.844293][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.870205][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.892275][ T3306] hsr_slave_0: entered promiscuous mode [ 30.898486][ T3306] hsr_slave_1: entered promiscuous mode [ 30.904484][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.912126][ T3306] Cannot create hsr debugfs directory [ 30.928214][ T3304] hsr_slave_0: entered promiscuous mode [ 30.934116][ T3304] hsr_slave_1: entered promiscuous mode [ 30.940168][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.947753][ T3304] Cannot create hsr debugfs directory [ 30.980838][ T3302] hsr_slave_0: entered promiscuous mode [ 30.986865][ T3302] hsr_slave_1: entered promiscuous mode [ 30.992619][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.000203][ T3302] Cannot create hsr debugfs directory [ 31.011941][ T3298] hsr_slave_0: entered promiscuous mode [ 31.017997][ T3298] hsr_slave_1: entered promiscuous mode [ 31.023814][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.031448][ T3298] Cannot create hsr debugfs directory [ 31.215761][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.224591][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.233202][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.243981][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.263912][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.272538][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.285786][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.296184][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.316163][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.325034][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.348944][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.366190][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.391631][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.400453][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.417337][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.425886][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.437317][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.463259][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.471779][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.480520][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.490074][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.513090][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.541396][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.551370][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.558543][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.574870][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.582033][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.608387][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.617582][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.643199][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.655665][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.662770][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.676413][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.683516][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.706390][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.714182][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.729187][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.736337][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.748761][ T1824] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.755942][ T1824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.773266][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.787438][ T1824] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.794554][ T1824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.809166][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.816321][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.835084][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.872842][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.907652][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.914829][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.929764][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.936881][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.965568][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.021895][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.039547][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.130623][ T3306] veth0_vlan: entered promiscuous mode [ 32.160800][ T3306] veth1_vlan: entered promiscuous mode [ 32.172902][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.191143][ T3300] veth0_vlan: entered promiscuous mode [ 32.202200][ T3300] veth1_vlan: entered promiscuous mode [ 32.216002][ T3304] veth0_vlan: entered promiscuous mode [ 32.228240][ T3306] veth0_macvtap: entered promiscuous mode [ 32.237295][ T3306] veth1_macvtap: entered promiscuous mode [ 32.249948][ T3304] veth1_vlan: entered promiscuous mode [ 32.260046][ T3302] veth0_vlan: entered promiscuous mode [ 32.274675][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.284159][ T3300] veth0_macvtap: entered promiscuous mode [ 32.297805][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.310770][ T3304] veth0_macvtap: entered promiscuous mode [ 32.318428][ T3300] veth1_macvtap: entered promiscuous mode [ 32.328737][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.337751][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.346562][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.355340][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.366497][ T3304] veth1_macvtap: entered promiscuous mode [ 32.377263][ T3302] veth1_vlan: entered promiscuous mode [ 32.386663][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.397176][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.407649][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.422409][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.432896][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.443451][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.452590][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.463193][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.473108][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.483590][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.494546][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.502828][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.513303][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.523176][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.533784][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.544509][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.555380][ T3300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.564125][ T3300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.572873][ T3300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.581593][ T3300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.594187][ T3298] veth0_vlan: entered promiscuous mode [ 32.608930][ T3302] veth0_macvtap: entered promiscuous mode [ 32.616233][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.625082][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.633802][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.642563][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.653286][ T3298] veth1_vlan: entered promiscuous mode [ 32.667841][ T3302] veth1_macvtap: entered promiscuous mode [ 32.677740][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 32.677753][ T29] audit: type=1400 audit(1739427288.176:110): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.TCyVYH/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.709574][ T29] audit: type=1400 audit(1739427288.176:111): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.713103][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.731666][ T29] audit: type=1400 audit(1739427288.176:112): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.TCyVYH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.742133][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.767345][ T29] audit: type=1400 audit(1739427288.176:113): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.777101][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.777124][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.777134][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.777146][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.778449][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.799032][ T29] audit: type=1400 audit(1739427288.176:114): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.TCyVYH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.873661][ T29] audit: type=1400 audit(1739427288.176:115): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.TCyVYH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.901096][ T29] audit: type=1400 audit(1739427288.176:116): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.925181][ T29] audit: type=1400 audit(1739427288.426:117): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.948191][ T29] audit: type=1400 audit(1739427288.426:118): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="gadgetfs" ino=3798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.972072][ T3298] veth0_macvtap: entered promiscuous mode [ 32.973059][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.995391][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.998757][ T29] audit: type=1400 audit(1739427288.496:119): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.005914][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.005929][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.050350][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.060223][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.070700][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.084103][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.098899][ T3298] veth1_macvtap: entered promiscuous mode [ 33.109887][ T3302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.118754][ T3302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.127556][ T3302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.136325][ T3302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.152192][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.162665][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.172525][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.183059][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.192931][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.203505][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.213358][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.223801][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.236350][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.275435][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.285942][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.295864][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.306307][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.316357][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.326854][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.336708][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.347149][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.357706][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.365961][ T3298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.374716][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.383418][ T3298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.392153][ T3298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.494625][ T3451] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7'. [ 33.557857][ T3458] pim6reg: entered allmulticast mode [ 33.580976][ T3458] pim6reg: left allmulticast mode [ 33.604416][ T3462] hub 2-0:1.0: USB hub found [ 33.604527][ T3462] hub 2-0:1.0: 8 ports detected [ 33.741520][ T3475] loop1: detected capacity change from 0 to 1024 [ 33.753153][ T3475] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 33.764289][ T3475] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 33.776340][ T3475] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 33.791153][ T3475] EXT4-fs (loop1): invalid journal inode [ 33.798473][ T3475] EXT4-fs (loop1): can't get journal size [ 33.806078][ T3475] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.14: blocks 2-2 from inode overlap system zone [ 33.821380][ T3475] EXT4-fs (loop1): failed to initialize system zone (-117) [ 33.828923][ T3475] EXT4-fs (loop1): mount failed [ 34.017259][ T3483] loop3: detected capacity change from 0 to 764 [ 34.055957][ T3483] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 34.149255][ T3488] loop2: detected capacity change from 0 to 1024 [ 34.178423][ T3488] ======================================================= [ 34.178423][ T3488] WARNING: The mand mount option has been deprecated and [ 34.178423][ T3488] and is ignored by this kernel. Remove the mand [ 34.178423][ T3488] option from the mount to silence this warning. [ 34.178423][ T3488] ======================================================= [ 34.293043][ T3488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.310604][ T3488] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.366007][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.373589][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.384609][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.392044][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.756207][ T3506] Zero length message leads to an empty skb [ 35.270747][ T3510] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 35.282783][ T3510] bond0: (slave lo): Error: Device can not be enslaved while up [ 35.314196][ T3488] syz.2.20 (3488) used greatest stack depth: 10712 bytes left [ 35.332857][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.366121][ T3512] loop3: detected capacity change from 0 to 1024 [ 35.410370][ T3512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.416835][ T3515] loop2: detected capacity change from 0 to 1024 [ 35.428936][ T3512] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.492229][ T3512] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 35.496436][ T3515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.523075][ T3515] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.540043][ T3512] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 35.542274][ T3515] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 35.552389][ T3512] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.552389][ T3512] [ 35.577108][ T3512] EXT4-fs (loop3): Total free blocks count 0 [ 35.583115][ T3512] EXT4-fs (loop3): Free/Dirty block details [ 35.589057][ T3512] EXT4-fs (loop3): free_blocks=4293918720 [ 35.594844][ T3512] EXT4-fs (loop3): dirty_blocks=16 [ 35.596417][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.599950][ T3512] EXT4-fs (loop3): Block reservation details [ 35.599965][ T3512] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 35.607406][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.636105][ T3515] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 35.648615][ T3515] EXT4-fs (loop2): This should not happen!! Data will be lost [ 35.648615][ T3515] [ 35.658332][ T3515] EXT4-fs (loop2): Total free blocks count 0 [ 35.664345][ T3515] EXT4-fs (loop2): Free/Dirty block details [ 35.670358][ T3515] EXT4-fs (loop2): free_blocks=4293918720 [ 35.676181][ T3515] EXT4-fs (loop2): dirty_blocks=16 [ 35.681302][ T3515] EXT4-fs (loop2): Block reservation details [ 35.687446][ T3515] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 35.696000][ T3524] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 35.715383][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.722821][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.789459][ T3515] syz.2.28 (3515) used greatest stack depth: 9752 bytes left [ 35.789781][ T3522] syz_tun: entered allmulticast mode [ 35.846777][ T3526] syz_tun: left allmulticast mode [ 35.905106][ T3528] usb usb6: usbfs: process 3528 (syz.2.29) did not claim interface 0 before use [ 35.945718][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.968091][ T3531] Illegal XDP return value 1583112133 on prog (id 11) dev N/A, expect packet loss! [ 36.028039][ T3536] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.095582][ T3540] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.33'. [ 36.122749][ T3536] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.33'. [ 36.179260][ T3542] hub 2-0:1.0: USB hub found [ 36.195594][ T3542] hub 2-0:1.0: 8 ports detected [ 36.256422][ T3546] SELinux: syz.0.37 (3546) set checkreqprot to 1. This is no longer supported. [ 36.274546][ T3546] lo speed is unknown, defaulting to 1000 [ 36.282690][ T3546] lo speed is unknown, defaulting to 1000 [ 36.293483][ T3546] lo speed is unknown, defaulting to 1000 [ 36.314661][ T3548] process 'syz.4.39' launched './file1' with NULL argv: empty string added [ 36.399090][ T3546] infiniband syz0: set active [ 36.403987][ T3546] infiniband syz0: added lo [ 36.408664][ T3374] lo speed is unknown, defaulting to 1000 [ 36.449060][ T3554] syz_tun: entered allmulticast mode [ 36.458481][ T3554] syz_tun: left allmulticast mode [ 36.484141][ T3557] loop2: detected capacity change from 0 to 1024 [ 36.497950][ T3546] RDS/IB: syz0: added [ 36.502484][ T3546] smc: adding ib device syz0 with port count 1 [ 36.510779][ T3546] smc: ib device syz0 port 1 has pnetid [ 36.516810][ T3374] lo speed is unknown, defaulting to 1000 [ 36.527176][ T3557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.528641][ T3546] lo speed is unknown, defaulting to 1000 [ 36.614359][ T3557] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.642278][ T3546] lo speed is unknown, defaulting to 1000 [ 36.669673][ T3557] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 36.694460][ T3557] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 36.706804][ T3557] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.706804][ T3557] [ 36.716574][ T3557] EXT4-fs (loop2): Total free blocks count 0 [ 36.722645][ T3557] EXT4-fs (loop2): Free/Dirty block details [ 36.728625][ T3557] EXT4-fs (loop2): free_blocks=4293918720 [ 36.734399][ T3557] EXT4-fs (loop2): dirty_blocks=16 [ 36.739517][ T3557] EXT4-fs (loop2): Block reservation details [ 36.745589][ T3557] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 36.769122][ T3567] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.906508][ T3546] lo speed is unknown, defaulting to 1000 [ 37.042788][ T3569] smc: net device bond0 applied user defined pnetid SYZ0 [ 37.060949][ T3546] lo speed is unknown, defaulting to 1000 [ 37.086191][ T3569] smc: net device bond0 erased user defined pnetid SYZ0 [ 37.269790][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.306804][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.315507][ T1035] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.366573][ T3546] lo speed is unknown, defaulting to 1000 [ 37.372533][ T3578] netlink: '+}[@': attribute type 6 has an invalid length. [ 37.442784][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.450066][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.478546][ T3582] loop0: detected capacity change from 0 to 164 [ 37.489606][ T3582] rock: directory entry would overflow storage [ 37.495847][ T3582] rock: sig=0x66, size=4, remaining=3 [ 37.503032][ T3580] pim6reg: entered allmulticast mode [ 37.509202][ T3580] pim6reg: left allmulticast mode [ 37.521384][ T3583] bridge_slave_1: left allmulticast mode [ 37.527301][ T3583] bridge_slave_1: left promiscuous mode [ 37.533030][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.540325][ T3582] rock: directory entry would overflow storage [ 37.546538][ T3582] rock: sig=0x66, size=4, remaining=3 [ 37.597675][ T3583] bridge_slave_0: left allmulticast mode [ 37.603364][ T3583] bridge_slave_0: left promiscuous mode [ 37.609213][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.633086][ T3591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53'. [ 37.645288][ T3591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=3591 comm=syz.0.53 [ 37.657834][ T3591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=3591 comm=syz.0.53 [ 37.670366][ T3591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=3591 comm=syz.0.53 [ 37.687554][ T3591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=3591 comm=syz.0.53 [ 37.700052][ T3591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=3591 comm=syz.0.53 [ 37.712536][ T3591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=3591 comm=syz.0.53 [ 37.726733][ T3592] usb usb6: usbfs: process 3592 (syz.1.51) did not claim interface 0 before use [ 37.762655][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 37.762671][ T29] audit: type=1400 audit(1739427293.256:308): avc: denied { ioctl } for pid=3587 comm="syz.3.52" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.763739][ T3600] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 37.801288][ T3600] netlink: 'syz.3.52': attribute type 2 has an invalid length. [ 37.813879][ T3602] syz.2.55 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.826865][ T29] audit: type=1400 audit(1739427293.306:309): avc: denied { compute_member } for pid=3598 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 37.847124][ T29] audit: type=1400 audit(1739427293.326:310): avc: denied { associate } for pid=3598 comm="syz.2.55" name="1" dev="devpts" ino=4 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 37.893768][ T3605] loop4: detected capacity change from 0 to 1024 [ 37.978639][ T3605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.004760][ T3605] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.062296][ T3596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.069797][ T3596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.091930][ T3596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.099471][ T3596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.115044][ T29] audit: type=1326 audit(1739427293.576:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa6ecde9 code=0x7ffc0000 [ 38.138481][ T29] audit: type=1326 audit(1739427293.576:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffafa6ecde9 code=0x7ffc0000 [ 38.157765][ T3610] loop0: detected capacity change from 0 to 1024 [ 38.161703][ T29] audit: type=1326 audit(1739427293.576:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa6ecde9 code=0x7ffc0000 [ 38.191405][ T29] audit: type=1326 audit(1739427293.576:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffafa6ecde9 code=0x7ffc0000 [ 38.215321][ T29] audit: type=1326 audit(1739427293.576:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa6ecde9 code=0x7ffc0000 [ 38.238551][ T29] audit: type=1326 audit(1739427293.576:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffafa6ecde9 code=0x7ffc0000 [ 38.261751][ T29] audit: type=1326 audit(1739427293.576:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3617 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa6ecde9 code=0x7ffc0000 [ 38.406925][ T3621] usb usb6: usbfs: process 3621 (syz.2.61) did not claim interface 0 before use [ 38.479879][ T3626] loop1: detected capacity change from 0 to 164 [ 38.502926][ T3626] rock: directory entry would overflow storage [ 38.509254][ T3626] rock: sig=0x66, size=4, remaining=3 [ 38.515471][ T3628] netlink: 72 bytes leftover after parsing attributes in process `syz.0.64'. [ 38.525606][ T3626] rock: directory entry would overflow storage [ 38.531788][ T3626] rock: sig=0x66, size=4, remaining=3 [ 38.572971][ T3630] loop2: detected capacity change from 0 to 764 [ 38.582241][ T3630] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 38.616508][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.664958][ T3632] usb usb6: usbfs: process 3632 (syz.0.66) did not claim interface 0 before use [ 38.737453][ T3649] loop0: detected capacity change from 0 to 128 [ 38.753696][ T3653] FAULT_INJECTION: forcing a failure. [ 38.753696][ T3653] name failslab, interval 1, probability 0, space 0, times 1 [ 38.767225][ T3653] CPU: 0 UID: 0 PID: 3653 Comm: syz.4.75 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 38.767249][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 38.767263][ T3653] Call Trace: [ 38.767268][ T3653] [ 38.767276][ T3653] dump_stack_lvl+0xf2/0x150 [ 38.767308][ T3653] dump_stack+0x15/0x1a [ 38.767333][ T3653] should_fail_ex+0x24a/0x260 [ 38.767403][ T3653] ? p9_client_create+0x57/0xaf0 [ 38.767422][ T3653] should_failslab+0x8f/0xb0 [ 38.767448][ T3653] __kmalloc_cache_noprof+0x4e/0x320 [ 38.767525][ T3653] p9_client_create+0x57/0xaf0 [ 38.767630][ T3653] ? should_failslab+0x8f/0xb0 [ 38.767654][ T3653] ? __kmalloc_node_track_caller_noprof+0x1e4/0x410 [ 38.767689][ T3653] ? v9fs_session_init+0x79/0xda0 [ 38.767713][ T3653] v9fs_session_init+0xf9/0xda0 [ 38.767842][ T3653] ? should_fail_ex+0xd7/0x260 [ 38.767882][ T3653] ? v9fs_mount+0x53/0x570 [ 38.767909][ T3653] ? should_failslab+0x8f/0xb0 [ 38.767932][ T3653] ? __kmalloc_cache_noprof+0x186/0x320 [ 38.768037][ T3653] v9fs_mount+0x69/0x570 [ 38.768107][ T3653] ? __pfx_v9fs_mount+0x10/0x10 [ 38.768159][ T3653] legacy_get_tree+0x77/0xd0 [ 38.768193][ T3653] vfs_get_tree+0x56/0x1e0 [ 38.768221][ T3653] do_new_mount+0x227/0x690 [ 38.768330][ T3653] path_mount+0x49b/0xb30 [ 38.768359][ T3653] __se_sys_mount+0x27f/0x2d0 [ 38.768388][ T3653] ? fput+0x1c4/0x200 [ 38.768492][ T3653] __x64_sys_mount+0x67/0x80 [ 38.768553][ T3653] x64_sys_call+0x2c84/0x2dc0 [ 38.768586][ T3653] do_syscall_64+0xc9/0x1c0 [ 38.768646][ T3653] ? clear_bhb_loop+0x55/0xb0 [ 38.768673][ T3653] ? clear_bhb_loop+0x55/0xb0 [ 38.768703][ T3653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.768741][ T3653] RIP: 0033:0x7f4d3642cde9 [ 38.768766][ T3653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.768783][ T3653] RSP: 002b:00007f4d34a91038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.768802][ T3653] RAX: ffffffffffffffda RBX: 00007f4d36645fa0 RCX: 00007f4d3642cde9 [ 38.768814][ T3653] RDX: 0000400000000040 RSI: 0000400000000180 RDI: 0000000000000000 [ 38.768888][ T3653] RBP: 00007f4d34a91090 R08: 0000400000000580 R09: 0000000000000000 [ 38.768902][ T3653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 38.768916][ T3653] R13: 0000000000000000 R14: 00007f4d36645fa0 R15: 00007fff93312dd8 [ 38.768938][ T3653] [ 38.778497][ T3639] loop1: detected capacity change from 0 to 4096 [ 38.812958][ T3655] loop4: detected capacity change from 0 to 164 [ 38.944407][ T3639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.016007][ T3655] rock: directory entry would overflow storage [ 39.048246][ T3655] rock: sig=0x66, size=4, remaining=3 [ 39.085754][ T3655] rock: directory entry would overflow storage [ 39.092108][ T3655] rock: sig=0x66, size=4, remaining=3 [ 39.178212][ T3670] pim6reg: entered allmulticast mode [ 39.190810][ T3670] pim6reg: left allmulticast mode [ 39.244742][ T3673] loop2: detected capacity change from 0 to 4096 [ 39.265639][ T3673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.288616][ T3673] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 39.359360][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.414289][ T3688] FAULT_INJECTION: forcing a failure. [ 39.414289][ T3688] name failslab, interval 1, probability 0, space 0, times 0 [ 39.427111][ T3688] CPU: 1 UID: 0 PID: 3688 Comm: syz.1.82 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 39.427137][ T3688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 39.427223][ T3688] Call Trace: [ 39.427230][ T3688] [ 39.427238][ T3688] dump_stack_lvl+0xf2/0x150 [ 39.427266][ T3688] dump_stack+0x15/0x1a [ 39.427286][ T3688] should_fail_ex+0x24a/0x260 [ 39.427342][ T3688] should_failslab+0x8f/0xb0 [ 39.427373][ T3688] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 39.427406][ T3688] ? shmem_alloc_inode+0x34/0x50 [ 39.427445][ T3688] shmem_alloc_inode+0x34/0x50 [ 39.427488][ T3688] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 39.427528][ T3688] alloc_inode+0x3c/0x160 [ 39.427556][ T3688] new_inode+0x1e/0x100 [ 39.427621][ T3688] shmem_get_inode+0x24e/0x730 [ 39.427742][ T3688] __shmem_file_setup+0x127/0x1f0 [ 39.427772][ T3688] shmem_file_setup+0x3b/0x50 [ 39.427876][ T3688] __se_sys_memfd_create+0x2e1/0x5a0 [ 39.427899][ T3688] __x64_sys_memfd_create+0x31/0x40 [ 39.427934][ T3688] x64_sys_call+0x2d4c/0x2dc0 [ 39.428004][ T3688] do_syscall_64+0xc9/0x1c0 [ 39.428031][ T3688] ? clear_bhb_loop+0x55/0xb0 [ 39.428059][ T3688] ? clear_bhb_loop+0x55/0xb0 [ 39.428164][ T3688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.428196][ T3688] RIP: 0033:0x7f49b320cde9 [ 39.428212][ T3688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.428298][ T3688] RSP: 002b:00007f49b1876e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 39.428321][ T3688] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007f49b320cde9 [ 39.428336][ T3688] RDX: 00007f49b1876ef0 RSI: 0000000000000000 RDI: 00007f49b328ec51 [ 39.428350][ T3688] RBP: 0000400000000600 R08: 00007f49b1876bb7 R09: 00007f49b1876e40 [ 39.428364][ T3688] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000000 [ 39.428378][ T3688] R13: 00007f49b1876ef0 R14: 00007f49b1876eb0 R15: 00004000000002c0 [ 39.428396][ T3688] [ 39.659136][ T3377] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.667460][ T3377] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.701991][ T3695] loop4: detected capacity change from 0 to 512 [ 39.735708][ T3695] EXT4-fs (loop4): too many log groups per flexible block group [ 39.743554][ T3695] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 39.750672][ T3695] EXT4-fs (loop4): mount failed [ 39.805403][ T3706] loop0: detected capacity change from 0 to 512 [ 39.810627][ T3708] loop4: detected capacity change from 0 to 764 [ 39.812283][ T3706] EXT4-fs: Ignoring removed i_version option [ 39.829917][ T3708] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 39.863535][ T3706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.878501][ T3706] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.893914][ T3712] loop1: detected capacity change from 0 to 1024 [ 39.906591][ T3706] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #4: comm syz.0.89: corrupted inode contents [ 39.910388][ T3712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.932211][ T3712] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.938166][ T3706] EXT4-fs (loop0): Remounting filesystem read-only [ 39.943045][ T3719] FAULT_INJECTION: forcing a failure. [ 39.943045][ T3719] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.953025][ T3712] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 39.962261][ T3719] CPU: 0 UID: 0 PID: 3719 Comm: syz.4.93 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 39.962308][ T3719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 39.962322][ T3719] Call Trace: [ 39.962329][ T3719] [ 39.962337][ T3719] dump_stack_lvl+0xf2/0x150 [ 39.962431][ T3719] dump_stack+0x15/0x1a [ 39.962459][ T3719] should_fail_ex+0x24a/0x260 [ 39.962517][ T3719] should_fail+0xb/0x10 [ 39.962554][ T3719] should_fail_usercopy+0x1a/0x20 [ 39.962583][ T3719] _copy_to_user+0x20/0xa0 [ 39.962605][ T3719] simple_read_from_buffer+0xa0/0x110 [ 39.962629][ T3719] proc_fail_nth_read+0xf9/0x140 [ 39.962662][ T3719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 39.962692][ T3719] vfs_read+0x19b/0x6f0 [ 39.962791][ T3719] ? __rcu_read_unlock+0x4e/0x70 [ 39.962882][ T3719] ? __fget_files+0x17c/0x1c0 [ 39.962928][ T3719] ksys_read+0xe8/0x1b0 [ 39.962956][ T3719] __x64_sys_read+0x42/0x50 [ 39.962981][ T3719] x64_sys_call+0x2874/0x2dc0 [ 39.963015][ T3719] do_syscall_64+0xc9/0x1c0 [ 39.963044][ T3719] ? clear_bhb_loop+0x55/0xb0 [ 39.963107][ T3719] ? clear_bhb_loop+0x55/0xb0 [ 39.963142][ T3719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.963210][ T3719] RIP: 0033:0x7f4d3642b7fc [ 39.963229][ T3719] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 39.963276][ T3719] RSP: 002b:00007f4d34a91030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 39.963305][ T3719] RAX: ffffffffffffffda RBX: 00007f4d36645fa0 RCX: 00007f4d3642b7fc [ 39.963320][ T3719] RDX: 000000000000000f RSI: 00007f4d34a910a0 RDI: 0000000000000004 [ 39.963335][ T3719] RBP: 00007f4d34a91090 R08: 0000000000000000 R09: 0000000000000000 [ 39.963349][ T3719] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 39.963364][ T3719] R13: 0000000000000000 R14: 00007f4d36645fa0 R15: 00007fff93312dd8 [ 39.963466][ T3719] [ 40.083600][ T3725] can0: slcan on ttyS3. [ 40.088027][ T3712] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 40.112409][ T3712] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 40.189581][ T3712] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.189581][ T3712] [ 40.199362][ T3712] EXT4-fs (loop1): Total free blocks count 0 [ 40.205557][ T3712] EXT4-fs (loop1): Free/Dirty block details [ 40.210177][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.211481][ T3712] EXT4-fs (loop1): free_blocks=4293918720 [ 40.218936][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.224616][ T3712] EXT4-fs (loop1): dirty_blocks=16 [ 40.236890][ T3712] EXT4-fs (loop1): Block reservation details [ 40.242934][ T3712] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 40.249373][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.249920][ T3723] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 40.271280][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.278789][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.352162][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.426891][ T3746] loop0: detected capacity change from 0 to 512 [ 40.445765][ T3746] EXT4-fs (loop0): too many log groups per flexible block group [ 40.453513][ T3746] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 40.460356][ T3746] EXT4-fs (loop0): mount failed [ 40.472711][ T3755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=3755 comm=syz.2.96 [ 40.485708][ T3720] can0 (unregistered): slcan off ttyS3. [ 40.494196][ T3755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=3755 comm=syz.2.96 [ 40.563094][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 40.594947][ T3712] syz.1.91 (3712) used greatest stack depth: 9640 bytes left [ 40.693823][ T3776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3776 comm=syz.2.96 [ 40.792192][ T3785] loop4: detected capacity change from 0 to 164 [ 40.822929][ T3785] rock: directory entry would overflow storage [ 40.829189][ T3785] rock: sig=0x66, size=4, remaining=3 [ 40.861800][ T3785] rock: directory entry would overflow storage [ 40.868067][ T3785] rock: sig=0x66, size=4, remaining=3 [ 41.091546][ T3817] FAULT_INJECTION: forcing a failure. [ 41.091546][ T3817] name failslab, interval 1, probability 0, space 0, times 0 [ 41.104395][ T3817] CPU: 0 UID: 0 PID: 3817 Comm: syz.2.116 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 41.104423][ T3817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 41.104483][ T3817] Call Trace: [ 41.104490][ T3817] [ 41.104498][ T3817] dump_stack_lvl+0xf2/0x150 [ 41.104532][ T3817] dump_stack+0x15/0x1a [ 41.104623][ T3817] should_fail_ex+0x24a/0x260 [ 41.104664][ T3817] ? mon_bin_open+0xa7/0x3b0 [ 41.104691][ T3817] should_failslab+0x8f/0xb0 [ 41.104717][ T3817] __kmalloc_cache_noprof+0x4e/0x320 [ 41.104771][ T3817] mon_bin_open+0xa7/0x3b0 [ 41.104803][ T3817] ? __pfx_exact_match+0x10/0x10 [ 41.104839][ T3817] chrdev_open+0x2f9/0x370 [ 41.104950][ T3817] ? __pfx_chrdev_open+0x10/0x10 [ 41.104983][ T3817] do_dentry_open+0x621/0xa20 [ 41.105022][ T3817] vfs_open+0x38/0x1e0 [ 41.105110][ T3817] path_openat+0x1ae0/0x1fc0 [ 41.105135][ T3817] ? get_perf_callchain+0x430/0x520 [ 41.105171][ T3817] do_filp_open+0x107/0x230 [ 41.105262][ T3817] do_sys_openat2+0xab/0x120 [ 41.105301][ T3817] __x64_sys_openat+0xf3/0x120 [ 41.105339][ T3817] x64_sys_call+0x2b30/0x2dc0 [ 41.105371][ T3817] do_syscall_64+0xc9/0x1c0 [ 41.105445][ T3817] ? clear_bhb_loop+0x55/0xb0 [ 41.105473][ T3817] ? clear_bhb_loop+0x55/0xb0 [ 41.105530][ T3817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.105562][ T3817] RIP: 0033:0x7ffafa6eb750 [ 41.105579][ T3817] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 41.105645][ T3817] RSP: 002b:00007ffaf8d56b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 41.105667][ T3817] RAX: ffffffffffffffda RBX: 000000000004e902 RCX: 00007ffafa6eb750 [ 41.105678][ T3817] RDX: 000000000004e902 RSI: 00007ffaf8d56c10 RDI: 00000000ffffff9c [ 41.105690][ T3817] RBP: 00007ffaf8d56c10 R08: 0000000000000000 R09: 00236e6f6d627375 [ 41.105704][ T3817] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 41.105719][ T3817] R13: 0000000000000000 R14: 00007ffafa905fa0 R15: 00007ffe97bd55b8 [ 41.105741][ T3817] [ 41.608203][ T3824] loop2: detected capacity change from 0 to 8192 [ 41.866500][ T3840] smc: net device bond0 applied user defined pnetid SYZ0 [ 41.912868][ T3843] pim6reg9: entered allmulticast mode [ 41.950607][ T3843] loop2: detected capacity change from 0 to 2048 [ 41.975239][ T3847] usb usb6: usbfs: process 3847 (syz.1.128) did not claim interface 0 before use [ 41.997615][ T3852] usb usb6: usbfs: process 3852 (syz.4.131) did not claim interface 0 before use [ 42.273190][ T3883] loop1: detected capacity change from 0 to 512 [ 42.357578][ T3883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.393067][ T3899] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 42.399779][ T3899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.407476][ T3899] vhci_hcd vhci_hcd.0: Device attached [ 42.435409][ T3883] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.451418][ T3901] vhci_hcd: connection closed [ 42.451638][ T55] vhci_hcd: stop threads [ 42.460709][ T55] vhci_hcd: release socket [ 42.465193][ T55] vhci_hcd: disconnect device [ 42.471342][ T3904] usb usb6: usbfs: process 3904 (syz.4.146) did not claim interface 0 before use [ 42.544155][ T3883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.823064][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'. [ 42.833325][ T3927] xt_TPROXY: Can be used only with -p tcp or -p udp [ 43.013388][ T3929] loop4: detected capacity change from 0 to 512 [ 43.037930][ T3929] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.044525][ T3929] EXT4-fs: Ignoring removed oldalloc option [ 43.095476][ T3929] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.148: Parent and EA inode have the same ino 15 [ 43.118095][ T3929] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.151026][ T3929] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.148: Parent and EA inode have the same ino 15 [ 43.286926][ T3929] EXT4-fs (loop4): 1 orphan inode deleted [ 43.296952][ T3929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.320987][ T3956] dvmrp5: entered allmulticast mode [ 43.420991][ T3957] loop3: detected capacity change from 0 to 128 [ 43.476933][ T3957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.156'. [ 43.495100][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 43.495115][ T29] audit: type=1400 audit(1739427298.956:782): avc: denied { mount } for pid=3946 comm="syz.3.156" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.589868][ T3960] loop2: detected capacity change from 0 to 512 [ 43.686651][ T3960] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.160: corrupted xattr block 95: invalid header [ 43.701811][ T29] audit: type=1400 audit(1739427299.046:783): avc: denied { create } for pid=3953 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 43.721967][ T29] audit: type=1400 audit(1739427299.076:784): avc: denied { getopt } for pid=3954 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.752044][ T3960] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.160: bg 0: block 7: invalid block bitmap [ 43.764959][ T3960] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 43.797191][ T3960] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.160: corrupted xattr block 95: invalid header [ 43.825683][ T3960] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 43.834849][ T3960] EXT4-fs (loop2): 1 orphan inode deleted [ 43.841942][ T3960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.124079][ T29] audit: type=1400 audit(1739427300.616:785): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.209824][ T3953] dvmrp5: left allmulticast mode [ 45.278598][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.364283][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.439025][ T3975] loop2: detected capacity change from 0 to 1024 [ 45.467214][ T3975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.479561][ T3970] loop4: detected capacity change from 0 to 8192 [ 45.486231][ T3976] loop1: detected capacity change from 0 to 164 [ 45.493137][ T3975] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.504118][ T3976] rock: directory entry would overflow storage [ 45.510317][ T3976] rock: sig=0x66, size=4, remaining=3 [ 45.525910][ T3976] rock: directory entry would overflow storage [ 45.532183][ T3976] rock: sig=0x66, size=4, remaining=3 [ 45.548398][ T3975] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 45.563805][ T3970] loop4: p1 p2 p3 p4 [ 45.567675][ T29] audit: type=1400 audit(1739427301.036:786): avc: denied { create } for pid=3973 comm="syz.2.165" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.594404][ T3970] loop4: p1 start 67159808 is beyond EOD, truncated [ 45.601142][ T3970] loop4: p2 size 130943 extends beyond EOD, truncated [ 45.624886][ T3975] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 45.637317][ T3975] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.637317][ T3975] [ 45.647119][ T3975] EXT4-fs (loop2): Total free blocks count 0 [ 45.653194][ T3975] EXT4-fs (loop2): Free/Dirty block details [ 45.659149][ T3975] EXT4-fs (loop2): free_blocks=4293918720 [ 45.664935][ T3975] EXT4-fs (loop2): dirty_blocks=16 [ 45.670126][ T3975] EXT4-fs (loop2): Block reservation details [ 45.676154][ T3975] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 45.691016][ T3983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.162'. [ 45.785624][ T3970] loop4: p3 size 8388608 extends beyond EOD, truncated [ 45.795692][ T3982] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 45.812742][ T3970] loop4: p4 start 49398 is beyond EOD, truncated [ 45.851008][ T29] audit: type=1400 audit(1739427301.326:787): avc: denied { read } for pid=3969 comm="syz.4.162" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.874153][ T29] audit: type=1400 audit(1739427301.326:788): avc: denied { open } for pid=3969 comm="syz.4.162" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.921744][ T3000] loop4: p1 p2 p3 p4 [ 45.924240][ C1] hrtimer: interrupt took 46339 ns [ 45.927442][ T3000] loop4: p1 start 67159808 is beyond EOD, truncated [ 45.937516][ T3000] loop4: p2 size 130943 extends beyond EOD, truncated [ 45.955720][ T3000] loop4: p3 size 8388608 extends beyond EOD, truncated [ 45.963858][ T3000] loop4: p4 start 49398 is beyond EOD, truncated [ 45.991785][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 46.003802][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 46.303899][ T4003] netem: incorrect gi model size [ 46.308906][ T4003] netem: change failed [ 46.313478][ T29] audit: type=1400 audit(1739427301.796:789): avc: denied { write } for pid=4002 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.313906][ T4003] FAULT_INJECTION: forcing a failure. [ 46.313906][ T4003] name failslab, interval 1, probability 0, space 0, times 0 [ 46.345331][ T4003] CPU: 1 UID: 0 PID: 4003 Comm: syz.2.175 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 46.345360][ T4003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 46.345375][ T4003] Call Trace: [ 46.345383][ T4003] [ 46.345472][ T4003] dump_stack_lvl+0xf2/0x150 [ 46.345499][ T4003] dump_stack+0x15/0x1a [ 46.345519][ T4003] should_fail_ex+0x24a/0x260 [ 46.345554][ T4003] should_failslab+0x8f/0xb0 [ 46.345581][ T4003] kmem_cache_alloc_node_noprof+0x59/0x320 [ 46.345670][ T4003] ? __alloc_skb+0x10b/0x310 [ 46.345759][ T4003] __alloc_skb+0x10b/0x310 [ 46.345786][ T4003] netlink_alloc_large_skb+0xad/0xe0 [ 46.345875][ T4003] netlink_sendmsg+0x3b4/0x6e0 [ 46.345911][ T4003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.346027][ T4003] __sock_sendmsg+0x140/0x180 [ 46.346050][ T4003] ____sys_sendmsg+0x312/0x410 [ 46.346087][ T4003] __sys_sendmsg+0x19d/0x230 [ 46.346135][ T4003] __x64_sys_sendmsg+0x46/0x50 [ 46.346172][ T4003] x64_sys_call+0x2734/0x2dc0 [ 46.346201][ T4003] do_syscall_64+0xc9/0x1c0 [ 46.346303][ T4003] ? clear_bhb_loop+0x55/0xb0 [ 46.346350][ T4003] ? clear_bhb_loop+0x55/0xb0 [ 46.346380][ T4003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.346412][ T4003] RIP: 0033:0x7ffafa6ecde9 [ 46.346428][ T4003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.346504][ T4003] RSP: 002b:00007ffaf8d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.346526][ T4003] RAX: ffffffffffffffda RBX: 00007ffafa905fa0 RCX: 00007ffafa6ecde9 [ 46.346537][ T4003] RDX: 0000000064000850 RSI: 0000400000000a80 RDI: 0000000000000003 [ 46.346548][ T4003] RBP: 00007ffaf8d57090 R08: 0000000000000000 R09: 0000000000000000 [ 46.346559][ T4003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.346572][ T4003] R13: 0000000000000000 R14: 00007ffafa905fa0 R15: 00007ffe97bd55b8 [ 46.346601][ T4003] [ 46.586681][ T29] audit: type=1400 audit(1739427302.076:790): avc: denied { name_connect } for pid=4010 comm="syz.4.177" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 46.628885][ T4012] loop3: detected capacity change from 0 to 2048 [ 46.649986][ T3985] loop1: detected capacity change from 0 to 512 [ 46.654245][ T4015] ip6tnl1: entered promiscuous mode [ 46.661733][ T4015] ip6tnl1: entered allmulticast mode [ 46.670669][ T4012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.690014][ T3985] EXT4-fs: inline encryption not supported [ 46.690100][ T29] audit: type=1400 audit(1739427302.186:791): avc: denied { read write open } for pid=4009 comm="syz.3.176" path="/27/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.760977][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.777701][ T4023] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 46.788743][ T4023] Cannot find add_set index 0 as target [ 46.813655][ T3985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.830045][ T3985] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.882293][ T3985] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #2: comm syz.1.169: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 46.940103][ T3985] xt_l2tp: missing protocol rule (udp|l2tpip) [ 46.997177][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.009342][ T4043] loop0: detected capacity change from 0 to 512 [ 47.020146][ T4043] EXT4-fs: Ignoring removed oldalloc option [ 47.048951][ T4043] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.189: iget: bad extended attribute block 1 [ 47.061910][ T4043] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.189: couldn't read orphan inode 15 (err -117) [ 47.075065][ T4043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.090803][ T4043] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #2: block 13: comm syz.0.189: lblock 0 mapped to illegal pblock 13 (length 1) [ 47.111912][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.119460][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.126941][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.136469][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.143953][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.151414][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.158878][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.166016][ T4048] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #2: block 13: comm syz.0.189: lblock 0 mapped to illegal pblock 13 (length 1) [ 47.166285][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.187750][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.195242][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.202664][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.210192][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.217678][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.225146][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.232821][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.240257][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.247780][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.255214][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.262687][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.270209][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.277653][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.285076][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.292475][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.299899][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.307341][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.314755][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.322141][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.329707][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.337119][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.344596][ T1035] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 47.352446][ T1035] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 47.389576][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.479653][ T4052] hub 2-0:1.0: USB hub found [ 47.484476][ T4052] hub 2-0:1.0: 8 ports detected [ 47.970616][ T4075] syz_tun: entered allmulticast mode [ 47.976861][ T4075] syz_tun: left allmulticast mode [ 48.008782][ T4086] netlink: 'syz.1.202': attribute type 1 has an invalid length. [ 48.016612][ T4086] netlink: 'syz.1.202': attribute type 2 has an invalid length. [ 48.029841][ T4085] syz_tun: entered allmulticast mode [ 48.035520][ T4085] syz_tun: left allmulticast mode [ 48.104927][ T4090] usb usb6: usbfs: process 4090 (syz.2.208) did not claim interface 0 before use [ 48.123921][ T4092] lo speed is unknown, defaulting to 1000 [ 48.172495][ T4095] loop0: detected capacity change from 0 to 2048 [ 48.225020][ T4095] loop0: p1 < > p4 [ 48.229412][ T4095] loop0: p4 size 8388608 extends beyond EOD, truncated [ 48.266803][ T3000] loop0: p1 < > p4 [ 48.274352][ T3000] loop0: p4 size 8388608 extends beyond EOD, truncated [ 48.359809][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 48.374879][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 48.411968][ T3537] udevd[3537]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 48.423128][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 48.600303][ T4111] tipc: Enabling of bearer rejected, failed to enable media [ 48.620703][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 48.620717][ T29] audit: type=1326 audit(1739427304.116:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0a4cde9 code=0x7ffc0000 [ 48.651476][ T29] audit: type=1326 audit(1739427304.156:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f18b0a4cde9 code=0x7ffc0000 [ 48.674800][ T29] audit: type=1326 audit(1739427304.156:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0a4cde9 code=0x7ffc0000 [ 48.698250][ T29] audit: type=1326 audit(1739427304.156:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0a4cde9 code=0x7ffc0000 [ 48.725059][ T29] audit: type=1326 audit(1739427304.226:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f18b0a4cde9 code=0x7ffc0000 [ 48.733195][ T4056] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 48.748385][ T29] audit: type=1326 audit(1739427304.226:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0a4cde9 code=0x7ffc0000 [ 48.761054][ T4056] bond0: (slave lo): Error: Device can not be enslaved while up [ 48.783649][ T29] audit: type=1326 audit(1739427304.226:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0a4cde9 code=0x7ffc0000 [ 48.783708][ T29] audit: type=1326 audit(1739427304.226:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f18b0a4cde9 code=0x7ffc0000 [ 48.837762][ T29] audit: type=1326 audit(1739427304.226:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0a4cde9 code=0x7ffc0000 [ 48.861114][ T29] audit: type=1326 audit(1739427304.226:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4112 comm="syz.0.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0a4cde9 code=0x7ffc0000 [ 49.003393][ T4122] loop0: detected capacity change from 0 to 764 [ 49.015690][ T4122] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 49.124014][ T4088] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 49.136668][ T4088] bond0: (slave lo): Error: Device can not be enslaved while up [ 49.322704][ T4116] loop2: detected capacity change from 0 to 512 [ 49.358890][ T4116] EXT4-fs: inline encryption not supported [ 49.461855][ T4116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.575585][ T4116] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.608234][ T3374] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 49.616775][ T4116] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #2: comm syz.2.218: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 49.620456][ T3374] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.680544][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.703706][ T4146] lo speed is unknown, defaulting to 1000 [ 49.708992][ T4149] loop3: detected capacity change from 0 to 512 [ 49.717122][ T4149] EXT4-fs: Ignoring removed bh option [ 49.725973][ T4149] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 49.750822][ T4149] EXT4-fs (loop3): 1 truncate cleaned up [ 49.775799][ T4149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.846688][ T4158] ref_ctr going negative. vaddr: 0x400000ffc002, curr val: -29824, delta: 1 [ 49.855434][ T4158] ref_ctr increment failed for inode: 0x143 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888123dce880 [ 49.882086][ T4158] netlink: 92 bytes leftover after parsing attributes in process `syz.2.230'. [ 49.908082][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.938873][ T4158] lo speed is unknown, defaulting to 1000 [ 50.005713][ T4160] usb usb6: usbfs: process 4160 (syz.3.231) did not claim interface 0 before use [ 50.105389][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 50.113326][ T35] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.169590][ T4174] loop2: detected capacity change from 0 to 764 [ 50.187922][ T4175] loop0: detected capacity change from 0 to 764 [ 50.188357][ T4174] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 50.206704][ T4175] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 50.267914][ T4177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.275482][ T4177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.291001][ T4177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.299253][ T4177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.303574][ T4184] netlink: 'syz.2.240': attribute type 13 has an invalid length. [ 50.441368][ T4187] hub 2-0:1.0: USB hub found [ 50.459288][ T4187] hub 2-0:1.0: 8 ports detected [ 50.501241][ T4193] netlink: 100 bytes leftover after parsing attributes in process `syz.4.245'. [ 50.568850][ T4201] loop2: detected capacity change from 0 to 764 [ 50.577706][ T4201] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 50.648053][ T4208] loop0: detected capacity change from 0 to 164 [ 50.655496][ T4208] rock: directory entry would overflow storage [ 50.661738][ T4208] rock: sig=0x66, size=4, remaining=3 [ 50.684134][ T4208] rock: directory entry would overflow storage [ 50.690434][ T4208] rock: sig=0x66, size=4, remaining=3 [ 50.768851][ T4213] loop2: detected capacity change from 0 to 2048 [ 50.778628][ T4213] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.796391][ T4213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.873892][ T4213] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.254: bg 0: block 234: padding at end of block bitmap is not set [ 50.888437][ T4213] EXT4-fs (loop2): Remounting filesystem read-only [ 50.932420][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.960884][ T4220] loop1: detected capacity change from 0 to 1024 [ 50.985907][ T4220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.999160][ T4220] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.012109][ T4220] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 51.027468][ T4220] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 51.040520][ T4220] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.040520][ T4220] [ 51.050260][ T4220] EXT4-fs (loop1): Total free blocks count 0 [ 51.056272][ T4220] EXT4-fs (loop1): Free/Dirty block details [ 51.062245][ T4220] EXT4-fs (loop1): free_blocks=4293918720 [ 51.068704][ T4220] EXT4-fs (loop1): dirty_blocks=16 [ 51.073825][ T4220] EXT4-fs (loop1): Block reservation details [ 51.079830][ T4220] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 51.087259][ T4226] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 51.177418][ T4222] FAULT_INJECTION: forcing a failure. [ 51.177418][ T4222] name failslab, interval 1, probability 0, space 0, times 0 [ 51.190098][ T4222] CPU: 0 UID: 0 PID: 4222 Comm: syz.2.256 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 51.190126][ T4222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 51.190140][ T4222] Call Trace: [ 51.190148][ T4222] [ 51.190157][ T4222] dump_stack_lvl+0xf2/0x150 [ 51.190188][ T4222] dump_stack+0x15/0x1a [ 51.190211][ T4222] should_fail_ex+0x24a/0x260 [ 51.190255][ T4222] should_failslab+0x8f/0xb0 [ 51.190283][ T4222] kmem_cache_alloc_noprof+0x52/0x320 [ 51.190320][ T4222] ? mas_alloc_nodes+0x1e3/0x490 [ 51.190353][ T4222] mas_alloc_nodes+0x1e3/0x490 [ 51.190379][ T4222] mas_preallocate+0x44a/0x650 [ 51.190410][ T4222] __split_vma+0x244/0x6a0 [ 51.190452][ T4222] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 51.190489][ T4222] mmap_region+0x464/0x1620 [ 51.190520][ T4222] ? hash+0x1d6/0x220 [ 51.190537][ T4222] ? __rcu_read_unlock+0x4e/0x70 [ 51.190572][ T4222] do_mmap+0x98a/0xc30 [ 51.190598][ T4222] vm_mmap_pgoff+0x16d/0x2d0 [ 51.190625][ T4222] ksys_mmap_pgoff+0xd0/0x330 [ 51.190652][ T4222] x64_sys_call+0x1940/0x2dc0 [ 51.190683][ T4222] do_syscall_64+0xc9/0x1c0 [ 51.190711][ T4222] ? clear_bhb_loop+0x55/0xb0 [ 51.190743][ T4222] ? clear_bhb_loop+0x55/0xb0 [ 51.190768][ T4222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.190793][ T4222] RIP: 0033:0x7ffafa6ecde9 [ 51.190806][ T4222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.190822][ T4222] RSP: 002b:00007ffaf8d57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 51.190842][ T4222] RAX: ffffffffffffffda RBX: 00007ffafa905fa0 RCX: 00007ffafa6ecde9 [ 51.190855][ T4222] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000400000000000 [ 51.190869][ T4222] RBP: 00007ffaf8d57090 R08: ffffffffffffffff R09: 0000000000000000 [ 51.190911][ T4222] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 51.190920][ T4222] R13: 0000000000000000 R14: 00007ffafa905fa0 R15: 00007ffe97bd55b8 [ 51.190936][ T4222] [ 51.459381][ T4231] pim6reg: entered allmulticast mode [ 51.465839][ T4232] loop4: detected capacity change from 0 to 764 [ 51.472889][ T4231] pim6reg: left allmulticast mode [ 51.478925][ T4232] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.616325][ T4245] loop3: detected capacity change from 0 to 1024 [ 51.628435][ T35] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 51.644887][ T35] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.647429][ T4252] loop0: detected capacity change from 0 to 164 [ 51.671813][ T4245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.688054][ T4245] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.694459][ T4252] rock: directory entry would overflow storage [ 51.705372][ T4252] rock: sig=0x66, size=4, remaining=3 [ 51.744641][ T4245] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 51.773194][ T4257] loop4: detected capacity change from 0 to 1024 [ 51.773823][ T4245] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 51.780564][ T4252] rock: directory entry would overflow storage [ 51.792532][ T4245] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.792532][ T4245] [ 51.798674][ T4252] rock: sig=0x66, size=4, remaining=3 [ 51.809164][ T4245] EXT4-fs (loop3): Total free blocks count 0 [ 51.819957][ T4245] EXT4-fs (loop3): Free/Dirty block details [ 51.825941][ T4245] EXT4-fs (loop3): free_blocks=4293918720 [ 51.831733][ T4245] EXT4-fs (loop3): dirty_blocks=16 [ 51.837706][ T4245] EXT4-fs (loop3): Block reservation details [ 51.843727][ T4245] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 51.857163][ T4259] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 51.873875][ T4257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.939651][ T4257] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.959004][ T4257] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 51.974791][ T4258] ================================================================== [ 51.982951][ T4258] BUG: KCSAN: data-race in getrusage / try_to_migrate_one [ 51.990095][ T4258] [ 51.992417][ T4258] write to 0xffff888123dcc878 of 8 bytes by task 4255 on cpu 1: [ 52.000055][ T4258] try_to_migrate_one+0x795/0x12e0 [ 52.005199][ T4258] rmap_walk_anon+0x28f/0x440 [ 52.009899][ T4258] try_to_migrate+0x11f/0x150 [ 52.014594][ T4258] migrate_pages_batch+0x786/0x1930 [ 52.019813][ T4258] migrate_pages+0xf02/0x1840 [ 52.024506][ T4258] __se_sys_mbind+0xfd1/0x11c0 [ 52.029283][ T4258] __x64_sys_mbind+0x78/0x90 [ 52.033885][ T4258] x64_sys_call+0x2662/0x2dc0 [ 52.038572][ T4258] do_syscall_64+0xc9/0x1c0 [ 52.043090][ T4258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.049017][ T4258] [ 52.051339][ T4258] read to 0xffff888123dcc878 of 8 bytes by task 4258 on cpu 0: [ 52.058887][ T4258] getrusage+0xa15/0xb70 [ 52.063151][ T4258] io_sq_thread+0x5f9/0x1100 [ 52.067757][ T4258] ret_from_fork+0x4b/0x60 [ 52.072207][ T4258] ret_from_fork_asm+0x1a/0x30 [ 52.077076][ T4258] [ 52.079659][ T4258] value changed: 0x00000000000014e5 -> 0x0000000000003fe5 [ 52.086767][ T4258] [ 52.089088][ T4258] Reported by Kernel Concurrency Sanitizer on: [ 52.095232][ T4258] CPU: 0 UID: 0 PID: 4258 Comm: iou-sqp-4250 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 52.106085][ T4258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 52.116141][ T4258] ================================================================== [ 52.138222][ T4257] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 52.150674][ T4257] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.150674][ T4257] [ 52.160340][ T4257] EXT4-fs (loop4): Total free blocks count 0 [ 52.167197][ T4257] EXT4-fs (loop4): Free/Dirty block details [ 52.173128][ T4257] EXT4-fs (loop4): free_blocks=4293918720 [ 52.178887][ T4257] EXT4-fs (loop4): dirty_blocks=16 [ 52.184009][ T4257] EXT4-fs (loop4): Block reservation details [ 52.190110][ T4257] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 52.228001][ T4257] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 52.261025][ T4241] loop2: detected capacity change from 0 to 512 [ 52.286110][ T4241] EXT4-fs: inline encryption not supported [ 52.351089][ T4241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.370328][ T4255] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 52.382979][ T4255] bond0: (slave lo): Error: Device can not be enslaved while up [ 52.391788][ T4241] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.433634][ T4241] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #2: comm syz.2.264: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 52.491627][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.