last executing test programs: 55.53263423s ago: executing program 3 (id=11): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES64=r0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x44800, 0x0) r3 = dup3(r2, r1, 0x0) finit_module(r3, 0x0, 0x200000000000000) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000180)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021003d27f10000000000003b810000850000006d000000850000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x5eff0704a2c807a7, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) r8 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0x101000) ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000380)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/193, 0xc1}) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x5e26, @broadcast}, 0x10, 0x0}, 0xee0000b0}], 0x1, 0x0) socket$kcm(0xa, 0x1, 0x106) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) r10 = getpid() r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r10, @ANYBLOB="17af4e11e24189569acfdfbaf271156229e746f8b9d9b3ce5d3d2f7c0e66cf210a72534ebcbd05cedd516a25508f5fa26ebeee72b76ddc5e82cc6c13a6a628b581d33e5b1d5c8b95c7e2bed5122c3ed309a7d2672a7c692215955f4483a485c6920f1a41f52a3035"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x80, 0x0}, 0x4000899) 54.681413017s ago: executing program 3 (id=18): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)='9\x00\x00\x00', 0x4}], 0x1}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) wait4(0x0, 0x0, 0x20000000, 0x0) bind$tipc(r7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) write$binfmt_script(r8, &(0x7f0000000200), 0xfffffd9d) close_range(r3, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1000000}]}, 0x24}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000050000000000000007400000000000007b4000019d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 54.100890173s ago: executing program 3 (id=23): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_init1(0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x2801, 0x0) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYRES64], 0x69) close(r1) mkdir(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = open(&(0x7f0000000080)='./file0\x00', 0x802, 0x3) getsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, &(0x7f0000000580)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) write$binfmt_script(r3, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 53.444032098s ago: executing program 3 (id=36): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42220011, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x1, 0x0) preadv(r2, &(0x7f0000000480)=[{0x0}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000680)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty, {[@noop, @noop]}}, {0x0, 0x0, 0x8}}}}}, 0x0) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') 53.11701164s ago: executing program 3 (id=41): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00080045009403dcbef465dba18352953d4b0070fffd000000019078ac1e0001ac1414aa0305907800000000450000000000004005890001ac141400ac141429443c2d41ac1e0101fffffffa640101010000dbd1ac1e010100000000ffffffff00000000ac1e010100000007ffffffff0000000fac14f2"], 0x0) r1 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x3}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ldst={0x2, 0x2, 0x6, 0x6, 0x8, 0xffffffffffffffe0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xd, 0xd8, &(0x7f0000000200)=""/216, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x800}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x4, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x0, 0x1, 0xd, 0x6}, {0x3, 0x2, 0x3, 0xc}, {0x5, 0x2, 0xe, 0xb}, {0x0, 0x4, 0x9, 0x8}, {0x5, 0x3, 0x3, 0xb}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='svcrdma_encode_wseg\x00', r3, 0x0, 0x1}, 0x18) 52.909850792s ago: executing program 32 (id=42): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) close(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 52.867948682s ago: executing program 3 (id=44): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000080)={[{@noinit_itable}, {@block_validity}, {@quota}, {@nombcache}]}, 0x1, 0x4e1, &(0x7f0000001400)="$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") perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x81100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00010d000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00f3ff04eace000000000008", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@exit, @generic={0x9, 0x1, 0x4, 0xfffe, 0x3c1c}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x5a, &(0x7f00000002c0)=""/90, 0x41100, 0x2, '\x00', r3, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x1, 0x7, 0x1e}, 0x10, 0x0, r1, 0x2, 0x0, &(0x7f0000000380)=[{0x4, 0x3, 0xd, 0x5}, {0x1, 0x3, 0x6}], 0x10, 0x9, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) io_cancel(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0xff, r2, &(0x7f0000000800)="9c5598e881a733be159422ddaaa265440b40e706aa303f71fd172c8a20be49d1165d8442a7b70799673647e41a5545c0ecc0d02fe98303ecddb7918b4462bd93fb9235a6cd55a40d6a63fda65f3d0445724bff2379721cc240f32de4125aafa0da2f1a79e0c3c6010f5115531e9c1b68bf64bd0f2c8f27eb487876afc42e2ee92350fc14be6081ef83c936a96eb6d895610b0d2c4e39ba5baf19b6ccc159827083129fb9bcb53fcb28567a578e382fe9d875bc1dbd831b9e3554a34a4359620bd72a", 0xc2, 0x4}, &(0x7f0000000640)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {0x400}, {0x0, 0x0, 0x0, 0x6fd}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff7fff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x40}, 0x10a042, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r9 = dup(r8) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 52.850637082s ago: executing program 33 (id=44): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000080)={[{@noinit_itable}, {@block_validity}, {@quota}, {@nombcache}]}, 0x1, 0x4e1, &(0x7f0000001400)="$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") perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x81100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00010d000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00f3ff04eace000000000008", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@exit, @generic={0x9, 0x1, 0x4, 0xfffe, 0x3c1c}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x5a, &(0x7f00000002c0)=""/90, 0x41100, 0x2, '\x00', r3, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x1, 0x7, 0x1e}, 0x10, 0x0, r1, 0x2, 0x0, &(0x7f0000000380)=[{0x4, 0x3, 0xd, 0x5}, {0x1, 0x3, 0x6}], 0x10, 0x9, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) io_cancel(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0xff, r2, &(0x7f0000000800)="9c5598e881a733be159422ddaaa265440b40e706aa303f71fd172c8a20be49d1165d8442a7b70799673647e41a5545c0ecc0d02fe98303ecddb7918b4462bd93fb9235a6cd55a40d6a63fda65f3d0445724bff2379721cc240f32de4125aafa0da2f1a79e0c3c6010f5115531e9c1b68bf64bd0f2c8f27eb487876afc42e2ee92350fc14be6081ef83c936a96eb6d895610b0d2c4e39ba5baf19b6ccc159827083129fb9bcb53fcb28567a578e382fe9d875bc1dbd831b9e3554a34a4359620bd72a", 0xc2, 0x4}, &(0x7f0000000640)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {0x400}, {0x0, 0x0, 0x0, 0x6fd}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff7fff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x40}, 0x10a042, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r9 = dup(r8) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 27.424102608s ago: executing program 6 (id=454): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xa000000000, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc}, {@barrier_val}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) (fail_nth: 8) 27.023486871s ago: executing program 2 (id=461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_io_uring_setup(0xeed, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x59de, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setflags(r3, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000530404"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) getresgid(&(0x7f0000000880)=0x0, &(0x7f00000008c0), &(0x7f0000000900)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001d40)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000001d80)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private0}}, &(0x7f0000001e80)=0xe8) statx(r8, &(0x7f0000001ec0)='./file0\x00', 0x100, 0x400, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002000)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000002040)={0x0}, &(0x7f0000002080)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000020c0)=0x0) lstat(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="dea502729bbe97cdca3266f9b57e81516f062b14e657dfbfec1c347f48bcfa7c77cacb4b35254bf979e5bcf7340e7334ab9aaca56d24bc1cb7b555af2ba233bce91da7fb70f75fb3afd6b57559eb174386e234e32f9805c49dc295dee130cbd8d7e4f3af21c22cf2c2f29d6b41a3cbfa3e97fbfb4f6479fab767538a0a3a5571f3365d183dbfd428d65aaacfaba12ec685bd400a6f7aade0ae4552fb6843", 0x9e}, {&(0x7f0000000380)="226ee4dd2da374045ae598727a78417a59f838441f6c9a66d0e4d1209e5a4f33a8e372c93eef367e275d0fa9d7ed445b0bb329d015b379292e5be796a054857921b89567e86942cd19d100ed9bf5d3171d74fd35740662d5636f684e12cc1f3ebd3c65a78f711d39ca6344bee7e1a546f23beacad3bdfbb27087", 0x7a}, {&(0x7f0000000480)="c74e8d2cc849b71215528bec3c4bf969296f153fe91dfcde657dc8508880bf09ecbcdd4eb298787a7b5798696218842016558cf16cc452fe882f742c3ba39dc6a6c8a7ed4466f8bff1f553ce68e3f535116611816605da51f11cde248e16a448f8b2da9f", 0x64}, {&(0x7f0000000000)="1c381ac2a55fa69f3f6f4f4ee7252216fb0330fbc8cff36dc3a6df77d980834c0e3a3b9900fa7a4e1b33e6", 0x2b}, {&(0x7f0000000180)="17bd2d12806258a506d059a170980b7315b59ded7b7e5442e82e9a6ec9dc2348528d", 0x22}, {&(0x7f0000000200)="51e49559951f08bcf29e3ba91bb9051c7693e11f8527b713a2146a42", 0x1c}, {&(0x7f0000000500)="2f95a32ca85222d4261256ff9f6ad12a5fc543fbad9248a52ccbef04e1c0b012333db25374014054e70e82a2a299fe739fa63143ab3a042ae9c70b83687432da005ae25d07033b4ad50aa7bb1200a840b4530bdc3f8b02aa290a60e3fcd8a95c71bb5215d0b5a4bef5fa8e640883e9cb5361db26f1211f1815ced3022abed87edd11874eb0a0f0b18830dccc9b2b264b6b019b1cc325177ca34c87453d7ee738f0cf17548b48d2fb596df6e3961a76aeb207b03d28de84062cc2acbdb01c52d2d7fd2ededbaa19f40aca57a943dae91fd47300c4e6a99c53df089407c37a2e98", 0xe0}, {&(0x7f0000000600)="de4c22830c62ff393c861161f7df76fcb340fac4e68e7a32a8ab23c999b462c98f4a630d94323511f9476fae18e48a7b3c9f23ca634f7f0a8f43bfd76c9030aa141b4bed97d8d5ae62cd1fb0e6915b9bc1fc4cee84b0f3c2ab73b84c779dce0118da4b8f89a30a80a0eb51de75a8192ce34ba3f90f62f27fa4f087070a1518c3732b525721e9e747c68b8b49c7963c1e97d3b8974a04e836792edb40e47dc3e9081056e86da542961cb93cd32a09c94ed3471ac960c7c81afac97a91a413bc8a1bdbcd11d35af2ff20bdb8fa3ed15a322f", 0xd1}], 0x8, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x20, 0x24000814}}, {{&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="459deb402ea1a74f4741d30ccf3c129576848e161a610de488118409a56b08c8125b1e3d9265f1ec678600220a389bc2d9791311bd6341f34b6be908e2b3d627da9f7ca421f5ea6b4863a30904260039314227c3ceed2b52ecc75a187a1322a37ba81ce032f6cae61ce2029d72ba9c7eaf5bfbd1874d288e632cb4b36e25a301550a0a2edf66e3baaadac7601f04a5619b6fdb95775356f6e26caf6bc727faf2db3d9d8498040235d9c229a32c8fc7452b667d93a05b4445632b11c94db1beaee25165309d4dd966fb86c0a05be18bd169", 0xd1}, {&(0x7f0000001b00)="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", 0xfd}], 0x3, &(0x7f0000001c40)=[@rights={{0x1c, 0x1, 0x1, [r6, r7, r5]}}], 0x20, 0x8814}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c80)="b9ad683f55e946f60253d958e41b03260bf798023bbe85b6465647e7c331f4145cc25e3cf8b059ba19d4aaf05192bfbe155d835803dd26d29bf63348774ff48e3864152bbfa3d3233d1a685ca0055bea0e4559079415310726024e59f92edfe299b40a694c6db24bd7ac3cb4db7aaf25", 0x70}], 0x1, &(0x7f00000021c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r4, r14, r1, r6, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x78, 0x4000040}}], 0x3, 0x40000) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x2, 0x2, @private=0x40}, 'syz_tun\x00'}) 27.022767481s ago: executing program 6 (id=463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_free_percpu\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0xc, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) dup2(r3, r4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @private, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00'}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'ip6erspan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3f8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='svcrdma_post_send\x00', r0, 0x0, 0x2}, 0x18) pivot_root(&(0x7f0000000100)='./file0\x00', 0x0) 26.960481672s ago: executing program 6 (id=465): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) sendto$inet6(r2, &(0x7f0000000380)="1e65d3874995d45c2c944366acc08e336e287c096811dcf8bed25808b03b89c64c2b649ee65d1ff5c97d7f5360ed8beecff6c6b8668ee4c1c5c15a0d4da1041c9664f167598d4c56f97d434e2abce95c3f6f8cef13681eb3a29a6175beb1706ca91d4c4ef704eb65b5ae29ef78d8a7edd55b913e4ef602c7a2dc706c1ebd70c1c99adeb5df16490b0d526da10a8fc927a4106d06fc303dfa4d54582127f2dca6", 0xa0, 0x40400c4, &(0x7f00000002c0)={0xa, 0x4e23, 0x8c, @local}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) pwritev(r3, 0x0, 0x0, 0xfffffffe, 0x0) 26.751066024s ago: executing program 6 (id=471): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) 26.750354524s ago: executing program 6 (id=472): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x103000, 0x0) lseek(r4, 0x3, 0x3) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000008010400000200000000030000010c0004800800077a300000000806000240001a000005000300210000009e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000008}, 0x20000044) setns(r7, 0x24020000) r9 = syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRESOCT=r5, @ANYRES8=r7, @ANYRESDEC, @ANYRESHEX=r4, @ANYRES64=r9, @ANYBLOB="b7ca6714999009e782850a510c63dd94cdda851449c0522db27ab7703baa19e1de2c33e130a4ad405ab9ae06106befdd884fdb5598142219b23b08d0a507ab38091e33e645c77623048d369a9074b0e3e720bfe6aa610cdaf2fc98b7505bd0603b4791b81e872084f195fd602f51da8a5448016b2a3e3825a7fe34a9858ec1b1f98ad375a93c7e6a3583f51fa918e74bf2fe6e7797bf20f0362bcef3a6654e7f03694a3768ee1fe1e8b5e951", @ANYRES64=r4, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f0000000400000008000000b263000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000004000006d3111a5a9877fac00005e20c1a042508f5500000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r10}, 0x10) r11 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r11, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) close(r11) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='xprtrdma_decode_seg\x00', r13}, 0x18) 26.528775766s ago: executing program 6 (id=476): ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x229b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xfffffffc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) 26.075845319s ago: executing program 2 (id=479): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev, 0x5}, 0x1c) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7fffffff}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 25.703105393s ago: executing program 2 (id=484): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setfsgid(0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 24.742429091s ago: executing program 2 (id=488): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) (fail_nth: 3) 24.659069121s ago: executing program 2 (id=492): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 24.559668281s ago: executing program 2 (id=496): bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070259cb349557c945489597fdc73f90a6400000000002020207b1af8ff00000000bfa10000000000000701e2fff7ffffffb702000001000000b703"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x14, r2, 0x325, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="68464426c966f84bdd6e06cf931531fcbaf1ff8db855eb41bdc3bc2b345661ffe18f0360e1eaf0ff5d1a7956b4b86b9d49068f1317292e4a43784ed4d6a3721116e77be313d37fcadab0b46f1795dc0c08bd67455e3fa785c472635eade3e0d5afc42662ba9a2226ff07"], &(0x7f0000000240)='GPL\x00', 0xfffffff6, 0x9c, &(0x7f0000000280)=""/156, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000003c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xa, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x5, @void, @value}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close_range(r6, r7, 0x0) 21.573204396s ago: executing program 0 (id=532): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev, 0x5}, 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 21.480419847s ago: executing program 0 (id=533): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close_range(r0, r1, 0x300) 21.397863257s ago: executing program 0 (id=534): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3804c82, &(0x7f0000001400)={[{@orlov}, {@grpjquota}], [{@euid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_gt}, {@fowner_lt}, {@obj_type}, {@obj_role={'obj_role', 0x3d, '{#'}}]}, 0x9, 0x784, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x330, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x103180) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) 21.259220318s ago: executing program 0 (id=535): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close_range(r0, r1, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x0, 0x4, 0x4, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000140)='GPL\x00', 0x2, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x2, 0xffffffff, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0xffffffffffffffff], &(0x7f0000000240)=[{0x4, 0x1, 0x8, 0x1}], 0x10, 0x5, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001400)={r3, r4}, 0xc) 21.229530808s ago: executing program 0 (id=536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKafee9u97SV7WCm7G+0qrLQHr2ZsCCEY2A3BK/z7SU8zb57x9x7WvGc+wC+AnnUuItYi4lhE3IuI0fb1pF3iZqtkj3v54tH0+otH00k0m3c+SfL27Fps+ZrMifZzDkXE738T8afkzbj1ldX5qUqlvNSuFxvVxWJ9ZfXyXHVqtjxbXiiVJicmx69fuVY6sLGerf7r+a/nbv3hv//50bP/r/3yL1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeEbSSPiOxFxPr//R6MvfzUBgKOs2RyN5ujW+iv92+oAwNGQ5jmwJC20cwEjkaaFQiuHdyaG00qt3rh0v7a8MNPKlY3FQHp/rlIeb+cKx2IgyeoT+fmremlb/UpEnI6Ivw4ez+uF6VplpptvfACgh53Ytv5/Ptha/wGAI26o2x0AAA6d9R8Aeo/1HwB6j/UfAHqP9R8Aeo/1HwB6j/UfAHrK727fzkpzvf351zMPVpbnaw8uz5Tr84Xq8nRhura0WJit1Wbzz+yp7vV8lVptceJqLD8sNsr1RrG+snq3WlteaNzNP9f7bnngUEYFAOzm9Nmn7ycRsXbjeF5iy14O1mo42tJudwDomr5udwDoGrt9Qe/yMz6wwxa9r+n4J0JPDr4vwOG4+H35f+hV8v/Qu+T/oXfJ/0PvajYTe/wDQI+R4wf8/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+vpG8JGmhvRf4SKRpoRBxMiLGYiC5P1cpj0fEqYh4b3BgMKtPdLvTAMBbSj9K2vt/XRy9MLK99VjyxWB+jIg///3O3x5ONRpLE9n1TzevN560r5e60X8AYC8b6/TGOr7h5YtH0xvlMPvz/FetzUWzuOvt0mrpj/78OBQDETH8WdKut2TvV/oOIP7a44j43k7jT/LcyFh759Pt8bPYJw81fvpa/DRvax2z78V3D6Av0GueZvPPzZ3uvzTO5ced7/+hfIZ6exvz3/ob81+6Of/1dZj/zu03xtX//bZj2+OIH/TvFD/ZjJ90iH9hn/E/+OGPz3dqa/4j4mLsHH9rrGKjulisr6xenqtOzZZnywul0uTE5Pj1K9dKxTxHXdzIVL/p4xuXTu02/uEO8Yf2GP/P9jn+f355748/2SX+L3668+t/Zpf42Zr4833Gnxr+d8ftu7P4Mx3Gv9frf2mf8Z99uDqzz4cCAIegvrI6P1WplJecdOmk79vRDSdOXjvp9swEvGuvbvpu9wQAAAAAAAAAAAAAAOjkMP6dqNtjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oj6KgAA//+r59Ta") r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg2\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 21.08450421s ago: executing program 0 (id=537): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 18.956554087s ago: executing program 1 (id=551): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 18.448917081s ago: executing program 1 (id=562): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1}, 0x18) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(0x0, 0x112) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendto$inet(r6, &(0x7f0000000300)="9502060eade86c603cf27be0e7aa7ac8ec0d880c047027943188e744b8789da50025129e38592c3b56b3d76e9e79e18d9b7c96ac4b63274a4fb1ed506c8c808a1fd42d60770912e48905b4a85f46757f758efef774083a80d68a2550cef1141ef8c56505367394013378782a102ecead70a4140f96ecf0eb01133c124a9dc8235726d5576114cab38954704f300727feb2b77e06cf007167ad94bb8993edaff46a4d9c24", 0xa4, 0x40040c0, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="13007582ffffffffa6dc847249"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 17.36319024s ago: executing program 1 (id=556): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3804c82, &(0x7f0000001400)={[{@orlov}, {@grpjquota}], [{@euid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_gt}, {@fowner_lt}, {@obj_type}, {@obj_role={'obj_role', 0x3d, '{#'}}]}, 0x9, 0x784, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x330, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x103180) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) 17.232325281s ago: executing program 1 (id=558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 17.196665721s ago: executing program 1 (id=559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) 16.759350245s ago: executing program 1 (id=561): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1}, 0x18) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(0x0, 0x112) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendto$inet(r6, 0x0, 0x0, 0x40040c0, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="13007582ffffffffa6dc847249"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 16.702900335s ago: executing program 34 (id=561): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1}, 0x18) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(0x0, 0x112) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendto$inet(r6, 0x0, 0x0, 0x40040c0, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="13007582ffffffffa6dc847249"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 11.460285548s ago: executing program 35 (id=476): ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x229b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xfffffffc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) 9.270472806s ago: executing program 36 (id=496): bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070259cb349557c945489597fdc73f90a6400000000002020207b1af8ff00000000bfa10000000000000701e2fff7ffffffb702000001000000b703"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x2000, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x14, r2, 0x325, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="68464426c966f84bdd6e06cf931531fcbaf1ff8db855eb41bdc3bc2b345661ffe18f0360e1eaf0ff5d1a7956b4b86b9d49068f1317292e4a43784ed4d6a3721116e77be313d37fcadab0b46f1795dc0c08bd67455e3fa785c472635eade3e0d5afc42662ba9a2226ff07"], &(0x7f0000000240)='GPL\x00', 0xfffffff6, 0x9c, &(0x7f0000000280)=""/156, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000003c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xa, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x5, @void, @value}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close_range(r6, r7, 0x0) 6.100801961s ago: executing program 37 (id=537): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 4.398480565s ago: executing program 8 (id=657): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x2}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 3.864940079s ago: executing program 8 (id=660): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x800000}, 0x20) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000051a3987077b400"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000100000000000000000300000000000000cd4db4dd5f3850ad25c38a51a799fce7ee15bac075bde6618aade6f055a091d36df1b562a362380c0f76da18f76230ff58ceafd63f5a33a638c4661b83d5cfe9627cd10a6504d42cb5aa1d37", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) inotify_init() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setresuid(0x0, r2, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f0000000080)={[{@jqfmt_vfsv0}, {@errors_remount}, {@delalloc}, {@noblock_validity}], [{@seclabel}, {@context={'context', 0x3d, 'unconfined_u'}, 0x22}]}, 0x0, 0x535, &(0x7f0000003280)="$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") 3.864363009s ago: executing program 8 (id=662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000900000005"], 0x50) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000280)={0x11, 0x7, r3, 0x1, 0xdf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r3, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0x0, r3, 0x3c}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c051}, 0x20000090) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000500)="15e27b80021db84a8f461032880420b5e265780fe539f3d7abed76fca9440ec4f0a915043b6f9d72b2f435763c7d4aab7d84439037738be99f1eccbe10ad24a92f0908793831b5acded7f3130f1360119c531d4b8538eee4882683af7d7d1e633841bff184a6ec163df38321995fec340b4100e6f3468da7e4fc8025abb78e9dcb6b", &(0x7f00000005c0)=""/217}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x19}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 3.608650281s ago: executing program 8 (id=669): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/bp20TUvtShz4uFiARCRE0qQtUAkkIi4c2hM9cMSK0xLVaVBjJFpFfAjEDSQQDwAH4BE4woF3gDNwgEoRyoGUm9Hau46J7bRpHYyS308aeWZn65nd6ax3J7MTwKFVjYiXI+JIRJyJiHK+Pc1DvN8J2X5bm+uLf2+uLybRar32ZxJJvq34riT/PJF/wXQakX6UxOMDyl27eetardFYupGnZ5srb82u3bz17PJK7erS1aXr88+dPXf+/AsX5p8f2bFurCSfPPXNxd8++7j++U9/fF/J6nsyz+s9jlGpRrV7Tna6MOrCxuxYTzwpjbEiAADsKs3v/Uvt+/9yHIntm7dyfPrjWCsHAAAAjESrVXwCAAAAB1fi2R8AAAAOuGIewNbm+mIRxjgdgf/YxkJEVDrtfycPnZxS953eiR3v945SNSJePXZpPguxT+9hAwAAABxmPyx0Fv7rH/9L45Ge/Y5HxFSxtt8IVXek+8d/0tsjLpIeGwsRL0bEnb7xv7TYpXIkTz3UHiqcSK4sN5bORMSpiJiOiaNZem6XMt594tq3w/J6x/++/PX1uaz87HN7j/R26ei//0291qw9yDGzbeODiMdKg9o/6Y759q6TeT/eWN56aVhe1v5Zexehv/3ZT62vIp4e2P+3Vy5Ndl+fdbZ9PZgtrgr9fjn59YfDyu/t/1nIyi/+FsD+y/r/1O7t314nt7te79rey/jur0s/D8u7e/sPvv5PJpfbFZzMt71TazZvzEVMJhf7t/vf1FWcj+J8Ze0//eTg3//i/i/Jf/tP9awPvRevvHf68rA8/X+8svav76n/7z3y5tSj08PKv7f+f65dmeJL3P/d3b020LjrCQAAAAAAAMBopO25fUk6042n6cxMZ57vwzGVNlbXms9cWX37er0zB7ASE2kx06vcMx90rvMaeTc9vyN9NiJOR8QX5ePt9MziaqM+7oMHAACAQ+LEkOf/zO/387IHAAAA8P9UGXcFAAAAgH3n+R8AAAAOtAdZ119EROSgRsZ9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA43P4JAAD//+0cwvs=") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x42220011, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x1, 0x0) preadv(r2, &(0x7f0000000480)=[{0x0}], 0x1, 0x1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000680)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty, {[@noop, @noop]}}, {0x0, 0x0, 0x8}}}}}, 0x0) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') 3.168697655s ago: executing program 8 (id=672): unshare(0x20000400) 2.788283558s ago: executing program 8 (id=681): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xa9a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x25, 0x5, 0x1) sendmsg$unix(r1, 0x0, 0x404cc05) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a"], 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~20\t&&') 2.756072688s ago: executing program 38 (id=681): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xa9a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x25, 0x5, 0x1) sendmsg$unix(r1, 0x0, 0x404cc05) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a"], 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) connect$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu~20\t&&') 1.769626496s ago: executing program 7 (id=691): unshare(0x20000400) 1.753288886s ago: executing program 7 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.680564657s ago: executing program 7 (id=693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2403, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = io_uring_setup(0x623f, &(0x7f0000000880)={0x0, 0x6ca1, 0x0, 0x0, 0x10000347}) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r4, 0xffffffffffffffff, 0x0) 877.614713ms ago: executing program 5 (id=706): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 767.010404ms ago: executing program 7 (id=708): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) migrate_pages(0x0, 0x7a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ufshcd_clk_gating\x00', r3, 0x0, 0x20000000}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sync() sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206c1801d82b68d04f3048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262f", 0x55}, {&(0x7f0000002880)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abe2019cbf8fbaaef087e7105127dec9647b07d0a4965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee425367bc33b71054226beb00b9ee6ae29f0b07bc6fe7981126ca804", 0x70}], 0x2}}], 0x1, 0x0) 626.335926ms ago: executing program 4 (id=711): r0 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x800000, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60010100009c1100fc020000000000000000000000000000ff02000000000000000000000000000100000e22009c90"], 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 568.985926ms ago: executing program 4 (id=712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 503.592206ms ago: executing program 7 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000900000005"], 0x50) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000280)={0x11, 0x7, r3, 0x1, 0xdf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r3, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0x0, r3, 0x3c}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c051}, 0x20000090) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x12, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x3, 0xe, 0xa, 0x20, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @generic={0x0, 0x0, 0xe, 0xffb9, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5f0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], &(0x7f0000000000)='GPL\x00', 0x9, 0x15, &(0x7f0000000140)=""/21, 0x41000, 0x2, '\x00', r3, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, r8, 0x4, 0x0, &(0x7f00000003c0)=[{0x5, 0x2, 0x3, 0x2}, {0x0, 0x3, 0x3, 0x9}, {0x4, 0x1, 0xc, 0x8}, {0x1, 0x1, 0x1, 0x2}], 0x10, 0x9, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x19}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 476.857886ms ago: executing program 5 (id=714): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000240)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xbbfac01}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x2, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20000400) 476.142316ms ago: executing program 9 (id=715): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000011140100000001000000000008004b0013000000080001000000000008004a"], 0x30}}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r6}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000cc0)={'gre0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x20, 0x20, 0x6957, 0x8001, {{0x1e, 0x4, 0x1, 0x4, 0x78, 0x66, 0x0, 0xb8, 0x4, 0x0, @remote, @multicast1, {[@rr={0x7, 0x17, 0xdf, [@loopback, @remote, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}]}, @generic={0x88, 0x5, "2b6d8a"}, @end, @end, @ssrr={0x89, 0x7, 0x52, [@local]}, @ssrr={0x89, 0xb, 0x3d, [@broadcast, @local]}, @cipso={0x86, 0x2f, 0xddf0a5207e38e951, [{0x5, 0x9, "41ab66abf94603"}, {0x0, 0xa, "39d8153296ac6891"}, {0x7, 0x9, "8cb6a8f3280985"}, {0x5, 0xd, "328722a478de9f0419fc55"}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000d00)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d40)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d80)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000dc0)={'wg0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000e00)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e80)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001040)={'syztnl1\x00', &(0x7f0000000f40)={'gre0\x00', 0x0, 0x1, 0x8, 0x1000, 0x9, {{0x38, 0x4, 0x3, 0x0, 0xe0, 0x67, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0xf5, 0x3, 0x4, [{@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@empty, 0x3}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x6}, {@loopback, 0x7}, {@broadcast, 0x100000}]}, @cipso={0x86, 0x61, 0xffffffffffffffff, [{0x0, 0xc, "365607a84a5c501e74f2"}, {0x0, 0xd, "4455ef6348cec29eee3db2"}, {0x0, 0x3, "cc"}, {0x0, 0x7, "318f6b5708"}, {0x0, 0x5, "b31947"}, {0x2, 0xd, "998261228f8c730c9b20dc"}, {0x7, 0x2}, {0xbc4f333978f22af2, 0xe, "e50839cfef4d42013fed8215"}, {0x6, 0x4, "bc69"}, {0x1, 0x12, "ed5a9691d03b19e395743eea3bd666b0"}]}, @timestamp_addr={0x44, 0x2c, 0xdd, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x7}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000940)=ANY=[@ANYBLOB="8c020000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf250d000000280001800800030001000000140002006c6f000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="4c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d727031000000000000000000007400018014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626f6e6400000008000300020000001400020077673200000000000000000000000000140002007665746830000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="44000180080003000000000008000100", @ANYRES32=r8, @ANYBLOB="1400020076657468315f766972745f77696669001400020076657468315f746f5f6261746164760008000300020000001c0001800800030002000000080003000100000008000100", @ANYRES32=r9, @ANYBLOB="380001800800030001000000624d5dc9f0f4e68375f575f53be508000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="1400020076657468315f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="440001801400020070696d7265673000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="180001801400020076657468305f746f5f626f6e640000003c0001800800030061923e8314000200776c616e31000000000000000000000014000200726f736530000000000000000000000008000100", @ANYRES32=r15, @ANYBLOB="6000018008000300020000001400020064766d72703100000000000000000000080003000000000008000100", @ANYRES32=r16, @ANYBLOB="1400020067656e6576653100000000000000000008000100", @ANYRES32=r17, @ANYBLOB="14000226d6e363ef3b1565dbe5006d6163766c616e310000000000000000"], 0x28c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) r19 = socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r19) sendmsg$DEVLINK_CMD_RATE_DEL(r19, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x34, r20, 0x6ae3e61d32b8160b, 0x70bd2a, 0xfffffffc, {0x4a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040) sendmsg$DEVLINK_CMD_SB_GET(r18, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0xac, r20, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2325f756}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8014}, 0x810) 446.441066ms ago: executing program 4 (id=716): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") r0 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 446.100337ms ago: executing program 5 (id=717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2403, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = io_uring_setup(0x623f, &(0x7f0000000880)={0x0, 0x6ca1, 0x0, 0x0, 0x10000347}) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r4, 0xffffffffffffffff, 0x0) 293.256518ms ago: executing program 7 (id=718): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7e06}, 0x18) rt_sigpending(0x0, 0x0) recvmmsg$unix(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000100, 0x0) 255.234348ms ago: executing program 9 (id=719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 254.508398ms ago: executing program 5 (id=720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100"], 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0xfe}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @remote}) write$tun(r7, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r9, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f0000000040)={0xa, 0x2, 0x1000, @empty}, 0x1c) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x281c2, 0x10) fcntl$setlease(r10, 0x400, 0x1) fremovexattr(r10, &(0x7f0000000040)=@known='system.posix_acl_default\x00') shutdown(r9, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000d00)=[{0x7fff, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x0, 0x989680}, 0x1) 152.638039ms ago: executing program 4 (id=721): ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x229b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xfffffffc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) 131.350369ms ago: executing program 9 (id=722): r0 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xef7f8a0472da7f47, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x1415, 0x10}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x1000, 0x80000000, 0x9, 0x1088, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1e, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff}, @ldst={0x2, 0x2, 0x4, 0x4, 0x5, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1dc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x3, 0x8, 0x1, 0x1, 0x8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x85, &(0x7f0000000200)=""/133, 0x40f00, 0x28, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x10, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[r5, r6, r7, 0x1, r8, r9, r10, r11, r12], &(0x7f00000005c0)=[{0x2, 0x2, 0x6, 0x4}], 0x10, 0xa8c6, @void, @value}, 0x94) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1f, 0x2, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x1) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 126.768269ms ago: executing program 5 (id=723): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x20000000003c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x1}, 0x19082, 0x7ffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x2000000, 0x0) 99.74088ms ago: executing program 4 (id=724): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r1 = gettid() capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000080)={0x7, 0x3, 0x0, 0x101, 0x9, 0x8}) write$binfmt_elf64(r0, 0x0, 0xfffffe3e) 40.35651ms ago: executing program 9 (id=725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 34.66279ms ago: executing program 5 (id=726): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5e9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6, 0x3}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x401, 0x0, 0x0, {0xb, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f00000001c0)='^}):{/@,\x00') r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10) ftruncate(r1, 0x5) r4 = socket(0x8, 0x3, 0x8ad) r5 = syz_clone(0x8000000, &(0x7f0000000300)="2922eacde6e6a7ac242e4bfeda0af36f908d0bacd10f22d9c85c7538bdc141b57bacc90f90cff52c2e6c99e2c2049246939d8c14e5f0acd4ec", 0x39, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="edcbcda3597f128371d322a475f87e75529917ad9715326b91956b2173c981220625dc7ab5a79fedc64a43db965d609c4735304b28e7a510498ec1910eb1971ff0430ada0450db46ce15bcd28071db2fa265f353de9d6c5ab4bda633d6fb25ba0516dcfd55bcb9b778cffba5ed54043f22ac9ed80934848f34219dd5389bd5dd0f2a275d6b815d72a7171beafd35e5229d0b4834") r6 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7, 0x7, 0x2, 0x4, 0x0, 0x77, 0x88005, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x2, @perf_config_ext={0x2}, 0x110822, 0xfffffffffffffffe, 0x1, 0x2, 0x8, 0x1ff, 0x5, 0x0, 0xffffffff, 0x0, 0xb}, r5, 0xb, 0xffffffffffffffff, 0x2) io_setup(0x7ff, &(0x7f0000000480)=0x0) r8 = eventfd(0xdb) r9 = syz_open_procfs(r5, &(0x7f0000000780)='children\x00') io_submit(r7, 0x3, &(0x7f0000000800)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x9, r6, &(0x7f00000004c0)="e9d615cb608f2f62761de464ac76d18a2ddc740244e41dd9b870910306850513f4ce7af175f83b837dfdcfb3b52009041eb02bac102f16acd0bfd599e3b3fda2ede3774189c667b640b859c980079eb7236e9e15a443866a3a208ed88c20d61e948f0239f3a1fd163d5a93e575011edfd9154733833c7847574f239aa117d6ca73c7ca9f788484abef7d7416f6f29a0fcfdb36fd8300c757cc8e845cfeeebdda7a", 0xa1, 0x65a52e50, 0x0, 0x0, r8}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0xb, r3, &(0x7f00000005c0)="c3023828a32e9d01bb47abaacef718991a73489486e54b073c361f73133e3a24c8656241d5523dff6f378dee5ad45bfde04b1d81b9f111cd1ba518ce87bf823a55e749e494f019038c63e00a58804816a7d2285f4553001bcd72ffc83fdffa8c43ee470b70a8b9a2d4e03049b3d49dc76d3741d01b059e120c03c6585eb53cdc9f7ab2e85183269e0176a4", 0x8b, 0x0, 0x0, 0x2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f00000006c0)="19da7a17da055c3c40d06e8da46bb73e946ef9f897071cc39f198cef70106169f3e495993332e862faa5cfc76fe0e0a0751593c84eaaf85b25d17018f5055d3a2cc85bf4300df5c592851f4a97236f59d64d43e4a1513f0eeae2cc7d6ccf614fd1dea29fa58258eb44359243d064d30ef497702f024bffb446ac2a8b23b236ebd8fdd299e6d10a73dad4a7d263cc69ff825b4ccc7bf461082db819", 0x9b, 0xfffffffffffffffb, 0x0, 0x1, r9}]) ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, &(0x7f0000000840)) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000880)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000008c0)=0x28) getsockname$packet(r4, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000940)=0x14) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000980)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x3, 0x1, 0x100, 0xad, 0x100010, r10}) io_getevents(r7, 0xfffffffffffffff2, 0x6, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000ac0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000cc0)=[0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000d40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000fc0)=@o_path={&(0x7f0000000f80)='./file0\x00', 0x0, 0xc010, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x19, 0x7, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8f9, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x3, 0xa, 0x0, 0x20}, @alu={0x4, 0x1, 0x0, 0x5, 0xb, 0x20, 0xfffffffffffffffc}]}, &(0x7f0000000b40)='GPL\x00', 0x5, 0xa2, &(0x7f0000000b80)=""/162, 0x40f00, 0x8, '\x00', r10, @fallback=0x10, r9, 0x8, &(0x7f0000000c40)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r11, r9, 0x4, &(0x7f0000001000)=[r12], &(0x7f0000001040)=[{0x4, 0x3, 0x4, 0x9}, {0x1, 0x2, 0x1, 0x1}, {0x3, 0x3, 0x4, 0x4}, {0x5, 0x4, 0x5, 0x1}], 0x10, 0x7fff, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001140)={0x0, 0x2, 0x1000}, &(0x7f0000001180)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000011c0)={r13, @in6={{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x7, 0x4, 0x0, 0x4, 0x2}, &(0x7f0000001280)=0x98) clock_gettime(0xe, &(0x7f00000012c0)) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r15, &(0x7f0000001340)="cb9ac06c39f0d4b0fcc99ddd53f5418e22e08feedc76d9f6ef2336a3fef17fef570e9248bef0959fe1c4dc3b10be22dde6b0ed9a8f1305b3a4d18c814e174039524169229ad476bbfacdbdfb4889537932a6ed288743f1349384f56d9a65be95ae29c53af933c879aabe618c742dac13fd482168c289ef88239b06e0d99a79ff7c5a006946c7b499bb39b03f3f5b83c3ac8fbc5c6449330680805d86fa3e", 0x9e, 0x0, &(0x7f0000001400)={0x11, 0x1, r10, 0x1, 0xfc, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) set_mempolicy(0x2, &(0x7f0000001440)=0x2, 0x6) io_submit(0x0, 0x1, &(0x7f0000002500)=[&(0x7f00000024c0)={0x0, 0x0, 0x0, 0xb, 0xff, r9, &(0x7f00000014c0)="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", 0x1000, 0x6, 0x0, 0x2, r14}]) 34.37112ms ago: executing program 4 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000900000005"], 0x50) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000280)={0x11, 0x7, r3, 0x1, 0xdf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r3, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0x0, r3, 0x3c}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c051}, 0x20000090) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r6, 0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0x12, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x3, 0xe, 0xa, 0x20, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @generic={0x0, 0x0, 0xe, 0xffb9, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5f0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], &(0x7f0000000000)='GPL\x00', 0x9, 0x15, &(0x7f0000000140)=""/21, 0x41000, 0x2, '\x00', r3, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, r8, 0x4, 0x0, &(0x7f00000003c0)=[{0x5, 0x2, 0x3, 0x2}, {0x0, 0x3, 0x3, 0x9}, {0x4, 0x1, 0xc, 0x8}, {0x1, 0x1, 0x1, 0x2}], 0x10, 0x9, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x19}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 33.84595ms ago: executing program 9 (id=728): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) pwritev2(r1, 0x0, 0x0, 0x6, 0x23, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x40000000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) setns(0xffffffffffffffff, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket$netlink(0x10, 0x3, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="34edff", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25250000000e0001006e6574"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 0s ago: executing program 9 (id=729): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f0000000940)=[{&(0x7f0000000d40)="0881703f", 0x4}], 0x1, 0x2, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x20000396, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x35, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='mark_victim\x00', r1, 0x0, 0x2000000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0xce, 0x7, 0xfffff801, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x7800, 0x7fffffff, 0x1}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}, 0x1, 0x0, 0x0, 0x8000}, 0x4008090) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e21, 0xffffff81, @empty, 0x3}}, 0x4, 0x9}, &(0x7f00000010c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001000)=ANY=[@ANYRES32=r5, @ANYBLOB="b3915ab86f919d9cd0e3f355ce933639c258cc763562ff0700005cf88d787b6a3f39cdefc9b4d2d8def318551227acee8882513c60ba5ed79247fd71e293f038ad4d975e9f021a32df308ac7d27f0a57bb452b44eb2970d788b9aae2e552f41694d57f7bb6d23081ba62f2643dd690bc039dba02fe56cb8a68f9e95680080000000000000085656c096ee1c4cf17bdbed46d6a8613b5e7cda6f4b51a22639f"], 0x69) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0xb7, &(0x7f0000000000), &(0x7f0000000280)=0x4) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000f80)={0x0, @broadcast, @initdev}, &(0x7f0000000fc0)=0xc) socket(0x10, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3804c82, &(0x7f0000000000)={[{@orlov}, {@grpjquota}]}, 0x9, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") kernel console output (not intermixed with test programs): us mode [ 52.824777][ T4524] ip6tnl1: entered allmulticast mode [ 52.842954][ T4513] syz.1.337: attempt to access beyond end of device [ 52.842954][ T4513] loop1: rw=524288, sector=897, nr_sectors = 144 limit=128 [ 52.843826][ T4522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.342'. [ 52.879746][ T4513] syz.1.337: attempt to access beyond end of device [ 52.879746][ T4513] loop1: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 52.881885][ T4517] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 52.893341][ T4513] syz.1.337: attempt to access beyond end of device [ 52.893341][ T4513] loop1: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 52.918684][ T4529] syz.1.337: attempt to access beyond end of device [ 52.918684][ T4529] loop1: rw=524288, sector=145, nr_sectors = 752 limit=128 [ 52.929301][ T4531] loop6: detected capacity change from 0 to 128 [ 52.950188][ T4513] syz.1.337: attempt to access beyond end of device [ 52.950188][ T4513] loop1: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 52.957534][ T4517] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 52.964015][ T4513] syz.1.337: attempt to access beyond end of device [ 52.964015][ T4513] loop1: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 52.993703][ T4531] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.995072][ T4513] syz.1.337: attempt to access beyond end of device [ 52.995072][ T4513] loop1: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 53.039479][ T4513] syz.1.337: attempt to access beyond end of device [ 53.039479][ T4513] loop1: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 53.055454][ T4513] syz.1.337: attempt to access beyond end of device [ 53.055454][ T4513] loop1: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 53.055549][ T4540] loop2: detected capacity change from 0 to 512 [ 53.076583][ T4517] syz.5.339 (4517) used greatest stack depth: 9280 bytes left [ 53.084230][ T4540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.113281][ T4540] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.245785][ T4551] siw: device registration error -23 [ 53.362387][ T4562] loop6: detected capacity change from 0 to 512 [ 53.498265][ T4562] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 53.543350][ T4562] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.354: invalid indirect mapped block 83886080 (level 1) [ 53.611344][ T4558] lo speed is unknown, defaulting to 1000 [ 53.631423][ T4562] EXT4-fs (loop6): Remounting filesystem read-only [ 53.672151][ T4562] EXT4-fs (loop6): 1 orphan inode deleted [ 53.678074][ T4562] EXT4-fs (loop6): 1 truncate cleaned up [ 53.684797][ T4562] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 53.733167][ T4558] hsr0 speed is unknown, defaulting to 1000 [ 53.866246][ T4558] bridge0: entered promiscuous mode [ 53.878793][ T4558] bridge0: port 3(macsec1) entered blocking state [ 53.885399][ T4558] bridge0: port 3(macsec1) entered disabled state [ 53.896946][ T4558] macsec1: entered allmulticast mode [ 53.925018][ T4558] macsec1: left allmulticast mode [ 53.938819][ T4558] bridge0: left promiscuous mode [ 53.968289][ T4580] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.058619][ T4580] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.127316][ T4589] FAULT_INJECTION: forcing a failure. [ 54.127316][ T4589] name failslab, interval 1, probability 0, space 0, times 0 [ 54.138643][ T4580] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.140307][ T4589] CPU: 0 UID: 0 PID: 4589 Comm: syz.6.364 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 54.140340][ T4589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.140356][ T4589] Call Trace: [ 54.140364][ T4589] [ 54.140373][ T4589] dump_stack_lvl+0xf2/0x150 [ 54.140465][ T4589] dump_stack+0x15/0x1a [ 54.140493][ T4589] should_fail_ex+0x24a/0x260 [ 54.140533][ T4589] should_failslab+0x8f/0xb0 [ 54.140609][ T4589] kmem_cache_alloc_noprof+0x52/0x320 [ 54.140658][ T4589] ? getname_kernel+0x3d/0x1f0 [ 54.140681][ T4589] ? selinux_capable+0x1f2/0x260 [ 54.140719][ T4589] getname_kernel+0x3d/0x1f0 [ 54.140807][ T4589] kern_path+0x21/0x120 [ 54.140865][ T4589] do_move_mount_old+0x5d/0xd0 [ 54.140981][ T4589] path_mount+0x536/0xb30 [ 54.141021][ T4589] __se_sys_mount+0x27f/0x2d0 [ 54.141058][ T4589] ? fput+0x1c4/0x200 [ 54.141086][ T4589] __x64_sys_mount+0x67/0x80 [ 54.141186][ T4589] x64_sys_call+0x2c84/0x2dc0 [ 54.141220][ T4589] do_syscall_64+0xc9/0x1c0 [ 54.141259][ T4589] ? clear_bhb_loop+0x55/0xb0 [ 54.141294][ T4589] ? clear_bhb_loop+0x55/0xb0 [ 54.141338][ T4589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.141372][ T4589] RIP: 0033:0x7f375398d169 [ 54.141391][ T4589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.141414][ T4589] RSP: 002b:00007f3751ff7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.141438][ T4589] RAX: ffffffffffffffda RBX: 00007f3753ba5fa0 RCX: 00007f375398d169 [ 54.141453][ T4589] RDX: 0000000000000000 RSI: 00004000000004c0 RDI: 0000400000000480 [ 54.141493][ T4589] RBP: 00007f3751ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.141508][ T4589] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 54.141523][ T4589] R13: 0000000000000000 R14: 00007f3753ba5fa0 R15: 00007fff688970f8 [ 54.141545][ T4589] [ 54.144753][ T4587] loop2: detected capacity change from 0 to 2048 [ 54.202414][ T4591] netlink: 'syz.0.365': attribute type 10 has an invalid length. [ 54.225592][ T4587] EXT4-fs: Ignoring removed bh option [ 54.362548][ T4591] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.369870][ T4591] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.388383][ T4594] rdma_rxe: rxe_newlink: failed to add bond0 [ 54.400099][ T4591] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.407202][ T4591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.414594][ T4591] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.418260][ T4594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.421664][ T4591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.430162][ T4594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.441579][ T4591] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 54.456248][ T4580] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.481379][ T4598] netem: change failed [ 54.512425][ T4602] FAULT_INJECTION: forcing a failure. [ 54.512425][ T4602] name failslab, interval 1, probability 0, space 0, times 0 [ 54.525303][ T4602] CPU: 0 UID: 0 PID: 4602 Comm: syz.5.369 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 54.525330][ T4602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.525345][ T4602] Call Trace: [ 54.525431][ T4602] [ 54.525438][ T4602] dump_stack_lvl+0xf2/0x150 [ 54.525500][ T4602] dump_stack+0x15/0x1a [ 54.525525][ T4602] should_fail_ex+0x24a/0x260 [ 54.525555][ T4602] ? flow_change+0x1c6/0xc90 [ 54.525584][ T4602] should_failslab+0x8f/0xb0 [ 54.525688][ T4602] __kmalloc_cache_noprof+0x4e/0x320 [ 54.525714][ T4602] flow_change+0x1c6/0xc90 [ 54.525743][ T4602] ? should_fail_ex+0xd7/0x260 [ 54.525839][ T4602] tc_new_tfilter+0xe8b/0x1110 [ 54.525952][ T4602] ? __pfx_tc_new_tfilter+0x10/0x10 [ 54.526008][ T4602] rtnetlink_rcv_msg+0x651/0x710 [ 54.526034][ T4602] ? ref_tracker_free+0x3a5/0x410 [ 54.526070][ T4602] netlink_rcv_skb+0x12c/0x230 [ 54.526104][ T4602] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 54.526155][ T4602] rtnetlink_rcv+0x1c/0x30 [ 54.526249][ T4602] netlink_unicast+0x599/0x670 [ 54.526286][ T4602] netlink_sendmsg+0x5cc/0x6e0 [ 54.526373][ T4602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.526411][ T4602] __sock_sendmsg+0x140/0x180 [ 54.526510][ T4602] ____sys_sendmsg+0x326/0x4b0 [ 54.526543][ T4602] __sys_sendmsg+0x19d/0x230 [ 54.526590][ T4602] __x64_sys_sendmsg+0x46/0x50 [ 54.526614][ T4602] x64_sys_call+0x2734/0x2dc0 [ 54.526700][ T4602] do_syscall_64+0xc9/0x1c0 [ 54.526733][ T4602] ? clear_bhb_loop+0x55/0xb0 [ 54.526765][ T4602] ? clear_bhb_loop+0x55/0xb0 [ 54.526828][ T4602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.526869][ T4602] RIP: 0033:0x7f1d5106d169 [ 54.526886][ T4602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.526947][ T4602] RSP: 002b:00007f1d4f6d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.526964][ T4602] RAX: ffffffffffffffda RBX: 00007f1d51285fa0 RCX: 00007f1d5106d169 [ 54.526978][ T4602] RDX: 0000000020040054 RSI: 0000400000006040 RDI: 0000000000000004 [ 54.527014][ T4602] RBP: 00007f1d4f6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.527028][ T4602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.527076][ T4602] R13: 0000000000000000 R14: 00007f1d51285fa0 R15: 00007ffdff118d78 [ 54.527093][ T4602] [ 54.776230][ T4599] lo speed is unknown, defaulting to 1000 [ 54.788905][ T4604] FAULT_INJECTION: forcing a failure. [ 54.788905][ T4604] name failslab, interval 1, probability 0, space 0, times 0 [ 54.801651][ T4604] CPU: 0 UID: 0 PID: 4604 Comm: syz.0.368 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 54.801675][ T4604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.801688][ T4604] Call Trace: [ 54.801695][ T4604] [ 54.801702][ T4604] dump_stack_lvl+0xf2/0x150 [ 54.801728][ T4604] dump_stack+0x15/0x1a [ 54.801753][ T4604] should_fail_ex+0x24a/0x260 [ 54.801788][ T4604] should_failslab+0x8f/0xb0 [ 54.801818][ T4604] kmem_cache_alloc_noprof+0x52/0x320 [ 54.801839][ T4604] ? vm_area_alloc+0x2c/0x130 [ 54.801865][ T4604] vm_area_alloc+0x2c/0x130 [ 54.801892][ T4604] mmap_region+0x819/0x1620 [ 54.801939][ T4604] do_mmap+0x98a/0xc30 [ 54.801975][ T4604] vm_mmap_pgoff+0x16d/0x2d0 [ 54.802010][ T4604] ksys_mmap_pgoff+0xd0/0x330 [ 54.802044][ T4604] ? fpregs_assert_state_consistent+0x83/0xa0 [ 54.802070][ T4604] x64_sys_call+0x1940/0x2dc0 [ 54.802100][ T4604] do_syscall_64+0xc9/0x1c0 [ 54.802131][ T4604] ? clear_bhb_loop+0x55/0xb0 [ 54.802157][ T4604] ? clear_bhb_loop+0x55/0xb0 [ 54.802187][ T4604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.802217][ T4604] RIP: 0033:0x7fac4ea8d1a3 [ 54.802231][ T4604] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 54.802248][ T4604] RSP: 002b:00007fac4d0f0e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 54.802265][ T4604] RAX: ffffffffffffffda RBX: 00000000000004f0 RCX: 00007fac4ea8d1a3 [ 54.802277][ T4604] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 54.802289][ T4604] RBP: 0000400000000602 R08: 00000000ffffffff R09: 0000000000000000 [ 54.802303][ T4604] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000009 [ 54.802317][ T4604] R13: 00007fac4d0f0ef0 R14: 00007fac4d0f0eb0 R15: 00004000000002c0 [ 54.802338][ T4604] [ 54.813748][ T4599] hsr0 speed is unknown, defaulting to 1000 [ 54.910965][ T4600] lo speed is unknown, defaulting to 1000 [ 54.950312][ T4580] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.017256][ T4580] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.037434][ T4613] loop5: detected capacity change from 0 to 2048 [ 55.046617][ T4580] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.055169][ T4613] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 55.077945][ T4580] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.089256][ T4600] hsr0 speed is unknown, defaulting to 1000 [ 55.096864][ T4615] FAULT_INJECTION: forcing a failure. [ 55.096864][ T4615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.096889][ T4615] CPU: 0 UID: 0 PID: 4615 Comm: syz.0.374 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 55.096917][ T4615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.096931][ T4615] Call Trace: [ 55.096938][ T4615] [ 55.096946][ T4615] dump_stack_lvl+0xf2/0x150 [ 55.096978][ T4615] dump_stack+0x15/0x1a [ 55.097003][ T4615] should_fail_ex+0x24a/0x260 [ 55.097096][ T4615] should_fail+0xb/0x10 [ 55.097128][ T4615] should_fail_usercopy+0x1a/0x20 [ 55.097163][ T4615] _copy_to_user+0x20/0xa0 [ 55.097184][ T4615] simple_read_from_buffer+0xa0/0x110 [ 55.097277][ T4615] proc_fail_nth_read+0xf9/0x140 [ 55.097317][ T4615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.097348][ T4615] vfs_read+0x19b/0x6f0 [ 55.097450][ T4615] ? ip_setsockopt+0xea/0x100 [ 55.097520][ T4615] ? __rcu_read_unlock+0x4e/0x70 [ 55.097546][ T4615] ? __fget_files+0x17c/0x1c0 [ 55.097620][ T4615] ksys_read+0xe8/0x1b0 [ 55.097652][ T4615] __x64_sys_read+0x42/0x50 [ 55.097749][ T4615] x64_sys_call+0x2874/0x2dc0 [ 55.097779][ T4615] do_syscall_64+0xc9/0x1c0 [ 55.097819][ T4615] ? clear_bhb_loop+0x55/0xb0 [ 55.097867][ T4615] ? clear_bhb_loop+0x55/0xb0 [ 55.097899][ T4615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.097930][ T4615] RIP: 0033:0x7fac4ea8bb7c [ 55.097946][ T4615] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.097963][ T4615] RSP: 002b:00007fac4d0f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.098016][ T4615] RAX: ffffffffffffffda RBX: 00007fac4eca5fa0 RCX: 00007fac4ea8bb7c [ 55.098060][ T4615] RDX: 000000000000000f RSI: 00007fac4d0f10a0 RDI: 0000000000000007 [ 55.098073][ T4615] RBP: 00007fac4d0f1090 R08: 0000000000000000 R09: 0000000000000000 [ 55.098130][ T4615] R10: 0000400000000540 R11: 0000000000000246 R12: 0000000000000001 [ 55.098142][ T4615] R13: 0000000000000000 R14: 00007fac4eca5fa0 R15: 00007ffe388d9e08 [ 55.098161][ T4615] [ 55.153565][ T4618] capability: warning: `syz.5.375' uses 32-bit capabilities (legacy support in use) [ 55.219697][ T4620] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 55.219715][ T4620] __nla_validate_parse: 1 callbacks suppressed [ 55.219727][ T4620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 55.344525][ T4622] FAULT_INJECTION: forcing a failure. [ 55.344525][ T4622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.357732][ T4622] CPU: 0 UID: 0 PID: 4622 Comm: syz.0.377 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 55.357762][ T4622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.357778][ T4622] Call Trace: [ 55.357833][ T4622] [ 55.357840][ T4622] dump_stack_lvl+0xf2/0x150 [ 55.357869][ T4622] dump_stack+0x15/0x1a [ 55.357890][ T4622] should_fail_ex+0x24a/0x260 [ 55.357922][ T4622] should_fail+0xb/0x10 [ 55.357949][ T4622] should_fail_usercopy+0x1a/0x20 [ 55.357987][ T4622] _copy_to_user+0x20/0xa0 [ 55.358006][ T4622] simple_read_from_buffer+0xa0/0x110 [ 55.358035][ T4622] proc_fail_nth_read+0xf9/0x140 [ 55.358066][ T4622] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.358122][ T4622] vfs_read+0x19b/0x6f0 [ 55.358147][ T4622] ? __rcu_read_unlock+0x4e/0x70 [ 55.358170][ T4622] ? __fget_files+0x17c/0x1c0 [ 55.358238][ T4622] ksys_read+0xe8/0x1b0 [ 55.358265][ T4622] __x64_sys_read+0x42/0x50 [ 55.358346][ T4622] x64_sys_call+0x2874/0x2dc0 [ 55.358373][ T4622] do_syscall_64+0xc9/0x1c0 [ 55.358405][ T4622] ? clear_bhb_loop+0x55/0xb0 [ 55.358509][ T4622] ? clear_bhb_loop+0x55/0xb0 [ 55.358571][ T4622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.358597][ T4622] RIP: 0033:0x7fac4ea8bb7c [ 55.358612][ T4622] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.358670][ T4622] RSP: 002b:00007fac4d0f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.358688][ T4622] RAX: ffffffffffffffda RBX: 00007fac4eca5fa0 RCX: 00007fac4ea8bb7c [ 55.358699][ T4622] RDX: 000000000000000f RSI: 00007fac4d0f10a0 RDI: 0000000000000005 [ 55.358711][ T4622] RBP: 00007fac4d0f1090 R08: 0000000000000000 R09: 0000000000000000 [ 55.358753][ T4622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.358764][ T4622] R13: 0000000000000000 R14: 00007fac4eca5fa0 R15: 00007ffe388d9e08 [ 55.358786][ T4622] [ 55.591381][ T4626] SELinux: policydb magic number 0x917cff8c does not match expected magic number 0xf97cff8c [ 55.601983][ T4626] SELinux: failed to load policy [ 55.717144][ T4628] loop1: detected capacity change from 0 to 128 [ 55.723544][ T4634] loop2: detected capacity change from 0 to 128 [ 55.732967][ T4634] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.801519][ T4628] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.845556][ T4618] loop5: detected capacity change from 0 to 2048 [ 56.021569][ T4642] lo speed is unknown, defaulting to 1000 [ 56.078190][ T4642] hsr0 speed is unknown, defaulting to 1000 [ 56.236466][ T4617] unsupported nla_type 52263 [ 56.264975][ T4662] loop6: detected capacity change from 0 to 2048 [ 56.271798][ T4662] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 56.291977][ T4666] netlink: 'syz.2.387': attribute type 21 has an invalid length. [ 56.409489][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.6.390'. [ 56.418628][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.6.390'. [ 56.427545][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.390'. [ 56.439885][ T4680] loop6: detected capacity change from 0 to 128 [ 56.558352][ T4682] veth0_to_bond: entered promiscuous mode [ 56.574779][ T4682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'. [ 56.587643][ T4682] veth0_to_bond (unregistering): left promiscuous mode [ 56.597875][ T4682] bond0: (slave bond_slave_0): Releasing backup interface [ 56.625987][ T30] kauditd_printk_skb: 274 callbacks suppressed [ 56.626002][ T30] audit: type=1326 audit(1741568530.181:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e7dcd169 code=0x7ffc0000 [ 56.665636][ T4687] sd 0:0:1:0: device reset [ 56.670268][ T30] audit: type=1326 audit(1741568530.211:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e7dcd169 code=0x7ffc0000 [ 56.693713][ T30] audit: type=1326 audit(1741568530.211:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68e7dcd169 code=0x7ffc0000 [ 56.717229][ T30] audit: type=1326 audit(1741568530.211:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e7dcd169 code=0x7ffc0000 [ 56.740635][ T30] audit: type=1326 audit(1741568530.211:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68e7dcd169 code=0x7ffc0000 [ 56.764102][ T30] audit: type=1326 audit(1741568530.211:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e7dcd169 code=0x7ffc0000 [ 56.787629][ T30] audit: type=1326 audit(1741568530.211:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68e7dcd169 code=0x7ffc0000 [ 56.811020][ T30] audit: type=1326 audit(1741568530.211:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e7dcd169 code=0x7ffc0000 [ 56.834578][ T30] audit: type=1326 audit(1741568530.211:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f68e7dcd169 code=0x7ffc0000 [ 56.857879][ T30] audit: type=1326 audit(1741568530.211:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4686 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e7dcd169 code=0x7ffc0000 [ 56.912634][ T4690] 9pnet_fd: Insufficient options for proto=fd [ 56.998082][ T4687] infiniband syz!: set active [ 57.002804][ T4687] infiniband syz!: added team_slave_0 [ 57.074085][ T4687] RDS/IB: syz!: added [ 57.082474][ T4687] smc: adding ib device syz! with port count 1 [ 57.089197][ T4698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.113191][ T4698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.135163][ T4687] smc: ib device syz! port 1 has pnetid [ 57.380707][ T4706] FAULT_INJECTION: forcing a failure. [ 57.380707][ T4706] name failslab, interval 1, probability 0, space 0, times 0 [ 57.393600][ T4706] CPU: 1 UID: 0 PID: 4706 Comm: syz.2.397 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 57.393723][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.393735][ T4706] Call Trace: [ 57.393761][ T4706] [ 57.393769][ T4706] dump_stack_lvl+0xf2/0x150 [ 57.393824][ T4706] dump_stack+0x15/0x1a [ 57.393847][ T4706] should_fail_ex+0x24a/0x260 [ 57.393880][ T4706] ? security_load_policy+0x94/0x8d0 [ 57.393936][ T4706] should_failslab+0x8f/0xb0 [ 57.394005][ T4706] __kmalloc_cache_noprof+0x4e/0x320 [ 57.394032][ T4706] security_load_policy+0x94/0x8d0 [ 57.394067][ T4706] ? rep_movs_alternative+0x4a/0x70 [ 57.394093][ T4706] sel_write_load+0x1d1/0x360 [ 57.394113][ T4706] ? __pfx_sel_write_load+0x10/0x10 [ 57.394134][ T4706] vfs_write+0x27d/0x920 [ 57.394195][ T4706] ? putname+0xcf/0xf0 [ 57.394213][ T4706] ? __fget_files+0x17c/0x1c0 [ 57.394328][ T4706] ksys_write+0xe8/0x1b0 [ 57.394363][ T4706] __x64_sys_write+0x42/0x50 [ 57.394391][ T4706] x64_sys_call+0x287e/0x2dc0 [ 57.394419][ T4706] do_syscall_64+0xc9/0x1c0 [ 57.394503][ T4706] ? clear_bhb_loop+0x55/0xb0 [ 57.394558][ T4706] ? clear_bhb_loop+0x55/0xb0 [ 57.394643][ T4706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.394671][ T4706] RIP: 0033:0x7f68e7dcd169 [ 57.394694][ T4706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.394713][ T4706] RSP: 002b:00007f68e6437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.394732][ T4706] RAX: ffffffffffffffda RBX: 00007f68e7fe5fa0 RCX: 00007f68e7dcd169 [ 57.394745][ T4706] RDX: 0000000000002000 RSI: 0000400000000340 RDI: 0000000000000003 [ 57.394794][ T4706] RBP: 00007f68e6437090 R08: 0000000000000000 R09: 0000000000000000 [ 57.394806][ T4706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.394818][ T4706] R13: 0000000000000000 R14: 00007f68e7fe5fa0 R15: 00007fff8188c5d8 [ 57.394855][ T4706] [ 57.394866][ T4706] SELinux: failed to load policy [ 57.396805][ T4703] lo speed is unknown, defaulting to 1000 [ 57.599562][ T4710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.398'. [ 57.634254][ T4703] hsr0 speed is unknown, defaulting to 1000 [ 57.651847][ T4709] loop2: detected capacity change from 0 to 2048 [ 57.668477][ T4712] loop6: detected capacity change from 0 to 512 [ 57.688011][ T4712] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.722380][ T4712] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #19: comm syz.6.399: corrupted inode contents [ 57.737132][ T4712] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #19: comm syz.6.399: mark_inode_dirty error [ 57.739767][ T4697] rdma_rxe: rxe_newlink: failed to add bond0 [ 57.761946][ T4712] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #19: comm syz.6.399: corrupted inode contents [ 57.798728][ T4712] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3006: inode #19: comm syz.6.399: mark_inode_dirty error [ 57.810986][ T4712] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3009: inode #19: comm syz.6.399: mark inode dirty (error -117) [ 57.824807][ T4712] EXT4-fs warning (device loop6): ext4_evict_inode:276: xattr delete (err -117) [ 57.831887][ T4709] EXT4-fs (loop2): shut down requested (0) [ 57.870602][ T4719] loop2: detected capacity change from 0 to 256 [ 57.882694][ T4719] FAT-fs (loop2): bogus number of FAT sectors [ 57.888879][ T4719] FAT-fs (loop2): Can't find a valid FAT filesystem [ 57.907352][ T4719] netlink: 180900 bytes leftover after parsing attributes in process `+}[@'. [ 57.916226][ T4719] netlink: zone id is out of range [ 57.921402][ T4719] netlink: zone id is out of range [ 57.926651][ T4719] netlink: zone id is out of range [ 57.932285][ T4719] netlink: zone id is out of range [ 57.937575][ T4719] netlink: zone id is out of range [ 57.942695][ T4719] netlink: zone id is out of range [ 57.947855][ T4719] netlink: zone id is out of range [ 57.952993][ T4719] netlink: zone id is out of range [ 57.958162][ T4719] netlink: zone id is out of range [ 57.963277][ T4719] netlink: zone id is out of range [ 57.988157][ T4722] loop6: detected capacity change from 0 to 512 [ 58.015252][ T4722] EXT4-fs: Ignoring removed nobh option [ 58.043262][ T4722] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.092348][ T4722] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.401: bg 0: block 224: padding at end of block bitmap is not set [ 58.110961][ T4722] EXT4-fs (loop6): Remounting filesystem read-only [ 58.147518][ T4735] loop5: detected capacity change from 0 to 128 [ 58.163377][ T4735] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.255566][ T4743] netem: change failed [ 58.265965][ T4741] loop6: detected capacity change from 0 to 2048 [ 58.287524][ T4747] 9pnet_fd: Insufficient options for proto=fd [ 58.290394][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.407'. [ 58.320258][ T4741] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 58.336705][ T4741] netlink: 'syz.6.407': attribute type 16 has an invalid length. [ 58.344473][ T4741] netlink: 'syz.6.407': attribute type 17 has an invalid length. [ 58.371108][ T4749] loop5: detected capacity change from 0 to 1024 [ 58.393252][ T4749] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.445571][ T4749] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 58.453652][ T4749] EXT4-fs (loop5): orphan cleanup on readonly fs [ 58.476176][ T4749] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 58.486254][ T4749] EXT4-fs (loop5): Remounting filesystem read-only [ 58.486485][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.407'. [ 58.492999][ T4749] EXT4-fs (loop5): 1 orphan inode deleted [ 58.515724][ T4749] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 58.541595][ T4751] lo speed is unknown, defaulting to 1000 [ 58.594644][ T4751] hsr0 speed is unknown, defaulting to 1000 [ 58.624730][ T4763] ip6tnl1: entered promiscuous mode [ 58.630043][ T4763] ip6tnl1: entered allmulticast mode [ 58.676260][ T4771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.416'. [ 58.698128][ T4761] lo speed is unknown, defaulting to 1000 [ 58.772076][ T4783] loop5: detected capacity change from 0 to 128 [ 58.781308][ T4783] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.828293][ T4761] hsr0 speed is unknown, defaulting to 1000 [ 58.848251][ T4787] loop6: detected capacity change from 0 to 1024 [ 58.884239][ T4789] syz.5.420 (4789) used obsolete PPPIOCDETACH ioctl [ 58.900570][ T4789] loop5: detected capacity change from 0 to 512 [ 58.908637][ T4789] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.926527][ T4789] EXT4-fs (loop5): 1 truncate cleaned up [ 58.933640][ T4794] netem: change failed [ 59.018589][ T4805] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.046385][ T4805] netlink: 'syz.1.426': attribute type 16 has an invalid length. [ 59.054144][ T4805] netlink: 'syz.1.426': attribute type 17 has an invalid length. [ 59.119325][ T4812] sd 0:0:1:0: device reset [ 59.137967][ T4812] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 59.151197][ T4809] ip6tnl1: entered promiscuous mode [ 59.156476][ T4809] ip6tnl1: entered allmulticast mode [ 59.166590][ T4814] hub 2-0:1.0: USB hub found [ 59.173651][ T4814] hub 2-0:1.0: 8 ports detected [ 59.212515][ T4817] loop5: detected capacity change from 0 to 1024 [ 59.251545][ T4821] loop6: detected capacity change from 0 to 512 [ 59.266812][ T4821] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 59.275257][ T4821] EXT4-fs (loop6): orphan cleanup on readonly fs [ 59.282052][ T4821] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 59.297088][ T4821] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 59.303835][ T4821] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #13: comm syz.6.431: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 59.323513][ T4821] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.431: couldn't read orphan inode 13 (err -117) [ 59.359450][ T4821] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 59.378257][ T4827] lo speed is unknown, defaulting to 1000 [ 59.391177][ T4821] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 59.403089][ T4836] loop5: detected capacity change from 0 to 2048 [ 59.410062][ T4836] EXT4-fs: Ignoring removed bh option [ 59.431823][ T4821] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 59.436459][ T4827] hsr0 speed is unknown, defaulting to 1000 [ 59.464807][ T4842] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 59.482359][ T3374] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 59.484206][ T4842] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 59.491188][ T3374] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.510520][ T4834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.538335][ T4834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.621330][ T4842] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 59.643908][ T4836] lo speed is unknown, defaulting to 1000 [ 59.683503][ T4836] hsr0 speed is unknown, defaulting to 1000 [ 59.798995][ T4851] lo speed is unknown, defaulting to 1000 [ 59.857678][ T4851] hsr0 speed is unknown, defaulting to 1000 [ 60.121184][ T4855] lo speed is unknown, defaulting to 1000 [ 60.185344][ T4855] hsr0 speed is unknown, defaulting to 1000 [ 60.277188][ T4861] loop2: detected capacity change from 0 to 512 [ 60.469692][ T4868] ip6tnl1: entered promiscuous mode [ 60.475142][ T4868] ip6tnl1: entered allmulticast mode [ 60.547758][ T4875] __nla_validate_parse: 4 callbacks suppressed [ 60.547777][ T4875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 60.573195][ T4878] program syz.0.448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.631665][ T4881] loop2: detected capacity change from 0 to 128 [ 60.665422][ T4886] loop5: detected capacity change from 0 to 128 [ 60.689922][ T4886] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.692717][ T4892] capability: warning: `syz.1.455' uses deprecated v2 capabilities in a way that may be insecure [ 60.774939][ T4898] loop2: detected capacity change from 0 to 256 [ 60.788412][ T4896] loop6: detected capacity change from 0 to 1024 [ 60.794772][ T4898] FAT-fs (loop2): bogus number of FAT sectors [ 60.794786][ T4898] FAT-fs (loop2): Can't find a valid FAT filesystem [ 60.837228][ T4890] FAULT_INJECTION: forcing a failure. [ 60.837228][ T4890] name failslab, interval 1, probability 0, space 0, times 0 [ 60.850100][ T4890] CPU: 0 UID: 0 PID: 4890 Comm: syz.6.454 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 60.850147][ T4890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 60.850174][ T4890] Call Trace: [ 60.850180][ T4890] [ 60.850188][ T4890] dump_stack_lvl+0xf2/0x150 [ 60.850227][ T4890] dump_stack+0x15/0x1a [ 60.850300][ T4890] should_fail_ex+0x24a/0x260 [ 60.850343][ T4890] should_failslab+0x8f/0xb0 [ 60.850380][ T4890] kmem_cache_alloc_noprof+0x52/0x320 [ 60.850400][ T4890] ? __es_insert_extent+0x563/0xed0 [ 60.850446][ T4890] __es_insert_extent+0x563/0xed0 [ 60.850497][ T4890] ext4_es_insert_extent+0x45a/0x1c60 [ 60.850554][ T4890] ext4_map_query_blocks+0x107/0x180 [ 60.850585][ T4890] ext4_map_blocks+0x23c/0xd20 [ 60.850616][ T4890] ? sidtab_context_to_sid+0x5b/0x5e0 [ 60.850680][ T4890] ext4_getblk+0x11f/0x530 [ 60.850711][ T4890] ext4_bread_batch+0x5b/0x360 [ 60.850766][ T4890] __ext4_find_entry+0x822/0xef0 [ 60.850799][ T4890] ? may_create+0x2b2/0x300 [ 60.850833][ T4890] ext4_lookup+0xba/0x390 [ 60.850866][ T4890] ? __pfx_ext4_lookup+0x10/0x10 [ 60.850889][ T4890] path_openat+0xd51/0x1fc0 [ 60.850961][ T4890] do_filp_open+0x107/0x230 [ 60.850993][ T4890] do_sys_openat2+0xab/0x120 [ 60.851014][ T4890] __x64_sys_openat+0xf3/0x120 [ 60.851036][ T4890] x64_sys_call+0x2b30/0x2dc0 [ 60.851066][ T4890] do_syscall_64+0xc9/0x1c0 [ 60.851151][ T4890] ? clear_bhb_loop+0x55/0xb0 [ 60.851180][ T4890] ? clear_bhb_loop+0x55/0xb0 [ 60.851208][ T4890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.851234][ T4890] RIP: 0033:0x7f375398d169 [ 60.851275][ T4890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.851302][ T4890] RSP: 002b:00007f3751ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 60.851322][ T4890] RAX: ffffffffffffffda RBX: 00007f3753ba5fa0 RCX: 00007f375398d169 [ 60.851333][ T4890] RDX: 000000000000275a RSI: 00004000000000c0 RDI: ffffffffffffff9c [ 60.851345][ T4890] RBP: 00007f3751ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.851356][ T4890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.851367][ T4890] R13: 0000000000000000 R14: 00007f3753ba5fa0 R15: 00007fff688970f8 [ 60.851386][ T4890] [ 61.191447][ T4922] /dev/nullb0: Can't lookup blockdev [ 61.406341][ T4943] netlink: 40 bytes leftover after parsing attributes in process `syz.6.472'. [ 61.458186][ T4943] lo speed is unknown, defaulting to 1000 [ 61.496135][ T4949] netem: change failed [ 61.502574][ T4943] hsr0 speed is unknown, defaulting to 1000 [ 61.620804][ T4955] xt_hashlimit: max too large, truncated to 1048576 [ 61.633844][ T4955] Cannot find set identified by id 0 to match [ 61.905087][ T30] kauditd_printk_skb: 376 callbacks suppressed [ 61.905103][ T30] audit: type=1400 audit(1741568535.411:1581): avc: denied { create } for pid=4958 comm="syz.5.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 61.931032][ T30] audit: type=1400 audit(1741568535.411:1582): avc: denied { connect } for pid=4958 comm="syz.5.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 61.950616][ T30] audit: type=1400 audit(1741568535.411:1583): avc: denied { connect } for pid=4958 comm="syz.5.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.970011][ T30] audit: type=1400 audit(1741568535.411:1584): avc: denied { write } for pid=4958 comm="syz.5.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.107111][ T4963] loop2: detected capacity change from 0 to 128 [ 62.126858][ T4967] FAULT_INJECTION: forcing a failure. [ 62.126858][ T4967] name failslab, interval 1, probability 0, space 0, times 0 [ 62.139597][ T4967] CPU: 1 UID: 0 PID: 4967 Comm: syz.5.480 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 62.139622][ T4967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 62.139636][ T4967] Call Trace: [ 62.139644][ T4967] [ 62.139654][ T4967] dump_stack_lvl+0xf2/0x150 [ 62.139733][ T4967] dump_stack+0x15/0x1a [ 62.139760][ T4967] should_fail_ex+0x24a/0x260 [ 62.139797][ T4967] should_failslab+0x8f/0xb0 [ 62.139829][ T4967] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 62.139880][ T4967] ? shmem_alloc_inode+0x34/0x50 [ 62.139906][ T4967] shmem_alloc_inode+0x34/0x50 [ 62.139968][ T4967] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 62.139996][ T4967] alloc_inode+0x3c/0x160 [ 62.140037][ T4967] new_inode+0x1e/0x100 [ 62.140142][ T4967] shmem_get_inode+0x24e/0x730 [ 62.140178][ T4967] shmem_mknod+0x44/0x180 [ 62.140217][ T4967] shmem_mkdir+0x33/0x70 [ 62.140251][ T4967] vfs_mkdir+0x1f4/0x320 [ 62.140281][ T4967] do_mkdirat+0x136/0x2c0 [ 62.140395][ T4967] __x64_sys_mkdirat+0x4e/0x60 [ 62.140429][ T4967] x64_sys_call+0x1b6f/0x2dc0 [ 62.140455][ T4967] do_syscall_64+0xc9/0x1c0 [ 62.140588][ T4967] ? clear_bhb_loop+0x55/0xb0 [ 62.140664][ T4967] ? clear_bhb_loop+0x55/0xb0 [ 62.140699][ T4967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.140733][ T4967] RIP: 0033:0x7f1d5106b9d7 [ 62.140752][ T4967] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.140773][ T4967] RSP: 002b:00007f1d4f6d6e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 62.140840][ T4967] RAX: ffffffffffffffda RBX: 00007f1d4f6d6ef0 RCX: 00007f1d5106b9d7 [ 62.140856][ T4967] RDX: 00000000000001ff RSI: 0000400000000140 RDI: 00000000ffffff9c [ 62.140871][ T4967] RBP: 0000000000000000 R08: 0000400000000000 R09: 0000000000000000 [ 62.140887][ T4967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000400000000140 [ 62.140901][ T4967] R13: 00007f1d4f6d6eb0 R14: 0000000000000000 R15: 0000000000000000 [ 62.140924][ T4967] [ 62.349272][ T4963] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.453395][ T4972] netlink: 'syz.5.483': attribute type 1 has an invalid length. [ 62.461134][ T4972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.483'. [ 62.498341][ T4976] rdma_rxe: rxe_newlink: failed to add bond0 [ 62.507017][ T4976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.585105][ T4976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.707855][ T30] audit: type=1326 audit(1741568536.261:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 62.731384][ T30] audit: type=1326 audit(1741568536.261:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 62.877990][ T4976] lo speed is unknown, defaulting to 1000 [ 63.197185][ T30] audit: type=1326 audit(1741568536.321:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd06423bc1f code=0x7ffc0000 [ 63.220530][ T30] audit: type=1326 audit(1741568536.321:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 63.238628][ T4976] hsr0 speed is unknown, defaulting to 1000 [ 63.243824][ T30] audit: type=1326 audit(1741568536.321:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 63.273151][ T30] audit: type=1326 audit(1741568536.321:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4982 comm="syz.1.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 63.449596][ T4988] netlink: 'syz.1.489': attribute type 4 has an invalid length. [ 63.457343][ T4988] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.489'. [ 63.564773][ T5005] loop5: detected capacity change from 0 to 2048 [ 63.615496][ T5005] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 63.753384][ T5008] loop5: detected capacity change from 0 to 128 [ 63.769868][ T5008] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.969166][ T5016] net_ratelimit: 347 callbacks suppressed [ 63.969186][ T5016] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 64.197069][ T5034] netem: change failed [ 64.203227][ T5035] netlink: 'syz.1.509': attribute type 4 has an invalid length. [ 64.233870][ T5036] loop5: detected capacity change from 0 to 2048 [ 64.247282][ T5038] rdma_rxe: rxe_newlink: failed to add bond0 [ 64.265780][ T5038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.273775][ T5036] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 64.274263][ T5038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.409060][ T5038] lo speed is unknown, defaulting to 1000 [ 64.498021][ T5038] hsr0 speed is unknown, defaulting to 1000 [ 64.523428][ T5047] loop5: detected capacity change from 0 to 2048 [ 64.555287][ T5047] EXT4-fs: Ignoring removed bh option [ 64.726914][ T5047] lo speed is unknown, defaulting to 1000 [ 64.846215][ T5047] hsr0 speed is unknown, defaulting to 1000 [ 65.476820][ T5067] lo speed is unknown, defaulting to 1000 [ 65.706960][ T5075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 65.730567][ T5067] hsr0 speed is unknown, defaulting to 1000 [ 65.888582][ T5068] loop5: detected capacity change from 0 to 512 [ 66.103371][ T5082] lo speed is unknown, defaulting to 1000 [ 66.198167][ T5082] hsr0 speed is unknown, defaulting to 1000 [ 66.532822][ T5100] loop5: detected capacity change from 0 to 2048 [ 66.594911][ T5100] EXT4-fs: Ignoring removed bh option [ 66.894998][ T5100] lo speed is unknown, defaulting to 1000 [ 66.967056][ T5100] hsr0 speed is unknown, defaulting to 1000 [ 67.456669][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 67.456698][ T30] audit: type=1326 audit(1741568541.011:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 67.573350][ T30] audit: type=1326 audit(1741568541.041:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 67.596779][ T30] audit: type=1326 audit(1741568541.041:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 67.619997][ T30] audit: type=1326 audit(1741568541.041:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 67.643454][ T30] audit: type=1326 audit(1741568541.041:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 67.666937][ T30] audit: type=1326 audit(1741568541.041:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 67.690232][ T30] audit: type=1326 audit(1741568541.041:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 67.713579][ T30] audit: type=1326 audit(1741568541.041:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 67.736909][ T30] audit: type=1326 audit(1741568541.041:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 67.760221][ T30] audit: type=1326 audit(1741568541.041:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5124 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06423d169 code=0x7ffc0000 [ 68.210751][ T5136] loop5: detected capacity change from 0 to 1024 [ 68.246091][ T5136] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 68.266298][ T5136] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 68.274418][ T5136] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.306242][ T5136] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.544: Invalid inode table block 0 in block_group 0 [ 68.325090][ T5136] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 68.334736][ T5136] EXT4-fs error (device loop5): ext4_quota_write:7299: inode #3: comm syz.5.544: mark_inode_dirty error [ 68.366022][ T5136] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.544: Failed to acquire dquot type 0 [ 68.405141][ T5136] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.544: Invalid inode table block 0 in block_group 0 [ 68.456413][ T5136] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 68.476411][ T5136] EXT4-fs error (device loop5): ext4_ext_truncate:4457: inode #15: comm syz.5.544: mark_inode_dirty error [ 68.515477][ T5136] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.544: Invalid inode table block 0 in block_group 0 [ 68.555031][ T5136] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 68.585108][ T5136] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 68.605365][ T5136] EXT4-fs error (device loop5): __ext4_get_inode_loc:4435: comm syz.5.544: Invalid inode table block 0 in block_group 0 [ 68.627062][ T5136] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 68.655434][ T5136] EXT4-fs error (device loop5): ext4_truncate:4240: inode #15: comm syz.5.544: mark_inode_dirty error [ 68.684072][ T5136] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 68.699863][ T5136] EXT4-fs (loop5): 1 truncate cleaned up [ 68.713734][ T5136] EXT4-fs mount: 72 callbacks suppressed [ 68.713755][ T5136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.807271][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.998016][ T5145] lo speed is unknown, defaulting to 1000 [ 69.041990][ T5145] hsr0 speed is unknown, defaulting to 1000 [ 69.216523][ T5153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 69.715206][ T5156] syz0: rxe_newlink: already configured on bond0 [ 69.759960][ T5157] loop5: detected capacity change from 0 to 2048 [ 69.795341][ T5157] EXT4-fs: Ignoring removed bh option [ 69.836530][ T5157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.859658][ T5156] lo speed is unknown, defaulting to 1000 [ 69.927088][ T5156] hsr0 speed is unknown, defaulting to 1000 [ 69.979814][ T5157] lo speed is unknown, defaulting to 1000 [ 70.151095][ T5157] hsr0 speed is unknown, defaulting to 1000 [ 70.425176][ T5161] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.464240][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.528756][ T5164] loop5: detected capacity change from 0 to 128 [ 70.547905][ T5164] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.585173][ T5164] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.662084][ T3576] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.825636][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.557'. [ 70.847454][ T5174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.854898][ T5174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.874625][ T5174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.882081][ T5174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.141641][ T5178] lo speed is unknown, defaulting to 1000 [ 71.235131][ T5178] hsr0 speed is unknown, defaulting to 1000 [ 71.390723][ T3399] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.446464][ T3399] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.508243][ T3399] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.587877][ T3399] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.608901][ T5181] tipc: Started in network mode [ 71.613812][ T5181] tipc: Node identity fedc3ddc931e, cluster identity 4711 [ 71.621082][ T5181] tipc: Enabled bearer , priority 0 [ 71.636634][ T5180] tipc: Disabling bearer [ 71.739625][ T3399] bridge_slave_1: left allmulticast mode [ 71.745386][ T3399] bridge_slave_1: left promiscuous mode [ 71.751094][ T3399] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.795385][ T3399] bridge_slave_0: left allmulticast mode [ 71.801070][ T3399] bridge_slave_0: left promiscuous mode [ 71.806849][ T3399] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.988064][ T3399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.002497][ T3399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.012368][ T3399] bond0 (unregistering): Released all slaves [ 72.023961][ T5196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.565'. [ 72.032936][ T5185] lo speed is unknown, defaulting to 1000 [ 72.122852][ T5200] loop5: detected capacity change from 0 to 128 [ 72.149142][ T5185] hsr0 speed is unknown, defaulting to 1000 [ 72.165369][ T5200] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.261950][ T153] smc: removing ib device syz0 [ 72.275702][ T5200] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.376530][ T3576] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.527383][ T5185] chnl_net:caif_netlink_parms(): no params data found [ 72.625134][ T5209] loop5: detected capacity change from 0 to 2048 [ 72.631766][ T5209] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 72.837505][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 72.837520][ T30] audit: type=1326 audit(1741568546.391:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 72.837580][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.854243][ T30] audit: type=1326 audit(1741568546.391:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d5106bc1f code=0x7ffc0000 [ 72.867091][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.873991][ T30] audit: type=1326 audit(1741568546.391:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 72.927693][ T30] audit: type=1326 audit(1741568546.391:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 72.951111][ T30] audit: type=1326 audit(1741568546.391:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d5106d1a3 code=0x7ffc0000 [ 72.984041][ T5216] loop5: detected capacity change from 0 to 4096 [ 73.006013][ T5185] bridge_slave_0: entered allmulticast mode [ 73.014583][ T5216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.035163][ T5185] bridge_slave_0: entered promiscuous mode [ 73.066319][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.073399][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.126065][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.140453][ T5185] bridge_slave_1: entered allmulticast mode [ 73.165674][ T5185] bridge_slave_1: entered promiscuous mode [ 73.196328][ T3399] hsr_slave_0: left promiscuous mode [ 73.205758][ T3399] hsr_slave_1: left promiscuous mode [ 73.225057][ T30] audit: type=1326 audit(1741568546.511:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d5106bc1f code=0x7ffc0000 [ 73.226902][ T3399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.248292][ T30] audit: type=1326 audit(1741568546.531:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1d5106d1f7 code=0x7ffc0000 [ 73.248324][ T30] audit: type=1326 audit(1741568546.531:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d5106bad0 code=0x7ffc0000 [ 73.255763][ T3399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.314029][ T30] audit: type=1326 audit(1741568546.531:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d5106cd6b code=0x7ffc0000 [ 73.337303][ T30] audit: type=1326 audit(1741568546.561:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5215 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1d5106bdca code=0x7ffc0000 [ 73.361140][ T3399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.368627][ T3399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.400779][ T3399] veth1_macvtap: left promiscuous mode [ 73.400806][ T3399] veth0_macvtap: left promiscuous mode [ 73.400851][ T3399] veth1_vlan: left promiscuous mode [ 73.400927][ T3399] veth0_vlan: left promiscuous mode [ 73.589327][ T5227] loop5: detected capacity change from 0 to 128 [ 73.597410][ T5227] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.605249][ T3399] team0 (unregistering): Port device team_slave_1 removed [ 73.609653][ T5227] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.654416][ T3399] team0 (unregistering): Port device team_slave_0 removed [ 73.687397][ T3576] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.769785][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.576'. [ 73.822986][ T5185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.856401][ T5185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.890046][ T5235] lo speed is unknown, defaulting to 1000 [ 73.927292][ T5185] team0: Port device team_slave_0 added [ 73.933764][ T5185] team0: Port device team_slave_1 added [ 73.965918][ T5235] hsr0 speed is unknown, defaulting to 1000 [ 73.996774][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.003740][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.014695][ T5236] loop5: detected capacity change from 0 to 2048 [ 74.029732][ T5185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.095786][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.102764][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.128767][ T5185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.267240][ T5185] hsr_slave_0: entered promiscuous mode [ 74.274081][ T5185] hsr_slave_1: entered promiscuous mode [ 74.441117][ T5185] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 74.450303][ T5185] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 74.487992][ T5185] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 74.526745][ T5185] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 74.633071][ T5242] lo speed is unknown, defaulting to 1000 [ 74.656450][ T5185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.689162][ T5185] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.726402][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.733497][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.758605][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.765717][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.781908][ T5242] hsr0 speed is unknown, defaulting to 1000 [ 74.856665][ T5185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.005023][ T5185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.292584][ T5185] veth0_vlan: entered promiscuous mode [ 75.320240][ T5185] veth1_vlan: entered promiscuous mode [ 75.353077][ T5185] veth0_macvtap: entered promiscuous mode [ 75.366766][ T5185] veth1_macvtap: entered promiscuous mode [ 75.389139][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.399779][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.409642][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.420228][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.485718][ T5185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.516985][ T5262] netem: change failed [ 75.523345][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.533876][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.543749][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.554211][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.587438][ T5264] loop5: detected capacity change from 0 to 128 [ 75.594859][ T5185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.617158][ T5185] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.625924][ T5185] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.634695][ T5185] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.643508][ T5185] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.653455][ T5264] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.685817][ T5264] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.770057][ T5268] loop7: detected capacity change from 0 to 512 [ 75.805882][ T5268] EXT4-fs: Ignoring removed nobh option [ 75.836967][ T3576] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.865498][ T5272] FAULT_INJECTION: forcing a failure. [ 75.865498][ T5272] name failslab, interval 1, probability 0, space 0, times 0 [ 75.878358][ T5272] CPU: 1 UID: 0 PID: 5272 Comm: syz.5.582 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 75.878390][ T5272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.878404][ T5272] Call Trace: [ 75.878410][ T5272] [ 75.878418][ T5272] dump_stack_lvl+0xf2/0x150 [ 75.878451][ T5272] dump_stack+0x15/0x1a [ 75.878499][ T5272] should_fail_ex+0x24a/0x260 [ 75.878530][ T5272] should_failslab+0x8f/0xb0 [ 75.878559][ T5272] kmem_cache_alloc_noprof+0x52/0x320 [ 75.878582][ T5272] ? audit_log_start+0x34c/0x6b0 [ 75.878703][ T5272] audit_log_start+0x34c/0x6b0 [ 75.878745][ T5272] ? __rcu_read_unlock+0x4e/0x70 [ 75.878774][ T5272] audit_log_common_recv_msg+0xc0/0x180 [ 75.878839][ T5272] audit_receive+0x1250/0x2580 [ 75.878867][ T5272] ? __netlink_deliver_tap+0x4de/0x4f0 [ 75.878983][ T5272] ? __netlink_lookup+0x253/0x290 [ 75.879011][ T5272] netlink_unicast+0x599/0x670 [ 75.879081][ T5272] netlink_sendmsg+0x5cc/0x6e0 [ 75.879175][ T5272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.879211][ T5272] __sock_sendmsg+0x140/0x180 [ 75.879247][ T5272] ____sys_sendmsg+0x326/0x4b0 [ 75.879370][ T5272] __sys_sendmsg+0x19d/0x230 [ 75.879418][ T5272] __x64_sys_sendmsg+0x46/0x50 [ 75.879449][ T5272] x64_sys_call+0x2734/0x2dc0 [ 75.879478][ T5272] do_syscall_64+0xc9/0x1c0 [ 75.879522][ T5272] ? clear_bhb_loop+0x55/0xb0 [ 75.879556][ T5272] ? clear_bhb_loop+0x55/0xb0 [ 75.879587][ T5272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.879613][ T5272] RIP: 0033:0x7f1d5106d169 [ 75.879628][ T5272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.879710][ T5272] RSP: 002b:00007f1d4f6d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.879729][ T5272] RAX: ffffffffffffffda RBX: 00007f1d51285fa0 RCX: 00007f1d5106d169 [ 75.879742][ T5272] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000006 [ 75.879756][ T5272] RBP: 00007f1d4f6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.879768][ T5272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.879781][ T5272] R13: 0000000000000000 R14: 00007f1d51285fa0 R15: 00007ffdff118d78 [ 75.879798][ T5272] [ 75.881919][ T5268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.155087][ T5268] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.183176][ T5268] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.564: bg 0: block 224: padding at end of block bitmap is not set [ 76.208950][ T5268] EXT4-fs (loop7): Remounting filesystem read-only [ 76.233144][ T5276] 9pnet_fd: Insufficient options for proto=fd [ 76.266711][ T5185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.299493][ T5278] netem: change failed [ 76.345608][ T5280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.364255][ T5280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.397601][ T5283] loop5: detected capacity change from 0 to 512 [ 76.399973][ T5280] loop7: detected capacity change from 0 to 512 [ 76.410351][ T5283] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 76.425544][ T5280] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 76.436424][ T5280] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 76.446449][ T5280] EXT4-fs (loop7): group descriptors corrupted! [ 76.473621][ T5283] EXT4-fs (loop5): 1 truncate cleaned up [ 76.479669][ T5283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.603745][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.901977][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.592'. [ 76.916185][ T5290] lo speed is unknown, defaulting to 1000 [ 76.997576][ T5307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.593'. [ 77.032619][ T5290] hsr0 speed is unknown, defaulting to 1000 [ 77.070802][ T5313] loop7: detected capacity change from 0 to 128 [ 77.079177][ T5316] netem: change failed [ 77.089506][ T5313] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.106685][ T5313] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.209580][ T5185] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.297252][ T5328] loop7: detected capacity change from 0 to 128 [ 77.326234][ T5328] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.337182][ T5290] chnl_net:caif_netlink_parms(): no params data found [ 77.346030][ T5328] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.409282][ T5185] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.448470][ T5290] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.455794][ T5290] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.472349][ T5290] bridge_slave_0: entered allmulticast mode [ 77.485616][ T5290] bridge_slave_0: entered promiscuous mode [ 77.492488][ T5290] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.499628][ T5290] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.506964][ T5290] bridge_slave_1: entered allmulticast mode [ 77.513466][ T5290] bridge_slave_1: entered promiscuous mode [ 77.523236][ T51] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.558133][ T5340] loop7: detected capacity change from 0 to 512 [ 77.574839][ T5340] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #2: comm syz.7.602: corrupted xattr block 255: invalid header [ 77.600295][ T5290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.637817][ T51] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.655152][ T5340] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 77.664673][ T5290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.685484][ T5340] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.715376][ T5340] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #2: comm syz.7.602: corrupted xattr block 255: invalid header [ 77.729434][ T51] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.742809][ T5340] SELinux: (dev loop7, type ext4) getxattr errno 117 [ 77.760799][ T5290] team0: Port device team_slave_0 added [ 77.776756][ T5290] team0: Port device team_slave_1 added [ 77.786088][ T5340] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.823686][ T51] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.857173][ T5336] netlink: 32 bytes leftover after parsing attributes in process `syz.7.602'. [ 77.871064][ T5336] netlink: 32 bytes leftover after parsing attributes in process `syz.7.602'. [ 77.885449][ T5290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.892520][ T5290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.918608][ T5290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.925682][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 77.925700][ T30] audit: type=1326 audit(1741568551.471:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 77.958604][ T30] audit: type=1326 audit(1741568551.471:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 78.003329][ T5350] loop5: detected capacity change from 0 to 4096 [ 78.010574][ T30] audit: type=1326 audit(1741568551.541:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d5106bc1f code=0x7ffc0000 [ 78.033836][ T30] audit: type=1326 audit(1741568551.541:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 78.057183][ T30] audit: type=1326 audit(1741568551.541:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 78.086311][ T5290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.093282][ T5290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.119319][ T5290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.135982][ T5350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.194800][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.204036][ T30] audit: type=1326 audit(1741568551.721:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 78.227639][ T30] audit: type=1326 audit(1741568551.721:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 78.251165][ T30] audit: type=1326 audit(1741568551.721:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 78.274611][ T30] audit: type=1326 audit(1741568551.721:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 78.298082][ T30] audit: type=1326 audit(1741568551.721:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.5.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 78.361044][ T5290] hsr_slave_0: entered promiscuous mode [ 78.375765][ T5290] hsr_slave_1: entered promiscuous mode [ 78.386784][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.609'. [ 78.395479][ T5290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.403136][ T5290] Cannot create hsr debugfs directory [ 78.445152][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.452641][ T5357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.505518][ T5357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.512951][ T5357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.547737][ T51] bridge_slave_1: left allmulticast mode [ 78.553424][ T51] bridge_slave_1: left promiscuous mode [ 78.559113][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.588609][ T51] bridge_slave_0: left allmulticast mode [ 78.594353][ T51] bridge_slave_0: left promiscuous mode [ 78.600048][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.783711][ T51] bridge0 (unregistering): left allmulticast mode [ 78.868200][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.887312][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.916840][ T51] bond0 (unregistering): Released all slaves [ 79.062810][ T51] hsr_slave_0: left promiscuous mode [ 79.068763][ T51] hsr_slave_1: left promiscuous mode [ 79.074477][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.081940][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.104175][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.111651][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.131937][ T51] veth1_macvtap: left promiscuous mode [ 79.138665][ T51] veth0_macvtap: left promiscuous mode [ 79.149957][ T51] veth1_vlan: left promiscuous mode [ 79.156963][ T51] veth0_vlan: left promiscuous mode [ 79.281646][ T51] team0 (unregistering): Port device team_slave_1 removed [ 79.301834][ T51] team0 (unregistering): Port device team_slave_0 removed [ 79.387831][ T5290] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 79.408039][ T5290] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 79.425682][ T5290] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 79.450917][ T5363] lo speed is unknown, defaulting to 1000 [ 79.457047][ T5290] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 79.552188][ T5363] hsr0 speed is unknown, defaulting to 1000 [ 79.564154][ T5290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.602611][ T5290] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.618979][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.626229][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.679454][ T5290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.689917][ T5290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.709601][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.716822][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.785827][ T5383] loop7: detected capacity change from 0 to 4096 [ 79.820421][ T5363] chnl_net:caif_netlink_parms(): no params data found [ 79.834853][ T5290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.842516][ T5383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.898283][ T5185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.931141][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.945383][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.952527][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.970917][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.7.617'. [ 79.975085][ T5363] bridge_slave_0: entered allmulticast mode [ 79.986534][ T5363] bridge_slave_0: entered promiscuous mode [ 79.996639][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.025141][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.032302][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.039871][ T5363] bridge_slave_1: entered allmulticast mode [ 80.047719][ T5363] bridge_slave_1: entered promiscuous mode [ 80.062456][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.093976][ T5363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.111326][ T5363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.125494][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.155444][ T5363] team0: Port device team_slave_0 added [ 80.166013][ T5363] team0: Port device team_slave_1 added [ 80.182255][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.7.619'. [ 80.205438][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.212426][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.238915][ T5363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.253641][ T5290] veth0_vlan: entered promiscuous mode [ 80.265204][ T5290] veth1_vlan: entered promiscuous mode [ 80.279052][ T5418] netlink: 260 bytes leftover after parsing attributes in process `syz.7.620'. [ 80.292875][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.300001][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.326261][ T5363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.361776][ T5420] loop7: detected capacity change from 0 to 4096 [ 80.371339][ T5420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.420402][ T5185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.441977][ T5363] hsr_slave_0: entered promiscuous mode [ 80.456272][ T5363] hsr_slave_1: entered promiscuous mode [ 80.467498][ T5363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.475440][ T5363] Cannot create hsr debugfs directory [ 80.484831][ T5290] veth0_macvtap: entered promiscuous mode [ 80.493235][ T51] bridge_slave_1: left allmulticast mode [ 80.499022][ T51] bridge_slave_1: left promiscuous mode [ 80.504672][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.513712][ T5423] 9pnet_fd: Insufficient options for proto=fd [ 80.525939][ T51] bridge_slave_0: left allmulticast mode [ 80.531626][ T51] bridge_slave_0: left promiscuous mode [ 80.537825][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.637911][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.655812][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.668096][ T51] bond0 (unregistering): Released all slaves [ 80.683392][ T5290] veth1_macvtap: entered promiscuous mode [ 80.702893][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.713426][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.749524][ T5290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.761242][ T5436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.627'. [ 80.774733][ T5439] loop7: detected capacity change from 0 to 128 [ 80.782230][ T5439] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.801116][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.811633][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.822261][ T5439] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.840144][ T5290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.856453][ T51] hsr_slave_0: left promiscuous mode [ 80.862155][ T51] hsr_slave_1: left promiscuous mode [ 80.868045][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.875546][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.885415][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.892840][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.905158][ T51] veth1_macvtap: left promiscuous mode [ 80.911772][ T51] veth0_macvtap: left promiscuous mode [ 80.918089][ T51] veth1_vlan: left promiscuous mode [ 80.923573][ T51] veth0_vlan: left promiscuous mode [ 81.026303][ T51] team0 (unregistering): Port device team_slave_1 removed [ 81.039114][ T51] team0 (unregistering): Port device team_slave_0 removed [ 81.055369][ T3399] smc: removing ib device syz! [ 81.101984][ T5290] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.110849][ T5290] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.119578][ T5290] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.128365][ T5290] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.154385][ T5447] loop7: detected capacity change from 0 to 128 [ 81.184504][ T5447] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.220128][ T5447] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.287662][ T5185] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.482422][ T5363] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 81.535297][ T5363] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 81.550045][ T5455] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.595777][ T5363] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 81.670174][ T5459] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.689254][ T5363] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 81.857849][ T5465] loop8: detected capacity change from 0 to 512 [ 81.866725][ T5465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.876538][ T5363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.892488][ T5363] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.912832][ T5363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.923270][ T5363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.937838][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.944899][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.953559][ T5465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 81.971534][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.975093][ T5465] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.978677][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.998995][ T5471] netlink: 72 bytes leftover after parsing attributes in process `syz.5.638'. [ 82.016887][ T5471] netlink: 20 bytes leftover after parsing attributes in process `syz.5.638'. [ 82.035859][ T5290] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 82.116773][ T5480] loop8: detected capacity change from 0 to 128 [ 82.138562][ T5480] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.153797][ T5480] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.189753][ T5475] loop7: detected capacity change from 0 to 4096 [ 82.203293][ T5475] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.218546][ T5290] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.218953][ T5363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.244731][ T5185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.299527][ T5503] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 82.339911][ T5481] lo speed is unknown, defaulting to 1000 [ 82.370153][ T5510] loop8: detected capacity change from 0 to 1024 [ 82.395812][ T5514] FAULT_INJECTION: forcing a failure. [ 82.395812][ T5514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.408950][ T5514] CPU: 0 UID: 0 PID: 5514 Comm: syz.5.648 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 82.408983][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.408998][ T5514] Call Trace: [ 82.409004][ T5514] [ 82.409011][ T5514] dump_stack_lvl+0xf2/0x150 [ 82.409069][ T5514] dump_stack+0x15/0x1a [ 82.409095][ T5514] should_fail_ex+0x24a/0x260 [ 82.409207][ T5514] should_fail+0xb/0x10 [ 82.409241][ T5514] should_fail_usercopy+0x1a/0x20 [ 82.409284][ T5514] _copy_to_user+0x20/0xa0 [ 82.409340][ T5514] simple_read_from_buffer+0xa0/0x110 [ 82.409391][ T5514] proc_fail_nth_read+0xf9/0x140 [ 82.409435][ T5514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.409469][ T5514] vfs_read+0x19b/0x6f0 [ 82.409574][ T5514] ? __cond_resched+0x4f/0x90 [ 82.409643][ T5514] ksys_read+0xe8/0x1b0 [ 82.409714][ T5514] __x64_sys_read+0x42/0x50 [ 82.409744][ T5514] x64_sys_call+0x2874/0x2dc0 [ 82.409775][ T5514] do_syscall_64+0xc9/0x1c0 [ 82.409817][ T5514] ? clear_bhb_loop+0x55/0xb0 [ 82.409850][ T5514] ? clear_bhb_loop+0x55/0xb0 [ 82.409885][ T5514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.409984][ T5514] RIP: 0033:0x7f1d5106bb7c [ 82.410002][ T5514] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.410148][ T5514] RSP: 002b:00007f1d4f6d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.410171][ T5514] RAX: ffffffffffffffda RBX: 00007f1d51285fa0 RCX: 00007f1d5106bb7c [ 82.410183][ T5514] RDX: 000000000000000f RSI: 00007f1d4f6d70a0 RDI: 0000000000000006 [ 82.410194][ T5514] RBP: 00007f1d4f6d7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.410206][ T5514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.410218][ T5514] R13: 0000000000000000 R14: 00007f1d51285fa0 R15: 00007ffdff118d78 [ 82.410247][ T5514] [ 82.617505][ T5481] hsr0 speed is unknown, defaulting to 1000 [ 82.626460][ T5510] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.645148][ T5510] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.659975][ T5510] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 82.685642][ T5510] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 82.698058][ T5510] EXT4-fs (loop8): This should not happen!! Data will be lost [ 82.698058][ T5510] [ 82.707744][ T5510] EXT4-fs (loop8): Total free blocks count 0 [ 82.713741][ T5510] EXT4-fs (loop8): Free/Dirty block details [ 82.719773][ T5510] EXT4-fs (loop8): free_blocks=4293918720 [ 82.725574][ T5510] EXT4-fs (loop8): dirty_blocks=16 [ 82.730709][ T5510] EXT4-fs (loop8): Block reservation details [ 82.736895][ T5510] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 82.744297][ T5363] veth0_vlan: entered promiscuous mode [ 82.752205][ T5363] veth1_vlan: entered promiscuous mode [ 82.781565][ T5363] veth0_macvtap: entered promiscuous mode [ 82.789167][ T5290] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.803284][ T5363] veth1_macvtap: entered promiscuous mode [ 82.826246][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.836737][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.848519][ T5363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.858677][ T5481] chnl_net:caif_netlink_parms(): no params data found [ 82.875475][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.886003][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.896795][ T5363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.918033][ T5363] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.926896][ T5363] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.935735][ T5363] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.944504][ T5363] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.975899][ T5481] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.983067][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.990281][ T5481] bridge_slave_0: entered allmulticast mode [ 82.997454][ T5481] bridge_slave_0: entered promiscuous mode [ 83.006399][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.013456][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.020964][ T5481] bridge_slave_1: entered allmulticast mode [ 83.028601][ T5481] bridge_slave_1: entered promiscuous mode [ 83.034791][ T5535] loop7: detected capacity change from 0 to 128 [ 83.044269][ T5535] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.056684][ T5535] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.091645][ T5481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.106455][ T5185] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.106530][ T5481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.141278][ T5481] team0: Port device team_slave_0 added [ 83.148295][ T5481] team0: Port device team_slave_1 added [ 83.167086][ T5539] loop7: detected capacity change from 0 to 2048 [ 83.173900][ T5539] EXT4-fs: Ignoring removed bh option [ 83.176660][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.186334][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.212308][ T5481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.217283][ T5539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.225458][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.241864][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.267901][ T5481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.278748][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.9.610'. [ 83.306663][ T5481] hsr_slave_0: entered promiscuous mode [ 83.312676][ T5481] hsr_slave_1: entered promiscuous mode [ 83.318582][ T5481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.326260][ T5481] Cannot create hsr debugfs directory [ 83.362022][ T5551] loop9: detected capacity change from 0 to 512 [ 83.371791][ T5551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.376937][ T5539] lo speed is unknown, defaulting to 1000 [ 83.429192][ T5551] lo speed is unknown, defaulting to 1000 [ 83.429233][ T5539] hsr0 speed is unknown, defaulting to 1000 [ 83.493159][ T5551] hsr0 speed is unknown, defaulting to 1000 [ 83.501205][ T30] kauditd_printk_skb: 265 callbacks suppressed [ 83.501224][ T30] audit: type=1326 audit(1741568557.051:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.5.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 83.531269][ T30] audit: type=1326 audit(1741568557.051:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.5.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 83.555847][ T30] audit: type=1326 audit(1741568557.051:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.5.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 83.579703][ T30] audit: type=1326 audit(1741568557.131:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.5.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 83.603086][ T30] audit: type=1326 audit(1741568557.131:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.5.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 83.627951][ T30] audit: type=1326 audit(1741568557.161:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.5.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 83.651454][ T30] audit: type=1326 audit(1741568557.161:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.5.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 83.674808][ T30] audit: type=1326 audit(1741568557.161:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.5.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 83.698221][ T30] audit: type=1326 audit(1741568557.161:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.5.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 83.721658][ T30] audit: type=1326 audit(1741568557.161:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5555 comm="syz.5.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5106d169 code=0x7ffc0000 [ 83.771167][ T5363] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.782359][ T5560] netem: change failed [ 83.796337][ T5185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.816427][ T5565] loop5: detected capacity change from 0 to 128 [ 83.825139][ T5566] xt_hashlimit: max too large, truncated to 1048576 [ 83.832620][ T5566] Cannot find set identified by id 0 to match [ 83.858824][ T5562] loop9: detected capacity change from 0 to 4096 [ 83.865671][ T5565] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.891293][ T5565] ext4 filesystem being mounted at /159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.923953][ T5571] netlink: 4 bytes leftover after parsing attributes in process `syz.8.662'. [ 83.939386][ T5571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.946971][ T5571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.958223][ T5562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.971515][ T5571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.979092][ T5571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.016333][ T3576] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.022380][ T5481] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.034433][ T5363] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.037250][ T5481] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.055910][ T5481] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.076931][ T5481] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.137932][ T5580] loop5: detected capacity change from 0 to 128 [ 84.157788][ T5580] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.173294][ T5580] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.203532][ T5481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.226967][ T5481] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.249393][ T3576] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.276150][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.283325][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.300332][ T5590] loop5: detected capacity change from 0 to 128 [ 84.301070][ T5582] SELinux: Context Ü is not valid (left unmapped). [ 84.311047][ T5590] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.315468][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.325475][ T5590] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.332035][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.412477][ T5481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.564662][ T5605] loop8: detected capacity change from 0 to 512 [ 84.575192][ T153] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.605849][ T5605] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.611255][ T5611] loop7: detected capacity change from 0 to 2048 [ 84.625520][ T5611] EXT4-fs: Ignoring removed bh option [ 84.651832][ T5605] lo speed is unknown, defaulting to 1000 [ 84.667111][ T5609] loop5: detected capacity change from 0 to 1024 [ 84.735904][ T5605] hsr0 speed is unknown, defaulting to 1000 [ 84.773606][ T5611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.811094][ T5611] lo speed is unknown, defaulting to 1000 [ 84.847642][ T5611] hsr0 speed is unknown, defaulting to 1000 [ 84.877890][ T5609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.946193][ T5609] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.995827][ T5609] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 85.018123][ T5609] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 85.030525][ T5609] EXT4-fs (loop5): This should not happen!! Data will be lost [ 85.030525][ T5609] [ 85.040285][ T5609] EXT4-fs (loop5): Total free blocks count 0 [ 85.046322][ T5609] EXT4-fs (loop5): Free/Dirty block details [ 85.052236][ T5609] EXT4-fs (loop5): free_blocks=4293918720 [ 85.058028][ T5609] EXT4-fs (loop5): dirty_blocks=16 [ 85.063223][ T5609] EXT4-fs (loop5): Block reservation details [ 85.069396][ T5609] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 85.077490][ T5185] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.101196][ T5630] netem: change failed [ 85.108313][ T3576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.126485][ T5481] veth0_vlan: entered promiscuous mode [ 85.137300][ T5635] loop9: detected capacity change from 0 to 128 [ 85.150511][ T5635] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.163085][ T5635] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.167129][ T5481] veth1_vlan: entered promiscuous mode [ 85.216591][ T5363] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.231110][ T5481] veth0_macvtap: entered promiscuous mode [ 85.242073][ T5481] veth1_macvtap: entered promiscuous mode [ 85.252986][ T5481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.263524][ T5481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.267225][ T5623] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.274790][ T5481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.292461][ T5481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.303014][ T5481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.314053][ T5481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.321723][ T5644] loop5: detected capacity change from 0 to 128 [ 85.321788][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.7.679'. [ 85.361175][ T5481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.367327][ T5644] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.369984][ T5481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.390836][ T5481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.399583][ T5481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.409582][ T5644] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.458589][ T3576] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.578738][ T29] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.591740][ T5661] loop9: detected capacity change from 0 to 1024 [ 85.612642][ T5666] wireguard0: entered promiscuous mode [ 85.618184][ T5666] wireguard0: entered allmulticast mode [ 85.627709][ T5669] netem: change failed [ 85.654904][ T29] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.676078][ T5661] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.676359][ T5678] loop7: detected capacity change from 0 to 1024 [ 85.694842][ T5661] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.704057][ T5678] EXT4-fs: Ignoring removed orlov option [ 85.707958][ T5661] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 85.710827][ T5678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.732869][ T5661] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 85.745534][ T5661] EXT4-fs (loop9): This should not happen!! Data will be lost [ 85.745534][ T5661] [ 85.755224][ T5661] EXT4-fs (loop9): Total free blocks count 0 [ 85.759203][ T5658] lo speed is unknown, defaulting to 1000 [ 85.761307][ T5661] EXT4-fs (loop9): Free/Dirty block details [ 85.772967][ T5661] EXT4-fs (loop9): free_blocks=4293918720 [ 85.778821][ T5661] EXT4-fs (loop9): dirty_blocks=16 [ 85.783993][ T5661] EXT4-fs (loop9): Block reservation details [ 85.790045][ T5661] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 85.825795][ T5678] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.872819][ T29] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.930785][ T5658] hsr0 speed is unknown, defaulting to 1000 [ 85.966666][ T5688] bond1: entered promiscuous mode [ 85.971818][ T5688] bond1: entered allmulticast mode [ 85.985604][ T5691] loop9: detected capacity change from 0 to 128 [ 85.998620][ T5693] FAULT_INJECTION: forcing a failure. [ 85.998620][ T5693] name fail_futex, interval 1, probability 0, space 0, times 1 [ 86.011528][ T5693] CPU: 1 UID: 0 PID: 5693 Comm: +}[@ Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 86.011559][ T5693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.011572][ T5693] Call Trace: [ 86.011580][ T5693] [ 86.011669][ T5693] dump_stack_lvl+0xf2/0x150 [ 86.011724][ T5693] dump_stack+0x15/0x1a [ 86.011745][ T5693] should_fail_ex+0x24a/0x260 [ 86.011796][ T5693] should_fail+0xb/0x10 [ 86.011856][ T5693] get_futex_key+0x109/0x740 [ 86.011889][ T5693] futex_wait_multiple_setup+0xa3/0x3a0 [ 86.011975][ T5693] futex_wait_multiple+0xb0/0x2c0 [ 86.012014][ T5693] __se_sys_futex_waitv+0x34f/0x360 [ 86.012045][ T5693] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 86.012132][ T5693] __x64_sys_futex_waitv+0x67/0x80 [ 86.012166][ T5693] x64_sys_call+0x105f/0x2dc0 [ 86.012199][ T5693] do_syscall_64+0xc9/0x1c0 [ 86.012244][ T5693] ? clear_bhb_loop+0x55/0xb0 [ 86.012341][ T5693] ? clear_bhb_loop+0x55/0xb0 [ 86.012374][ T5693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.012408][ T5693] RIP: 0033:0x7fc38c97d169 [ 86.012425][ T5693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.012447][ T5693] RSP: 002b:00007fc38afe1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 86.012470][ T5693] RAX: ffffffffffffffda RBX: 00007fc38cb95fa0 RCX: 00007fc38c97d169 [ 86.012503][ T5693] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000400000000d00 [ 86.012514][ T5693] RBP: 00007fc38afe1090 R08: 0000000000000001 R09: 0000000000000000 [ 86.012526][ T5693] R10: 0000400000001100 R11: 0000000000000246 R12: 0000000000000001 [ 86.012538][ T5693] R13: 0000000000000000 R14: 00007fc38cb95fa0 R15: 00007ffce35b1828 [ 86.012555][ T5693] [ 86.014645][ T5691] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.155175][ T5688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.263236][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz.9.690'. [ 86.278175][ T5688] bond1 (unregistering): Released all slaves [ 86.299652][ T29] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.312262][ T5699] netlink: 12 bytes leftover after parsing attributes in process `syz.7.689'. [ 86.321609][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.329109][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.347724][ T5698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.355317][ T5698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.401764][ T5704] loop7: detected capacity change from 0 to 128 [ 86.410242][ T5704] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.468170][ T29] bridge_slave_1: left allmulticast mode [ 86.474011][ T29] bridge_slave_1: left promiscuous mode [ 86.479751][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.494483][ T29] bridge_slave_0: left allmulticast mode [ 86.500268][ T29] bridge_slave_0: left promiscuous mode [ 86.505973][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.507106][ T5709] FAULT_INJECTION: forcing a failure. [ 86.507106][ T5709] name failslab, interval 1, probability 0, space 0, times 0 [ 86.525772][ T5709] CPU: 0 UID: 0 PID: 5709 Comm: syz.5.695 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 86.525852][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.525865][ T5709] Call Trace: [ 86.525871][ T5709] [ 86.525878][ T5709] dump_stack_lvl+0xf2/0x150 [ 86.525907][ T5709] dump_stack+0x15/0x1a [ 86.525930][ T5709] should_fail_ex+0x24a/0x260 [ 86.525963][ T5709] should_failslab+0x8f/0xb0 [ 86.526042][ T5709] __kmalloc_noprof+0xab/0x3f0 [ 86.526064][ T5709] ? kobject_get_path+0x8f/0x1c0 [ 86.526084][ T5709] ? input_devices_seq_show+0x44a/0x460 [ 86.526117][ T5707] loop4: detected capacity change from 0 to 1024 [ 86.526222][ T5709] kobject_get_path+0x8f/0x1c0 [ 86.526254][ T5709] input_devices_seq_show+0x36/0x460 [ 86.526282][ T5709] seq_read_iter+0x655/0x930 [ 86.526395][ T5709] seq_read+0x1ed/0x230 [ 86.526428][ T5709] ? __pfx_seq_read+0x10/0x10 [ 86.526455][ T5709] proc_reg_read+0x13f/0x1d0 [ 86.526480][ T5709] vfs_readv+0x3e2/0x660 [ 86.526574][ T5709] ? __pfx_proc_reg_read+0x10/0x10 [ 86.526608][ T5709] __x64_sys_preadv+0xf4/0x1c0 [ 86.526646][ T5709] x64_sys_call+0x2680/0x2dc0 [ 86.526698][ T5709] do_syscall_64+0xc9/0x1c0 [ 86.526799][ T5709] ? clear_bhb_loop+0x55/0xb0 [ 86.526841][ T5709] ? clear_bhb_loop+0x55/0xb0 [ 86.526965][ T5709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.527000][ T5709] RIP: 0033:0x7f1d5106d169 [ 86.527019][ T5709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.527105][ T5709] RSP: 002b:00007f1d4f6d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 86.527128][ T5709] RAX: ffffffffffffffda RBX: 00007f1d51285fa0 RCX: 00007f1d5106d169 [ 86.527144][ T5709] RDX: 0000000000000001 RSI: 00004000000015c0 RDI: 0000000000000003 [ 86.527159][ T5709] RBP: 00007f1d4f6d7090 R08: 0000000000000003 R09: 0000000000000000 [ 86.527194][ T5709] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 86.527209][ T5709] R13: 0000000000000000 R14: 00007f1d51285fa0 R15: 00007ffdff118d78 [ 86.527232][ T5709] [ 86.591864][ T5714] futex_wake_op: syz.5.696 tries to shift op by -1; fix this program [ 86.808657][ T5725] loop5: detected capacity change from 0 to 512 [ 86.815303][ T5725] journal_path: Non-blockdev passed as './bus' [ 86.821564][ T5725] EXT4-fs: error: could not find journal device path [ 86.877544][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.889157][ T5729] loop5: detected capacity change from 0 to 128 [ 86.897867][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.908047][ T29] bond0 (unregistering): Released all slaves [ 86.917006][ T5729] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.031414][ T5658] chnl_net:caif_netlink_parms(): no params data found [ 87.074181][ T5736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.701'. [ 87.112488][ T29] hsr_slave_0: left promiscuous mode [ 87.118819][ T29] hsr_slave_1: left promiscuous mode [ 87.130090][ T29] veth1_macvtap: left promiscuous mode [ 87.136360][ T29] veth0_macvtap: left promiscuous mode [ 87.141929][ T29] veth1_vlan: left promiscuous mode [ 87.147270][ T29] veth0_vlan: left promiscuous mode [ 87.174098][ T5744] loop5: detected capacity change from 0 to 512 [ 87.181559][ T5744] EXT4-fs: Ignoring removed nobh option [ 87.207234][ T5744] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.229785][ T5744] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.705: bg 0: block 224: padding at end of block bitmap is not set [ 87.249412][ T5744] EXT4-fs (loop5): Remounting filesystem read-only [ 87.282137][ T29] team0 (unregistering): Port device team_slave_1 removed [ 87.292018][ T29] team0 (unregistering): Port device team_slave_0 removed [ 87.325261][ T5748] loop5: detected capacity change from 0 to 512 [ 87.333522][ T5748] EXT4-fs: Ignoring removed nobh option [ 87.367956][ T5748] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.396916][ T5756] loop9: detected capacity change from 0 to 128 [ 87.406623][ T5753] loop7: detected capacity change from 0 to 128 [ 87.407139][ T5756] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.413603][ T5753] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.445907][ T5748] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.706: bg 0: block 224: padding at end of block bitmap is not set [ 87.459432][ T5753] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.496009][ T5748] EXT4-fs (loop5): Remounting filesystem read-only [ 87.507894][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.515193][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.522620][ T5658] bridge_slave_0: entered allmulticast mode [ 87.529394][ T5658] bridge_slave_0: entered promiscuous mode [ 87.536413][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.543541][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.551207][ T5658] bridge_slave_1: entered allmulticast mode [ 87.558066][ T5658] bridge_slave_1: entered promiscuous mode [ 87.601427][ T5658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.622103][ T5658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.646929][ T5772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.712'. [ 87.663362][ T5658] team0: Port device team_slave_0 added [ 87.675076][ T5658] team0: Port device team_slave_1 added [ 87.688573][ T5783] netlink: 8 bytes leftover after parsing attributes in process `syz.9.715'. [ 87.745805][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.752895][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.778971][ T5658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.791238][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.713'. [ 87.809320][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.816585][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.842774][ T5658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.853217][ T5801] loop4: detected capacity change from 0 to 512 [ 87.860825][ T5801] EXT4-fs: Ignoring removed nobh option [ 87.898290][ T5806] loop9: detected capacity change from 0 to 128 [ 87.899642][ T5801] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.921981][ T5658] hsr_slave_0: entered promiscuous mode [ 87.928332][ T5658] hsr_slave_1: entered promiscuous mode [ 87.934333][ T5806] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.934602][ T5658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.973938][ T5658] Cannot create hsr debugfs directory [ 88.088874][ T5826] netlink: 12 bytes leftover after parsing attributes in process `syz.9.725'. [ 88.099191][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 88.120354][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.127892][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.153195][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.154558][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.9.729'. [ 88.160754][ T5828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.169420][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.9.729'. [ 88.186826][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.9.729'. [ 88.199164][ T5834] netlink: 60 bytes leftover after parsing attributes in process `syz.9.729'. [ 88.236560][ T5834] loop9: detected capacity change from 0 to 512 [ 88.244553][ T5834] EXT4-fs (loop9): orphan cleanup on readonly fs [ 88.252078][ T5834] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.729: bg 0: block 248: padding at end of block bitmap is not set [ 88.273740][ T5834] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.729: Failed to acquire dquot type 1 [ 88.289155][ T3576] ================================================================== [ 88.297277][ T3576] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 88.305212][ T3576] [ 88.307550][ T3576] read-write to 0xffff88813d5010d0 of 8 bytes by task 5829 on cpu 0: [ 88.315627][ T3576] shmem_add_to_page_cache+0x3b9/0x4b0 [ 88.321118][ T3576] shmem_get_folio_gfp+0x4f6/0xd90 [ 88.326270][ T3576] shmem_write_begin+0xa2/0x180 [ 88.331144][ T3576] generic_perform_write+0x1a8/0x4a0 [ 88.336459][ T3576] shmem_file_write_iter+0xc2/0xe0 [ 88.341594][ T3576] __kernel_write_iter+0x247/0x4c0 [ 88.346731][ T3576] dump_user_range+0x3ac/0x550 [ 88.351528][ T3576] elf_core_dump+0x1d17/0x1ea0 [ 88.356425][ T3576] do_coredump+0x17fe/0x1f40 [ 88.361043][ T3576] get_signal+0xd4f/0x1000 [ 88.365469][ T3576] arch_do_signal_or_restart+0x95/0x4b0 [ 88.371030][ T3576] irqentry_exit_to_user_mode+0xa7/0x120 [ 88.376723][ T3576] irqentry_exit+0x12/0x50 [ 88.381162][ T3576] exc_general_protection+0x33d/0x4d0 [ 88.386547][ T3576] asm_exc_general_protection+0x26/0x30 [ 88.392125][ T3576] [ 88.394463][ T3576] read to 0xffff88813d5010d0 of 8 bytes by task 3576 on cpu 1: [ 88.402018][ T3576] shmem_getattr+0x69/0x200 [ 88.406632][ T3576] vfs_getattr+0x172/0x1b0 [ 88.411060][ T3576] vfs_statx+0x12d/0x320 [ 88.415329][ T3576] vfs_fstatat+0xe4/0x130 [ 88.419677][ T3576] __se_sys_newfstatat+0x58/0x260 [ 88.424711][ T3576] __x64_sys_newfstatat+0x55/0x70 [ 88.429757][ T3576] x64_sys_call+0x236d/0x2dc0 [ 88.434471][ T3576] do_syscall_64+0xc9/0x1c0 [ 88.439010][ T3576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.444933][ T3576] [ 88.447264][ T3576] value changed: 0x0000000000001179 -> 0x000000000000117a [ 88.454378][ T3576] [ 88.456716][ T3576] Reported by Kernel Concurrency Sanitizer on: [ 88.462885][ T3576] CPU: 1 UID: 0 PID: 3576 Comm: syz-executor Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 88.473745][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.483828][ T3576] ================================================================== [ 88.493851][ T5834] EXT4-fs (loop9): 1 truncate cleaned up [ 88.514536][ T30] kauditd_printk_skb: 159 callbacks suppressed [ 88.514555][ T30] audit: type=1400 audit(1741568562.061:2290): avc: denied { getopt } for pid=5832 comm="syz.9.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 88.556280][ T5834] syz.9.729 (5834) used greatest stack depth: 9272 bytes left [ 88.557564][ T5363] EXT4-fs error (device loop9): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 88.576665][ T5363] EXT4-fs error (device loop9): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 88.743861][ T5658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.762455][ T3399] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.774375][ T5658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.784320][ T5658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.794018][ T5658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.808639][ T3399] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.851867][ T5658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.867935][ T5658] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.879102][ T3399] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.896450][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.903547][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.912138][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.919234][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.967511][ T3399] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.984888][ T5658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.023897][ T3399] bridge_slave_1: left allmulticast mode [ 89.029722][ T3399] bridge_slave_1: left promiscuous mode [ 89.035380][ T3399] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.043636][ T3399] bridge_slave_0: left allmulticast mode [ 89.049462][ T3399] bridge_slave_0: left promiscuous mode [ 89.055227][ T3399] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.147526][ T3399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.157617][ T3399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.168511][ T3399] bond0 (unregistering): Released all slaves [ 89.196179][ T5658] veth0_vlan: entered promiscuous mode [ 89.203866][ T5658] veth1_vlan: entered promiscuous mode [ 89.216387][ T5658] veth0_macvtap: entered promiscuous mode [ 89.226214][ T5658] veth1_macvtap: entered promiscuous mode [ 89.236586][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.246926][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.257710][ T3399] hsr_slave_0: left promiscuous mode [ 89.263325][ T3399] hsr_slave_1: left promiscuous mode [ 89.270754][ T3399] veth1_macvtap: left promiscuous mode [ 89.276405][ T3399] veth0_macvtap: left promiscuous mode [ 89.281921][ T3399] veth1_vlan: left promiscuous mode [ 89.287267][ T3399] veth0_vlan: left promiscuous mode [ 89.349314][ T3399] team0 (unregistering): Port device team_slave_1 removed [ 89.358832][ T3399] team0 (unregistering): Port device team_slave_0 removed [ 89.395819][ T5658] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.404609][ T5658] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.413486][ T5658] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.422407][ T5658] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0