last executing test programs: 49.583244706s ago: executing program 1 (id=5453): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="f70200000076f6888e589701000000000000007bc98810544af379f96ae85043d6c001f749df6a0e572d605f908bdfe7acaa387dd6978fdf65912567", 0x3c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="1c1b999f6e6fd087e8fde29daf597d396d36025fc5cc4e8707a5862e598437a9eb56cb0d4b692996c289ee0644b8c9c83ecc0c", 0x33}, {&(0x7f00000005c0)="58df6617ba9bbe7c5c66b84230b99772feb4047b434b8d6565cdcbb6a9beef81455aee9fa8964f5db78df050348611a492aec61085a15211664058774b92be568b00b603f3037c7ebfe89ef40c50e74c0bbaec9e04ac98c13b", 0x59}, {&(0x7f0000000640)="f725413c3dbaa35f0f05a151231fdb0369b6aee8ee1bb21240023da843bdd56c191341ef3b07046371d01e5a47b55f2dd814a49c27532ebd1afe348b31846a1f476e75387f41392be45aa3a0557e5f7a946cac16d391292596220029a0579b97f18950aa70aac8efd123c1fd11ce04a129ee9fbc4cd6eee02977d9c136e1f3c176669a9f0960d8e37ae83ae434e06a79fa980f692226930de67ce726cbf9a0819a0317c4bb1a8e9b4978174db09cdd34b4cf0d15beb2d019b37732d73e378c71256c08066736a1dbec2b95408f4207250f80844eb66edd581e60704a", 0xdc}, {&(0x7f0000000740)="439ebc9b6f655290302d7f3f59d903aa8bbefcc24c78ee18e8ac94bcff27024128848c147774cade5e233dccf2ae1c14cb7bb59536293b9d435d6eb6ac016ec9073811b18382ad34a41d471bbecc", 0x4e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)="418675259d321c3bf76ec16dbe1809dce22abb16eb0aa69a6d1a55a2df8e00b5a6fce0dc91c822c60b30ab1c4fb8e005567ed34eda4981800c4cc0d5ed8a20ea1d292abf6cd0220bbd4aea7413d2f2646d19bee7475d4b929604c4f689e27cb6ffe4b4cd7c4e5aec856c148f76d3a66605342b6b2cdf3f4b2e49af973619ad1149616be8bed5608510c94338f2c0f9f76287bc1aa96364551b2bdf05d3836b101966df4472e21bfe132c794622a9b1a232bf79d2bd8a6b36db9017da45d9accc6d39f1bffe8d49b5433148beba466f5982fe25456eb9", 0xd6}, {&(0x7f00000007c0)="4c3b0c0260a25cad21d902c1", 0xc}, {&(0x7f0000000b40)="79222637e4c4f4baf7793d5643ba8d6ed21f59b23deb5f30a4bf803e3b574958fe2c20ff5ce23fb1730b76ff7225df8e3763239789e9efffaf42c1c14812bdddc28be72a66ff23003d5b464c69d600aa5b815ad5dd4ee346f698539d75e56c108b498a75c4c2", 0x66}, {&(0x7f0000000bc0)="cd7b6813d9453694f0753b1e601136fd07df6cf2a41f00bc3dece0d77544e3e8f9", 0x21}, {&(0x7f0000000c00)="f70a5f0d8b9ae69ea465c4eea96e55ddbc7eb200d3dd4301ec82c2ec24412b58de826bd746a8fe65f0ce79707a13cdfcf8b94ab6434f51f2516adfea216549cd55324e3ff2", 0x45}, {&(0x7f0000000c80)="9fe23d0eb9ed496e70f8a649f62e2788345dba28b91b96c279ec3a86c93285a9b1036b7caf16c0835494c77a0c733e4e2be42f702596a4e11f1d2a326cd0424bb040a94f2ea378f38617fb247f20c77c442370e227412d72df749174bcf9ed23838786f7dec25a3f2cb5ad0b5cc78f2d96afc4cef7171daa02f31ec74094cf27fbb56100d9fba1cad208cee0efe341cb5744bad8192199a6cca7f0edcccf009b62f4cd31183b3dd6d1f24e12761a3152096ab7d06b22340fd13220b66339ccbc693d67aaf429", 0xc6}], 0x6}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f80)="18ad62b5602ab2360da41a41091afa922d6b46ccaef5ab9d8ea0cce06a7bc2f0409376023f0b6cbf39e7bd19c0e47f99986b1496dbd2e72793c2c9b365de7249128205e5a1456444807dc7f8e34c21ea73707ce3869772ed95ff79635388bfc055d471e3a336654f2cc50246b86dcbf692df595f578a7995d759869109f6e38165da3d511f112cd9e7b5df6fcb85e2d464d7ed7fa18e4327e465a5eda0f82193ce1e651d5209c100", 0xa8}, {&(0x7f0000001040)="f7464965ce742d2b4ce0aabbf7b94146e535fa2642bc1b03d867acad1c7c64d036fdb9993b8acc83d63963ce6e84b7f5d3ff63817c4cdcf835c29bd91030c32ad5c605db7eb623c57453665a0e011e64509c6b10bc86ca3c6581996216faefaf6a600b469b0257d917636b867ac53b3aca05d71111b0d76e3aea7636406db59b82416a55be920b667fd01ffa4f01053f01d498fda1323f37bb87c89fb7282f24be8097f6ad86e854f734b4bb7f76d28731afb3b8441f8342af033cfaacba5169b7cafd7de961586920ce099a6fbe613ef12dfd69c025bdaaa0fdf5a8779ddac84337d6a052ad0546", 0xe8}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="6481a6309a3a0a5d25381bf8131f889936bdc3916a4673f762496b901e352d81ec5485d58fca44c9c2d95db2ef44b50b2d26eb7f0ceac86ed6a72a64aeba02d1512f1da785fcee62a75abe599c702e30c8ea4ef155fe222f5c61a5d66ce40b0a38275a3f0f5ae99eb422e7eac9239114914baa46e5b0654ff1a5afda884d8631d3338cedbe7cd75aa82c3ac8d4577b7bfed6ad96012b39548672e51d3c39678d2d21a91fb3d5b2eae7332a33d70a07c5467babc200d1280be2602890d86aa46728ce722cbe847e8a06c35c57", 0xcc}, {&(0x7f0000001380)="ff9ed5e4c51948c4b52a3f6c2e156d175b924786f79983dedcef4eea727bb3eb8d826a8092b44b1ed0c5e91a39dba667f519fcf5bfb5f1f15434cbc690d8f9433d12ade774a5c765", 0x48}, {&(0x7f0000002cc0)="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", 0x45f}], 0x3}}], 0x5, 0xc8040) sendmmsg(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200008c1) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 46.544197814s ago: executing program 1 (id=5526): getpgid(0x0) pidfd_send_signal(0xffffffffffffffff, 0x4002, 0x0, 0x4) r0 = socket(0x40000000015, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 46.543652514s ago: executing program 1 (id=5527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r2, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 46.488150075s ago: executing program 1 (id=5530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 46.412230737s ago: executing program 1 (id=5532): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioprio_set$uid(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1100000052000100000000000000000002"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004a80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fbdbdf251c0000002000018008000100", @ANYRES32=r5, @ANYBLOB="140002"], 0x34}}, 0x2404c816) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1892f84d7dc039806112405ce811cc3", 0x25, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x101, 0xd, {{0x2e, 0x4, 0x2, 0x6, 0xb8, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x24}, {[@timestamp_addr={0x44, 0x14, 0x73, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x5}, {@multicast2, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0x8, [{@empty, 0x40}]}, @timestamp_prespec={0x44, 0x54, 0x85, 0x3, 0xb, [{@broadcast, 0x5}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010102, 0x7fff}, {@loopback}, {@multicast2, 0x7}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@rand_addr=0x64010101, 0x6}, {@multicast1, 0x2}, {@loopback, 0x9}]}, @noop, @timestamp={0x44, 0x1c, 0x1a, 0x0, 0x5, [0x2, 0x80000000, 0x5, 0x5, 0x7, 0x782b]}, @ssrr={0x89, 0x13, 0xbf, [@private=0xa010102, @private=0xa010102, @loopback, @multicast2]}]}}}}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000500)={@initdev, @remote, 0x0}, &(0x7f0000000540)=0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x144, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4040}, 0x1) 46.314813998s ago: executing program 1 (id=5534): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x1ffffff, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x400}]}, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000008c0), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r2, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$evdev(&(0x7f00000001c0), 0x8, 0x842) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) setreuid(0xee01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_get$uid(0x3, 0xee01) ioctl$EVIOCGBITSND(r5, 0x40044591, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r6 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r7 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x66, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x30, 0x62, 0x39, 0x32, 0x32]}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56", 0x26}, 0x48, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) fstat(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() keyctl$chown(0x4, r7, r8, r9) mount$cgroup2(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000004c0)={[{@pids_localevents}, {@memory_localevents}, {}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}], [{@fowner_gt={'fowner>', r8}}, {@subj_user={'subj_user', 0x3d, 'syzkaller\x00'}}, {@measure}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 31.284811874s ago: executing program 32 (id=5534): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x1ffffff, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x400}]}, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000008c0), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r2, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$evdev(&(0x7f00000001c0), 0x8, 0x842) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) setreuid(0xee01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_get$uid(0x3, 0xee01) ioctl$EVIOCGBITSND(r5, 0x40044591, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r6 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r7 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x66, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x30, 0x62, 0x39, 0x32, 0x32]}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56", 0x26}, 0x48, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) fstat(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() keyctl$chown(0x4, r7, r8, r9) mount$cgroup2(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x4, &(0x7f00000004c0)={[{@pids_localevents}, {@memory_localevents}, {}, {@memory_recursiveprot}, {@memory_hugetlb_accounting}], [{@fowner_gt={'fowner>', r8}}, {@subj_user={'subj_user', 0x3d, 'syzkaller\x00'}}, {@measure}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 4.945487346s ago: executing program 4 (id=6480): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x723, 0x10000, 0x0, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) finit_module(r3, 0x0, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='kfree\x00', r4, 0x0, 0x18}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000007000000000000000000000d0a0000000000000001000006040000000000000e"], &(0x7f0000000f40)=""/4089, 0x8b, 0xff9, 0x8}, 0x28) mmap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0x1879e000) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 4.791877029s ago: executing program 4 (id=6486): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(0xffffffffffffffff) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$qrtrtun(r2, &(0x7f0000000580)="83", 0x21600) 4.71813797s ago: executing program 4 (id=6489): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89e3, 0x0) 2.007820221s ago: executing program 2 (id=6542): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$qrtrtun(r4, &(0x7f0000000580)="83", 0x21600) 1.989005942s ago: executing program 2 (id=6543): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 1.674967358s ago: executing program 2 (id=6549): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000e60000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3) getegid() ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000080)=0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="0000200000000000000000000000000000eeff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r5, 0x0, 0x8000000}, 0x27) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0) 1.515627551s ago: executing program 5 (id=6551): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 1.515288371s ago: executing program 5 (id=6552): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae]9k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJ\xb5c\xafK9\xc9t\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f0\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x128, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000002"], 0x0, 0x1a}, 0x28) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00"], 0x40}, 0x20000000) 1.515052631s ago: executing program 5 (id=6553): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0cfab400400000000000000081d8e355dc16d3090baadefb6d85ac074f0653dd487632e12d94464648c84d829d9c05ff529ea1081285345b037417f9040df85f05"], 0x28}}, 0x0) 1.512559021s ago: executing program 5 (id=6554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xc, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x20000000, 0x7f, 0x7fff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.250791116s ago: executing program 5 (id=6556): unshare(0x6a040000) r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x7}}, 0x24) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000d4) 1.130406378s ago: executing program 0 (id=6558): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 934.596622ms ago: executing program 2 (id=6559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xedb0ae970c61f339, '\x00', 0x0, @fallback=0x4f, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe0d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r9}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) umount2(&(0x7f0000000580)='./file0\x00', 0x3) close(r4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYRESHEX=r3, @ANYRESDEC, @ANYRESHEX=r8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 736.686446ms ago: executing program 0 (id=6561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$qrtrtun(r4, &(0x7f0000000580)="83", 0x21600) 689.853146ms ago: executing program 0 (id=6562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="01000000005c000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006"], 0xd0}}, 0x80440d4) 511.8832ms ago: executing program 3 (id=6563): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0cfab400400000000000000081d8e355dc16d3090baadefb6d85ac074f0653dd487632e12d94464648c84d829d9c05ff529ea1081285345b037417f9040df85f05"], 0x28}}, 0x0) 454.764241ms ago: executing program 0 (id=6564): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioprio_set$uid(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1100000052000100000000000000000002"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004a80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fbdbdf251c0000002000018008000100", @ANYRES32=r5, @ANYBLOB="140002"], 0x34}}, 0x2404c816) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1892f84d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x101, 0xd, {{0x28, 0x4, 0x2, 0x6, 0xa0, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x24}, {[@timestamp_addr={0x44, 0x14, 0x73, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x5}, {@multicast2, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0x8, [{@empty, 0x40}]}, @timestamp_prespec={0x44, 0x54, 0x85, 0x3, 0xb, [{@broadcast, 0x5}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010102, 0x7fff}, {@loopback}, {@multicast2, 0x7}, {@rand_addr=0x64010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@rand_addr=0x64010101, 0x6}, {@multicast1, 0x2}, {@loopback, 0x9}]}, @noop, @timestamp={0x44, 0x4, 0x1a, 0x0, 0x5}, @ssrr={0x89, 0x13, 0xbf, [@private=0xa010102, @private=0xa010102, @loopback, @multicast2]}]}}}}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000500)={@initdev, @remote, 0x0}, &(0x7f0000000540)=0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x144, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4040}, 0x1) 425.226342ms ago: executing program 3 (id=6565): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 380.307272ms ago: executing program 5 (id=6566): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @remote, 0x3}, 0x1c) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x810, r4, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) 380.090383ms ago: executing program 4 (id=6490): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000cc0)="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", 0x18b}, {&(0x7f0000000a40)="5261bff6db6b9ccd565ff7d6135b684a5f6a305caee2392e4b4d756000faec9122e48c6e403d90fdcbafc69dac96eaba091812f8fd9c6e3ad6996558d03ad9d1b620d83fd489a251274e67b2eebd689d4b23c96b2dfa1eb7b2bb969e0df7e9d65a97708678a797823b81c3505db5121b705aa9aa048519a426854783d7d0eada3d046cbb89831802b7345840f6f12c933d0ed61e77f081b27317946257bbb92f071d0ef9e9196d79d67696670c1853122a2a31e00f2c961d48440156474cfa4a986462f7b2d9a7c1fea38b83c78e", 0xce}, {&(0x7f00000000c0)="3dddf0ac75aca8359e955791b839d100a0ddeeed77cbcb28cd4cd7dc895b26f607f1b24b23c1b64637fe30fe203da96c3bd12b422bb63f95cfda88", 0x3b}, {&(0x7f00000004c0)="578bd6f7a645bff20989d5c4468d15576a6d46ba66b1f7c1b618f9e9f6ea7be426dd6e8e8a24d09a336fc72f6e36e578efe9beb3ce9de2338647aa19d5dc403399895e8a31186a9985daf20688d157c1a3832c9c19f33c6eeb63103926b31d95aecb0f2168996620dc2a05e453ff31795206f4661900a8b39401b73c27b61cf61531a91bccc2b3711be5edf72f024436c9ca81e996c9e8efe92cf4b2d26de5ebb5e135e1904e1dd62829af7f7da964a2fb48b22d984031", 0xb7}, {&(0x7f0000000100)="1b6b3afd2e25a5f6189e409e071f15cf2f0799961818be3cf12a9371cca663b422e6407dad17daab153dc614196d8e13fd18", 0x32}, {&(0x7f0000000600)="6b892734e25b4dec2e5f14a29d484fc928d2efa8415ae4fff7223c5bff3b4af9042fbfe43af917de02b653fd3c82938e23dedabe1517dfc0d1b2c02616ed85a9205f27f7facbaacb9f811a2a2e5e6d8612478df3325188b7749752f88e41e4c5ed1e22b26107c9867865634827736d65e0193b3293dc35bcaabf", 0x7a}], 0x6}}], 0x1, 0x8011) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) shutdown(r0, 0x1) 345.871123ms ago: executing program 2 (id=6567): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x1c, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 344.411193ms ago: executing program 3 (id=6568): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000e60000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3) getegid() ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000080)=0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="0000200000000000000000000000000000eeff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r5, 0x0, 0x8000000}, 0x27) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001800010000000000000000001d0109004d000f"], 0x64}}, 0x0) 329.718823ms ago: executing program 2 (id=6569): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x100, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) futex(&(0x7f00000002c0)=0x2, 0x10a, 0x0, &(0x7f0000000300), &(0x7f00000004c0), 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10005) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x8080) sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 302.006714ms ago: executing program 0 (id=6570): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0xd7, 0x0) 273.408365ms ago: executing program 4 (id=6571): socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b7, &(0x7f0000000a40)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000026c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000fcff207b200000000000000ca00000000000009504000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) r3 = add_key$keyring(&(0x7f00000004c0), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e", 0x2, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r6, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000001040)={0x0, 0x6}) sched_setscheduler(r8, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) 227.430655ms ago: executing program 0 (id=6572): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0xa084, 0x10000, 0xffffffff, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xf, 0xffffffffffffffff, 0x2) mq_unlink(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x372}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x8, 0x0, r0, 0x1, &(0x7f0000000500)="89f274a0516bdd6134c27e74e443bdc87b1ecb342e6bb8633f6c71755f9bfd3414c4db62baa3ebdad1ae8f926c8702c66da60a1f37c4025b4bc146500b48dda805edbd80f0f0b95e927a3fdbfe4462bf306197a7787d7a13b2ed8df5de805f80d4a5fc7b9f39604de4a79d66ff4ccbbd2f8b304df6caa5dc73a2e4ad42cbcb5e23c2ff119c504a9c661f9a2ca3d5399475ca7d844ab47ced3657589b6000637f5bfcbfce4f3cffbd46d4eaff16a1fac77b46fe26a7eb5442c67a8a708d55328a044044813ff1", 0xc6, 0x0, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000380)={r6, 0x0, 0x0}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x5607, 0x4) socket(0x15, 0x5, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r8, &(0x7f0000000180)=""/41, 0x29) r9 = socket$key(0xf, 0x3, 0x2) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$key(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r10 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) accept(r10, &(0x7f00000003c0)=@sco, &(0x7f0000000600)=0x80) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r5}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r11, 0x0, 0x0}, 0x20) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 97.637888ms ago: executing program 4 (id=6573): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) faccessat2(0xffffffffffffffff, 0x0, 0x42, 0x1100) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) lseek(0xffffffffffffffff, 0x9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open$dir(0x0, 0x40200, 0x8) getitimer(0x0, 0x0) socket$key(0xf, 0x3, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.441919ms ago: executing program 3 (id=6574): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0cfab400400000000000000081d8e355dc16d3090baadefb6d85ac074f0653dd487632e12d94464648c84d829d9c05ff529ea1081285345b037417f9040df85f05"], 0x28}}, 0x0) 39.836359ms ago: executing program 3 (id=6575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') preadv(r3, &(0x7f0000000a40)=[{0x0}], 0x1, 0x8, 0x8) write$selinux_load(r1, 0x0, 0x1790) 0s ago: executing program 3 (id=6576): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$SIOCSIFHWADDR(r0, 0x4004743c, 0x0) (fail_nth: 1) 0s ago: executing program 3 (id=6577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000bd2a364be61f4ecb060000000000000007020000f8ffffffb70300fffffff700b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000001704b45adbde08004500003800000000ff019078ac1e0001ac1414aa05009078e00000e0470400000000000000110000ac1414aa000000008303000703fd0000dba59a9d6b5a33fbaaef53e27fac1971baa859884f6d32632499d8c1f1fc02c4a391eae950868ebe04dfb6d4"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x19) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$caif_stream(0x25, 0x1, 0x1) recvmmsg(r3, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0x1, 0x2a8, &(0x7f0000000280)="$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") (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "6fbe3f53e8d4af1f9373e18e7190d8a3f2691eb3"}, 0x15, 0x1) (async) write$binfmt_format(r1, &(0x7f0000000000)='1\x00', 0xb000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf4) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r5, &(0x7f0000000500)="47b0a12eed77522f", 0x8, 0x4000941, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[], 0x14c}, 0x1, 0x0, 0x0, 0x4004041}, 0x8804) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) r8 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x102, 0x1}) io_uring_enter(r8, 0x3517, 0x173d, 0x42, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$tipc(r11, &(0x7f0000000680)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x404e1f, 0x5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008000}, 0x80) kernel console output (not intermixed with test programs): op4: detected capacity change from 0 to 128 [ 378.400166][T32064] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.418103][T32064] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.444841][T20343] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.515262][T32076] SELinux: ebitmap: empty map [ 378.520193][T32076] SELinux: failed to load policy [ 378.572440][T32080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5470'. [ 378.600220][T32084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.619280][T32084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.667040][T32091] sd 0:0:1:0: device reset [ 378.751945][T32093] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 378.762649][T32093] SELinux: failed to load policy [ 378.883683][T32100] lo speed is unknown, defaulting to 1000 [ 378.911296][T32100] lo speed is unknown, defaulting to 1000 [ 378.960713][T32106] lo speed is unknown, defaulting to 1000 [ 378.993274][T32106] lo speed is unknown, defaulting to 1000 [ 379.007420][T32111] siw: device registration error -23 [ 379.192076][T32124] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 379.203364][T32124] SELinux: failed to load policy [ 379.239683][T32127] lo speed is unknown, defaulting to 1000 [ 379.268142][T32127] lo speed is unknown, defaulting to 1000 [ 379.297405][T32128] loop2: detected capacity change from 0 to 512 [ 379.307258][T32128] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 379.319016][T32128] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.5486: corrupted in-inode xattr: overlapping e_value [ 379.335754][T32128] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5486: couldn't read orphan inode 15 (err -117) [ 379.348480][T32128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.552703][T32136] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 379.563087][T32136] SELinux: failed to load policy [ 379.656343][T19527] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.720983][T32154] netlink: 'syz.2.5495': attribute type 13 has an invalid length. [ 379.734076][T32154] loop2: detected capacity change from 0 to 512 [ 379.757329][T32154] EXT4-fs (loop2): too many log groups per flexible block group [ 379.765122][T32154] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 379.779625][T32154] EXT4-fs (loop2): mount failed [ 379.849013][T32161] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 379.858825][T32161] SELinux: failed to load policy [ 379.865085][T32159] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 379.874790][T32159] SELinux: failed to load policy [ 379.983907][T32173] siw: device registration error -23 [ 380.001346][T32176] FAULT_INJECTION: forcing a failure. [ 380.001346][T32176] name failslab, interval 1, probability 0, space 0, times 0 [ 380.016250][T32176] CPU: 1 UID: 0 PID: 32176 Comm: syz.3.5504 Not tainted syzkaller #0 PREEMPT(voluntary) [ 380.016275][T32176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.016286][T32176] Call Trace: [ 380.016293][T32176] [ 380.016301][T32176] __dump_stack+0x1d/0x30 [ 380.016323][T32176] dump_stack_lvl+0xe8/0x140 [ 380.016364][T32176] dump_stack+0x15/0x1b [ 380.016378][T32176] should_fail_ex+0x265/0x280 [ 380.016428][T32176] ? bpf_prog_alloc_no_stats+0xc4/0x3a0 [ 380.016452][T32176] should_failslab+0x8c/0xb0 [ 380.016477][T32176] __kmalloc_cache_noprof+0x4c/0x320 [ 380.016508][T32176] bpf_prog_alloc_no_stats+0xc4/0x3a0 [ 380.016555][T32176] bpf_prog_alloc+0x3c/0x150 [ 380.016579][T32176] bpf_prog_load+0x514/0x1070 [ 380.016609][T32176] ? security_bpf+0x2b/0x90 [ 380.016685][T32176] __sys_bpf+0x462/0x7b0 [ 380.016713][T32176] __x64_sys_bpf+0x41/0x50 [ 380.016737][T32176] x64_sys_call+0x2aea/0x2ff0 [ 380.016807][T32176] do_syscall_64+0xd2/0x200 [ 380.016841][T32176] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 380.016877][T32176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.016895][T32176] RIP: 0033:0x7f6b9181eba9 [ 380.016910][T32176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.016928][T32176] RSP: 002b:00007f6b90287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.016947][T32176] RAX: ffffffffffffffda RBX: 00007f6b91a65fa0 RCX: 00007f6b9181eba9 [ 380.017020][T32176] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 380.017033][T32176] RBP: 00007f6b90287090 R08: 0000000000000000 R09: 0000000000000000 [ 380.017046][T32176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.017057][T32176] R13: 00007f6b91a66038 R14: 00007f6b91a65fa0 R15: 00007ffd590ed838 [ 380.017073][T32176] [ 380.300928][T32194] FAULT_INJECTION: forcing a failure. [ 380.300928][T32194] name failslab, interval 1, probability 0, space 0, times 0 [ 380.313645][T32194] CPU: 0 UID: 0 PID: 32194 Comm: syz.3.5509 Not tainted syzkaller #0 PREEMPT(voluntary) [ 380.313669][T32194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.313682][T32194] Call Trace: [ 380.313738][T32194] [ 380.313745][T32194] __dump_stack+0x1d/0x30 [ 380.313764][T32194] dump_stack_lvl+0xe8/0x140 [ 380.313781][T32194] dump_stack+0x15/0x1b [ 380.313795][T32194] should_fail_ex+0x265/0x280 [ 380.313815][T32194] should_failslab+0x8c/0xb0 [ 380.313910][T32194] kmem_cache_alloc_noprof+0x50/0x310 [ 380.313942][T32194] ? alloc_empty_file+0x76/0x200 [ 380.313968][T32194] alloc_empty_file+0x76/0x200 [ 380.313992][T32194] alloc_file_pseudo+0xc6/0x160 [ 380.314081][T32194] anon_inode_getfile+0xa0/0x120 [ 380.314160][T32194] bpf_link_prime+0xfc/0x1d0 [ 380.314206][T32194] bpf_raw_tp_link_attach+0x2ff/0x400 [ 380.314243][T32194] bpf_raw_tracepoint_open+0x164/0x2c0 [ 380.314272][T32194] ? security_bpf+0x2b/0x90 [ 380.314362][T32194] __sys_bpf+0x6a3/0x7b0 [ 380.314451][T32194] __x64_sys_bpf+0x41/0x50 [ 380.314476][T32194] x64_sys_call+0x2aea/0x2ff0 [ 380.314496][T32194] do_syscall_64+0xd2/0x200 [ 380.314525][T32194] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 380.314579][T32194] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 380.314605][T32194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.314738][T32194] RIP: 0033:0x7f6b9181eba9 [ 380.314763][T32194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.314782][T32194] RSP: 002b:00007f6b90287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.314801][T32194] RAX: ffffffffffffffda RBX: 00007f6b91a65fa0 RCX: 00007f6b9181eba9 [ 380.314815][T32194] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 380.314890][T32194] RBP: 00007f6b90287090 R08: 0000000000000000 R09: 0000000000000000 [ 380.314901][T32194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.314911][T32194] R13: 00007f6b91a66038 R14: 00007f6b91a65fa0 R15: 00007ffd590ed838 [ 380.314927][T32194] [ 380.613618][T32206] sd 0:0:1:0: device reset [ 380.621966][T32200] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 380.679252][T32200] SELinux: failed to load policy [ 380.748800][T32216] 9pnet_fd: Insufficient options for proto=fd [ 380.905962][T32236] lo speed is unknown, defaulting to 1000 [ 380.966846][T32247] 9pnet_fd: Insufficient options for proto=fd [ 381.028735][T32236] lo speed is unknown, defaulting to 1000 [ 381.039051][T32243] siw: device registration error -23 [ 381.064863][T32255] siw: device registration error -23 [ 381.233049][T32267] loop1: detected capacity change from 0 to 2048 [ 381.261851][T32267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 381.310286][T32267] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.5534: inline data xattr refers to an external xattr inode [ 381.581913][T32282] SELinux: ebitmap: empty map [ 381.586747][T32282] SELinux: failed to load policy [ 381.607381][T32284] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 381.666206][T32286] __nla_validate_parse: 15 callbacks suppressed [ 381.666223][T32286] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5545'. [ 381.838785][T32292] lo speed is unknown, defaulting to 1000 [ 381.880359][T32292] lo speed is unknown, defaulting to 1000 [ 381.891482][T32299] siw: device registration error -23 [ 381.916121][T32300] sd 0:0:1:0: device reset [ 382.835450][T32443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5557'. [ 383.014284][T32451] lo speed is unknown, defaulting to 1000 [ 383.040798][T32451] lo speed is unknown, defaulting to 1000 [ 383.062348][T32452] loop3: detected capacity change from 0 to 512 [ 383.070272][T32452] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 383.080200][T32452] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.5560: corrupted in-inode xattr: overlapping e_value [ 383.094286][T32452] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5560: couldn't read orphan inode 15 (err -117) [ 383.106760][T32452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.225538][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 383.225555][ T29] audit: type=1326 audit(1757634065.887:23418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.3.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9181eba9 code=0x7ffc0000 [ 383.255417][ T29] audit: type=1326 audit(1757634065.887:23419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.3.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9181eba9 code=0x7ffc0000 [ 383.278997][ T29] audit: type=1326 audit(1757634065.887:23420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.3.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b9181eba9 code=0x7ffc0000 [ 383.302626][ T29] audit: type=1326 audit(1757634065.887:23421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.3.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9181eba9 code=0x7ffc0000 [ 383.326270][ T29] audit: type=1326 audit(1757634065.887:23422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.3.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b9181eba9 code=0x7ffc0000 [ 383.349845][ T29] audit: type=1326 audit(1757634065.887:23423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.3.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9181eba9 code=0x7ffc0000 [ 383.373501][ T29] audit: type=1326 audit(1757634065.887:23424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.3.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b9181eba9 code=0x7ffc0000 [ 383.397092][ T29] audit: type=1326 audit(1757634065.887:23425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.3.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9181eba9 code=0x7ffc0000 [ 383.420660][ T29] audit: type=1326 audit(1757634065.887:23426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.3.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b9181eba9 code=0x7ffc0000 [ 383.444276][ T29] audit: type=1326 audit(1757634065.987:23427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32450 comm="syz.3.5560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9181eba9 code=0x7ffc0000 [ 383.476441][T19639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.517969][T32455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5561'. [ 383.573766][T32465] loop3: detected capacity change from 0 to 512 [ 383.590739][T32465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.603332][T32465] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.672265][T19639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.198096][T32486] loop4: detected capacity change from 0 to 256 [ 384.678712][T32495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5575'. [ 384.772729][T32501] loop3: detected capacity change from 0 to 512 [ 384.780791][T32501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 384.802947][T32501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.815700][T32501] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.826540][T32513] Driver unsupported XDP return value 0 on prog (id 4209) dev N/A, expect packet loss! [ 384.847197][T19639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.881543][T32520] loop3: detected capacity change from 0 to 128 [ 384.889861][T32520] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.903063][T32520] ext4 filesystem being mounted at /492/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 384.926448][T19639] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 386.052771][T32132] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 386.166351][T32566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5603'. [ 386.318395][T32583] syzkaller0: entered promiscuous mode [ 386.323949][T32583] syzkaller0: entered allmulticast mode [ 386.332718][T32583] tipc: Enabled bearer , priority 0 [ 386.341421][T32582] tipc: Resetting bearer [ 386.358042][T32582] tipc: Disabling bearer [ 386.552543][T32599] lo speed is unknown, defaulting to 1000 [ 386.598838][T32599] lo speed is unknown, defaulting to 1000 [ 386.660657][T32599] chnl_net:caif_netlink_parms(): no params data found [ 386.701518][T32599] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.708598][T32599] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.716930][T32599] bridge_slave_0: entered allmulticast mode [ 386.723774][T32599] bridge_slave_0: entered promiscuous mode [ 386.732912][T32599] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.740252][T32599] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.747929][T32599] bridge_slave_1: entered allmulticast mode [ 386.757004][T32599] bridge_slave_1: entered promiscuous mode [ 386.786806][T32599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.798713][T32599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.822018][T32599] team0: Port device team_slave_0 added [ 386.830084][T32599] team0: Port device team_slave_1 added [ 386.853033][T32599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.860116][T32599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.887308][T32599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.899767][T32599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.906710][T32599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.933902][T32599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.966062][T32599] hsr_slave_0: entered promiscuous mode [ 386.972264][T32599] hsr_slave_1: entered promiscuous mode [ 386.978180][T32599] debugfs: 'hsr0' already exists in 'hsr' [ 386.983927][T32599] Cannot create hsr debugfs directory [ 387.005320][T13292] dummy0: left allmulticast mode [ 387.018815][T13292] bridge0: port 3(dummy0) entered disabled state [ 387.025937][T13292] bridge_slave_1: left allmulticast mode [ 387.031693][T13292] bridge_slave_1: left promiscuous mode [ 387.037509][T13292] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.046283][T13292] bridge_slave_0: left allmulticast mode [ 387.052016][T13292] bridge_slave_0: left promiscuous mode [ 387.057703][T13292] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.102842][T13292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.114280][T13292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.127862][T13292] bond0 (unregistering): Released all slaves [ 387.145525][T32626] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5623'. [ 387.154890][T32626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5623'. [ 387.190506][T13292] tipc: Left network mode [ 387.240649][T13292] hsr_slave_0: left promiscuous mode [ 387.252442][T13292] hsr_slave_1: left promiscuous mode [ 387.258853][T13292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.267427][T13292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.299275][T13292] team0 (unregistering): Port device team_slave_1 removed [ 387.313670][T13292] team0 (unregistering): Port device team_slave_0 removed [ 387.321903][T10468] smc: removing ib device syz! [ 387.577284][T32640] netlink: 'syz.2.5629': attribute type 13 has an invalid length. [ 387.589895][T32640] loop2: detected capacity change from 0 to 512 [ 387.600412][T32640] EXT4-fs (loop2): too many log groups per flexible block group [ 387.608237][T32640] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 387.615114][T32640] EXT4-fs (loop2): mount failed [ 387.633215][T32599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 387.642429][T32599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 387.651665][T32599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 387.660321][T32599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.700813][T32599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.713517][T32599] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.724952][T10468] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.732047][T10468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.768481][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.775579][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.942871][T32599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.064180][T32599] veth0_vlan: entered promiscuous mode [ 388.077149][T32599] veth1_vlan: entered promiscuous mode [ 388.096886][T32599] veth0_macvtap: entered promiscuous mode [ 388.107711][T32599] veth1_macvtap: entered promiscuous mode [ 388.120517][T32599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.138097][T32599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.149944][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.161658][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.180700][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.195129][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.569145][T32672] sd 0:0:1:0: device reset [ 388.731519][T32682] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 388.741728][T32682] SELinux: failed to load policy [ 388.851775][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 388.851789][ T29] audit: type=1400 audit(1757634071.517:23480): avc: denied { create } for pid=32683 comm="syz.2.5638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 388.902745][T32688] loop2: detected capacity change from 0 to 128 [ 388.909361][T32688] EXT4-fs: Ignoring removed nobh option [ 388.916393][T32688] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 388.928633][T32688] ext4 filesystem being mounted at /544/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 388.948771][ T29] audit: type=1400 audit(1757634071.607:23481): avc: denied { map } for pid=32687 comm="syz.2.5640" path="/544/mnt/blkio.bfq.io_wait_time_recursive" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 388.995589][T19527] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.075830][T32698] netlink: 'syz.2.5644': attribute type 13 has an invalid length. [ 389.101992][T32698] loop2: detected capacity change from 0 to 512 [ 389.120357][T32698] EXT4-fs (loop2): too many log groups per flexible block group [ 389.128116][T32698] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 389.135355][T32698] EXT4-fs (loop2): mount failed [ 389.140768][ T29] audit: type=1326 audit(1757634071.807:23482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32707 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 389.141634][ T29] audit: type=1326 audit(1757634071.807:23483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32707 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 389.183773][T32712] 9pnet_fd: Insufficient options for proto=fd [ 389.188131][ T29] audit: type=1326 audit(1757634071.807:23484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32707 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 389.217886][ T29] audit: type=1326 audit(1757634071.807:23485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32707 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 389.242533][ T29] audit: type=1326 audit(1757634071.867:23486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32707 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 389.266123][ T29] audit: type=1326 audit(1757634071.867:23487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32707 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 389.288615][T32720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5654'. [ 389.289766][ T29] audit: type=1326 audit(1757634071.867:23488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32707 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 389.289842][ T29] audit: type=1326 audit(1757634071.867:23489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32707 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 389.378778][T32728] lo speed is unknown, defaulting to 1000 [ 389.382646][T32722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5655'. [ 389.408809][T32728] loop3: detected capacity change from 0 to 512 [ 389.417911][T32728] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 389.428135][T32728] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.5656: corrupted in-inode xattr: overlapping e_value [ 389.443717][T32728] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5656: couldn't read orphan inode 15 (err -117) [ 389.456281][T32728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.515483][T32742] 9pnet_fd: Insufficient options for proto=fd [ 389.563386][T32747] lo speed is unknown, defaulting to 1000 [ 389.606710][T32747] siw: device registration error -23 [ 389.684151][T32750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5665'. [ 389.724124][T32758] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5667'. [ 389.737077][T19639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.817656][T32765] loop2: detected capacity change from 0 to 1024 [ 389.833465][T32765] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 389.847973][T32765] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.5669: lblock 1 mapped to illegal pblock 1 (length 1) [ 389.874703][T32765] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.5669: Failed to acquire dquot type 0 [ 389.898795][T32765] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.5669: Freeing blocks not in datazone - block = 0, count = 4096 [ 389.914613][T32765] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.5669: Invalid inode bitmap blk 0 in block_group 0 [ 389.927370][T32765] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 389.936428][T13290] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 389.955454][T13290] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:27: Failed to release dquot type 0 [ 389.993022][T32765] EXT4-fs (loop2): 1 orphan inode deleted [ 390.009256][T32765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.094258][ T315] sd 0:0:1:0: device reset [ 390.138627][T32765] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.5669: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 390.139661][ T318] loop3: detected capacity change from 0 to 512 [ 390.163918][ T318] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 390.174907][ T318] EXT4-fs (loop3): 1 truncate cleaned up [ 390.181193][ T318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.411396][ T332] futex_wake_op: syz.4.5681 tries to shift op by -1; fix this program [ 390.455982][ T334] loop4: detected capacity change from 0 to 128 [ 390.561346][ T334] EXT4-fs: Ignoring removed nobh option [ 390.606000][ T334] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.619606][T19639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.630131][ T334] ext4 filesystem being mounted at /485/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 390.686702][T20343] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.716524][ T343] syzkaller0: entered promiscuous mode [ 390.722071][ T343] syzkaller0: entered allmulticast mode [ 390.728072][ T337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5683'. [ 390.758547][ T345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.767658][ T345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.807788][ T352] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5687'. [ 390.832685][ T354] sd 0:0:1:0: device reset [ 390.988208][ T364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5693'. [ 391.788401][ T374] syzkaller0: entered promiscuous mode [ 391.793938][ T374] syzkaller0: entered allmulticast mode [ 391.891288][ T376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5697'. [ 391.931025][ T382] loop4: detected capacity change from 0 to 512 [ 391.939177][ T382] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 391.951531][ T382] EXT4-fs (loop4): 1 truncate cleaned up [ 391.957493][ T382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.982487][T20343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.340477][ T396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5704'. [ 392.367559][ T396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5704'. [ 392.429565][T19527] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.461596][ T402] sd 0:0:1:0: device reset [ 392.478364][ T404] syzkaller0: entered promiscuous mode [ 392.483931][ T404] syzkaller0: entered allmulticast mode [ 392.639078][ T411] loop2: detected capacity change from 0 to 512 [ 392.645923][ T411] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 392.657854][ T411] EXT4-fs (loop2): 1 truncate cleaned up [ 392.664715][ T411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.688631][T19527] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.721806][ T416] loop2: detected capacity change from 0 to 128 [ 392.728335][ T416] EXT4-fs: Ignoring removed nobh option [ 392.735379][ T416] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.748801][ T416] ext4 filesystem being mounted at /567/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 392.795472][T19527] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.848802][ T427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5717'. [ 392.863134][ T427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5717'. [ 392.887737][ T425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5715'. [ 392.910835][ T434] sd 0:0:1:0: device reset [ 392.933590][ T438] syzkaller0: entered promiscuous mode [ 392.939103][ T438] syzkaller0: entered allmulticast mode [ 392.993179][ T442] netlink: 'syz.2.5722': attribute type 13 has an invalid length. [ 393.006266][ T442] loop2: detected capacity change from 0 to 512 [ 393.022776][ T442] EXT4-fs (loop2): too many log groups per flexible block group [ 393.030648][ T442] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 393.037486][ T442] EXT4-fs (loop2): mount failed [ 393.115020][ T462] sd 0:0:1:0: device reset [ 393.161771][ T457] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 393.172295][ T457] SELinux: failed to load policy [ 393.174241][ T468] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5733'. [ 393.186337][ T468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5733'. [ 393.218836][ T472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.227277][ T472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.262285][ T479] loop2: detected capacity change from 0 to 128 [ 393.270417][ T479] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.282826][ T479] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.303109][T19527] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.332955][ T484] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5739'. [ 393.362823][ T490] sd 0:0:1:0: device reset [ 393.502362][ T499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5745'. [ 393.760127][ T520] netlink: 872 bytes leftover after parsing attributes in process `syz.0.5752'. [ 393.957913][ T536] SELinux: ebitmap: empty map [ 393.963161][ T536] SELinux: failed to load policy [ 394.221549][ T559] loop4: detected capacity change from 0 to 128 [ 394.231101][ T559] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 394.243942][ T559] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.270769][T20343] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 394.402091][ T587] lo speed is unknown, defaulting to 1000 [ 394.433427][ T595] siw: device registration error -23 [ 394.553614][ T609] loop3: detected capacity change from 0 to 512 [ 394.561272][ T609] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 394.574229][ T609] EXT4-fs (loop3): 1 truncate cleaned up [ 394.580783][ T609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.596709][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 394.596724][ T29] audit: type=1326 audit(1757634077.257:23646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 394.626941][ T29] audit: type=1326 audit(1757634077.257:23647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 394.650952][ T29] audit: type=1326 audit(1757634077.257:23648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 394.674469][ T29] audit: type=1326 audit(1757634077.257:23649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 394.698582][ T29] audit: type=1326 audit(1757634077.257:23650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 394.722695][ T29] audit: type=1326 audit(1757634077.257:23651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 394.746088][ T29] audit: type=1326 audit(1757634077.257:23652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 394.754687][ T620] loop2: detected capacity change from 0 to 128 [ 394.770175][ T29] audit: type=1326 audit(1757634077.257:23653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 394.799217][ T29] audit: type=1326 audit(1757634077.257:23654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 394.800965][ T620] EXT4-fs: Ignoring removed nobh option [ 394.838899][ T623] syzkaller0: entered promiscuous mode [ 394.844507][ T623] syzkaller0: entered allmulticast mode [ 394.850559][ T614] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 394.850580][ T614] SELinux: failed to load policy [ 394.866994][ T623] tipc: Started in network mode [ 394.867088][T19639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.871945][ T623] tipc: Node identity 32bd2fb566e6, cluster identity 4711 [ 394.883358][ T620] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 394.888075][ T623] tipc: Enabled bearer , priority 0 [ 394.907228][ T29] audit: type=1326 audit(1757634077.257:23655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.4.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 394.907800][ T620] ext4 filesystem being mounted at /594/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 394.958809][ T622] tipc: Resetting bearer [ 394.965684][T19527] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.001091][ T622] tipc: Disabling bearer [ 395.032327][ T636] SELinux: ebitmap: empty map [ 395.037198][ T636] SELinux: failed to load policy [ 395.061505][ T641] loop3: detected capacity change from 0 to 128 [ 395.080428][ T641] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 395.090698][ T642] lo speed is unknown, defaulting to 1000 [ 395.106209][ T641] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.137737][ T642] siw: device registration error -23 [ 395.170220][T19639] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.196180][ T659] loop3: detected capacity change from 0 to 128 [ 395.209297][ T659] EXT4-fs: Ignoring removed nobh option [ 395.220250][ T659] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 395.248003][ T659] ext4 filesystem being mounted at /543/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 395.265833][ T669] futex_wake_op: syz.2.5804 tries to shift op by -1; fix this program [ 395.306975][T19639] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 395.346709][ T679] lo speed is unknown, defaulting to 1000 [ 395.353203][ T679] lo speed is unknown, defaulting to 1000 [ 395.359261][ T679] lo speed is unknown, defaulting to 1000 [ 395.365857][ T679] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 395.375608][ T679] lo speed is unknown, defaulting to 1000 [ 395.382437][ T679] lo speed is unknown, defaulting to 1000 [ 395.388594][ T679] lo speed is unknown, defaulting to 1000 [ 395.394817][ T679] lo speed is unknown, defaulting to 1000 [ 395.400923][ T679] lo speed is unknown, defaulting to 1000 [ 395.590615][ T689] lo speed is unknown, defaulting to 1000 [ 395.596703][ T689] lo speed is unknown, defaulting to 1000 [ 395.691906][ T730] lo speed is unknown, defaulting to 1000 [ 395.720804][ T730] lo speed is unknown, defaulting to 1000 [ 395.758488][ T689] chnl_net:caif_netlink_parms(): no params data found [ 395.817183][ T689] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.824396][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.831805][ T689] bridge_slave_0: entered allmulticast mode [ 395.838301][ T689] bridge_slave_0: entered promiscuous mode [ 395.845833][ T689] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.852925][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.872912][ T689] bridge_slave_1: entered allmulticast mode [ 395.880552][ T689] bridge_slave_1: entered promiscuous mode [ 395.915868][ T689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.962685][ T689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.000920][ T790] loop3: detected capacity change from 0 to 512 [ 396.013435][ T790] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 396.034928][ T790] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.5819: corrupted in-inode xattr: overlapping e_value [ 396.058574][ T41] bridge_slave_1: left allmulticast mode [ 396.064285][ T41] bridge_slave_1: left promiscuous mode [ 396.064990][ T790] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5819: couldn't read orphan inode 15 (err -117) [ 396.070010][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.083299][ T790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.115279][ T41] bridge_slave_0: left allmulticast mode [ 396.121282][ T41] bridge_slave_0: left promiscuous mode [ 396.127129][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.182164][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.194964][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.214109][ T41] bond0 (unregistering): Released all slaves [ 396.223978][ T689] team0: Port device team_slave_0 added [ 396.262134][ T689] team0: Port device team_slave_1 added [ 396.297977][ T41] hsr_slave_0: left promiscuous mode [ 396.305111][ T41] hsr_slave_1: left promiscuous mode [ 396.314473][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.329282][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.429503][ T41] team0 (unregistering): Port device team_slave_1 removed [ 396.439421][ T41] team0 (unregistering): Port device team_slave_0 removed [ 396.444709][ T831] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 396.456239][ T831] SELinux: failed to load policy [ 396.474658][ T771] lo speed is unknown, defaulting to 1000 [ 396.475166][ T689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.487330][ T689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.513768][ T689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.525262][ T689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.532355][ T689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.558392][ T689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.569210][ T771] lo speed is unknown, defaulting to 1000 [ 396.576063][ T832] siw: device registration error -23 [ 396.613055][ T689] hsr_slave_0: entered promiscuous mode [ 396.621948][ T841] 9pnet_fd: Insufficient options for proto=fd [ 396.625109][ T689] hsr_slave_1: entered promiscuous mode [ 396.636420][ T689] debugfs: 'hsr0' already exists in 'hsr' [ 396.642177][ T689] Cannot create hsr debugfs directory [ 396.649272][ T843] netlink: 'syz.0.5833': attribute type 13 has an invalid length. [ 396.684671][ T812] lo speed is unknown, defaulting to 1000 [ 396.705213][ T812] lo speed is unknown, defaulting to 1000 [ 396.746030][T19639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.850906][ T812] chnl_net:caif_netlink_parms(): no params data found [ 396.883373][ T861] loop3: detected capacity change from 0 to 128 [ 396.890117][ T861] EXT4-fs: Ignoring removed nobh option [ 396.900823][ T861] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.913319][ T861] ext4 filesystem being mounted at /557/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 396.959344][ T812] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.966420][ T812] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.973982][ T812] bridge_slave_0: entered allmulticast mode [ 396.975240][T19639] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 396.980544][ T812] bridge_slave_0: entered promiscuous mode [ 396.995989][ T812] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.003091][ T812] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.016740][ T812] bridge_slave_1: entered allmulticast mode [ 397.023328][ T812] bridge_slave_1: entered promiscuous mode [ 397.044305][ T812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.081526][ T812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.105479][ T812] team0: Port device team_slave_0 added [ 397.120708][ T812] team0: Port device team_slave_1 added [ 397.154629][ T812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.161691][ T812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.187691][ T812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.200870][ T812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.207884][ T812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.233959][ T812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.302624][ T689] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 397.334816][ T689] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 397.382620][ T689] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 397.395992][ T895] __nla_validate_parse: 22 callbacks suppressed [ 397.396008][ T895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5852'. [ 397.420593][ T812] hsr_slave_0: entered promiscuous mode [ 397.426722][ T812] hsr_slave_1: entered promiscuous mode [ 397.434314][ T812] debugfs: 'hsr0' already exists in 'hsr' [ 397.440074][ T812] Cannot create hsr debugfs directory [ 397.446251][ T689] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 397.495389][ T897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5853'. [ 397.553181][ T916] 9pnet_fd: Insufficient options for proto=fd [ 397.593991][ T895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5852'. [ 397.625235][ T812] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 397.637127][ T812] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 397.650373][ T689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.662851][ T689] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.680529][ T812] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 397.691446][T10481] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.698509][T10481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.715046][T10481] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.722137][T10481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.752804][ T689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.774900][ T812] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 397.850263][ T938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5862'. [ 397.861802][ T812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.890442][ T812] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.905580][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.912658][ T6434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.946062][ T965] lo speed is unknown, defaulting to 1000 [ 397.953445][ T689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.972955][T13289] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.980061][T13289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.030987][ T965] lo speed is unknown, defaulting to 1000 [ 398.120783][ T812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.154565][ T689] veth0_vlan: entered promiscuous mode [ 398.164414][ T689] veth1_vlan: entered promiscuous mode [ 398.209031][ T689] veth0_macvtap: entered promiscuous mode [ 398.231780][ T689] veth1_macvtap: entered promiscuous mode [ 398.273076][ T689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.299176][ T689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.324072][T13289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.338304][T13287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.382074][ T812] veth0_vlan: entered promiscuous mode [ 398.387985][T13287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.398853][ T812] veth1_vlan: entered promiscuous mode [ 398.413154][T13287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.444204][ T812] veth0_macvtap: entered promiscuous mode [ 398.494526][ T812] veth1_macvtap: entered promiscuous mode [ 398.550014][ T1057] loop4: detected capacity change from 0 to 128 [ 398.563809][ T1057] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 398.584730][ T812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.611036][ T812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.622573][ T1067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5866'. [ 398.634901][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.642542][ T1057] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.658945][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.682710][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.714308][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.753185][T20343] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 398.863588][ T1091] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5876'. [ 398.927489][ T1091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5876'. [ 399.112627][ T1120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5887'. [ 399.128924][ T1114] lo speed is unknown, defaulting to 1000 [ 399.142694][ T1114] lo speed is unknown, defaulting to 1000 [ 399.152445][ T1123] loop4: detected capacity change from 0 to 512 [ 399.170691][ T1123] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 399.228192][ T1123] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.5884: corrupted in-inode xattr: overlapping e_value [ 399.257430][ T1123] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5884: couldn't read orphan inode 15 (err -117) [ 399.282970][ T1123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.417654][ T1127] futex_wake_op: syz.2.5890 tries to shift op by -1; fix this program [ 399.670150][T20343] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.683551][ T1158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5904'. [ 399.697244][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 399.697263][ T29] audit: type=1326 audit(1757634082.357:23921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.4.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 399.748413][ T1167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.754489][ T1172] syzkaller0: entered promiscuous mode [ 399.762254][ T1172] syzkaller0: entered allmulticast mode [ 399.767230][ T1167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.769219][ T29] audit: type=1326 audit(1757634082.357:23922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.4.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 399.779455][ T1172] tipc: Started in network mode [ 399.799271][ T29] audit: type=1326 audit(1757634082.357:23923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.4.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 399.804796][ T1172] tipc: Node identity fa4af4c46732, cluster identity 4711 [ 399.827645][ T29] audit: type=1326 audit(1757634082.357:23924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.4.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 399.835359][ T1172] tipc: Enabled bearer , priority 0 [ 399.858151][ T29] audit: type=1326 audit(1757634082.357:23925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.4.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 399.883076][ T1173] loop4: detected capacity change from 0 to 1024 [ 399.888355][ T29] audit: type=1326 audit(1757634082.357:23926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.4.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 399.918189][ T29] audit: type=1326 audit(1757634082.357:23927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.4.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 399.919614][ T1173] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 399.941937][ T29] audit: type=1326 audit(1757634082.397:23928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.4.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 399.941965][ T29] audit: type=1326 audit(1757634082.397:23929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.4.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 399.942029][ T29] audit: type=1326 audit(1757634082.407:23930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.4.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e709ceba9 code=0x7ffc0000 [ 399.989600][ T1170] tipc: Resetting bearer [ 400.004849][ T1173] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.5905: lblock 1 mapped to illegal pblock 1 (length 1) [ 400.044537][ T1173] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.5905: Failed to acquire dquot type 0 [ 400.057689][ T1170] tipc: Disabling bearer [ 400.065945][ T1173] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.5905: Freeing blocks not in datazone - block = 0, count = 4096 [ 400.081006][ T1173] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.5905: Invalid inode bitmap blk 0 in block_group 0 [ 400.093948][ T1173] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 400.103451][T13289] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 400.118301][T13289] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:26: Failed to release dquot type 0 [ 400.133748][ T1173] EXT4-fs (loop4): 1 orphan inode deleted [ 400.140223][ T1173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.180097][ T1173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.200331][ T1176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5908'. [ 400.794831][ T1208] syzkaller0: entered promiscuous mode [ 400.801030][ T1208] syzkaller0: entered allmulticast mode [ 400.809329][ T1208] tipc: Started in network mode [ 400.814218][ T1208] tipc: Node identity 725c2ca7d5ee, cluster identity 4711 [ 400.821491][ T1208] tipc: Enabled bearer , priority 0 [ 400.828775][ T1207] tipc: Resetting bearer [ 400.837480][ T1207] tipc: Disabling bearer [ 400.916496][ T1210] 9pnet_fd: Insufficient options for proto=fd [ 401.058262][ T1221] netlink: 'syz.0.5925': attribute type 21 has an invalid length. [ 401.378013][ T1244] netlink: 'syz.5.5932': attribute type 13 has an invalid length. [ 401.392866][ T1244] loop5: detected capacity change from 0 to 512 [ 401.412777][ T1244] EXT4-fs (loop5): too many log groups per flexible block group [ 401.421120][ T1244] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 401.428055][ T1244] EXT4-fs (loop5): mount failed [ 401.795590][ T1334] futex_wake_op: syz.5.5941 tries to shift op by -1; fix this program [ 401.857211][ T1354] lo speed is unknown, defaulting to 1000 [ 401.865105][ T1354] lo speed is unknown, defaulting to 1000 [ 401.905094][ T1354] loop3: detected capacity change from 0 to 512 [ 401.911879][ T1354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 401.925192][ T1354] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.5943: corrupted in-inode xattr: overlapping e_value [ 401.940681][ T1354] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5943: couldn't read orphan inode 15 (err -117) [ 401.953113][ T1354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.067768][ T1389] netlink: 'syz.0.5948': attribute type 21 has an invalid length. [ 402.291402][ T1430] netlink: 'syz.5.5957': attribute type 13 has an invalid length. [ 402.320661][ T1435] siw: device registration error -23 [ 402.329282][ T1430] loop5: detected capacity change from 0 to 512 [ 402.353114][ T1430] EXT4-fs (loop5): too many log groups per flexible block group [ 402.360933][ T1430] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 402.367926][ T1430] EXT4-fs (loop5): mount failed [ 402.432554][T19639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.478146][ T1448] __nla_validate_parse: 14 callbacks suppressed [ 402.478158][ T1448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5962'. [ 402.527865][ T1458] lo speed is unknown, defaulting to 1000 [ 402.534944][ T1458] lo speed is unknown, defaulting to 1000 [ 402.559233][ T1460] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5967'. [ 402.628215][ T1460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5967'. [ 402.631018][ T1469] netlink: 'syz.3.5969': attribute type 21 has an invalid length. [ 402.644931][ T1469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5969'. [ 402.675812][ T1472] netlink: 'syz.3.5971': attribute type 13 has an invalid length. [ 402.691836][ T1472] loop3: detected capacity change from 0 to 512 [ 402.697753][ T1475] tipc: Started in network mode [ 402.703034][ T1475] tipc: Node identity aa251bd30ff6, cluster identity 4711 [ 402.710243][ T1472] EXT4-fs (loop3): too many log groups per flexible block group [ 402.710289][ T1472] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 402.710325][ T1472] EXT4-fs (loop3): mount failed [ 402.730136][ T1475] tipc: Enabled bearer , priority 0 [ 402.742538][ T1474] tipc: Disabling bearer [ 402.810680][ T1483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5975'. [ 402.819674][ T1483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5975'. [ 402.844371][ T1485] netlink: 'syz.5.5976': attribute type 21 has an invalid length. [ 402.852477][ T1485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5976'. [ 402.866815][ T1481] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 402.877553][ T1481] SELinux: failed to load policy [ 402.923610][ T1489] lo speed is unknown, defaulting to 1000 [ 402.930233][ T1489] lo speed is unknown, defaulting to 1000 [ 403.247590][ T1519] netlink: 'syz.0.5987': attribute type 4 has an invalid length. [ 403.255534][ T1519] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5987'. [ 403.312094][ T1517] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 403.323022][ T1517] SELinux: failed to load policy [ 403.394182][ T1528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5992'. [ 403.448162][ T1558] tipc: Enabled bearer , priority 0 [ 403.449270][ T1542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5996'. [ 403.465371][ T1555] tipc: Disabling bearer [ 403.486874][ T1561] netlink: 'syz.0.6000': attribute type 21 has an invalid length. [ 403.524288][ T1563] lo speed is unknown, defaulting to 1000 [ 403.530600][ T1563] lo speed is unknown, defaulting to 1000 [ 403.571416][ T1563] siw: device registration error -23 [ 403.674062][ T1570] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 403.684600][ T1570] SELinux: failed to load policy [ 403.751854][ T1588] netlink: 'syz.2.6010': attribute type 13 has an invalid length. [ 403.762274][ T1590] tipc: Enabled bearer , priority 0 [ 403.774769][ T1588] loop2: detected capacity change from 0 to 512 [ 403.783586][ T1589] tipc: Disabling bearer [ 403.795239][ T1588] EXT4-fs (loop2): too many log groups per flexible block group [ 403.803135][ T1588] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 403.805828][ T1594] SELinux: ebitmap: empty map [ 403.813290][ T1588] EXT4-fs (loop2): mount failed [ 403.815129][ T1594] SELinux: failed to load policy [ 403.990821][ T1624] loop3: detected capacity change from 0 to 512 [ 403.997585][ T1622] SELinux: ebitmap: empty map [ 404.004019][ T1622] SELinux: failed to load policy [ 404.034091][ T1626] tipc: Enabled bearer , priority 0 [ 404.042450][ T1624] EXT4-fs (loop3): too many log groups per flexible block group [ 404.050409][ T1624] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 404.059292][ T1625] tipc: Disabling bearer [ 404.066843][ T1624] EXT4-fs (loop3): mount failed [ 404.242997][ T1651] lo speed is unknown, defaulting to 1000 [ 404.252159][ T1651] lo speed is unknown, defaulting to 1000 [ 404.282603][ T1655] loop3: detected capacity change from 0 to 512 [ 404.300028][ T1655] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 404.323410][ T1655] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.6035: corrupted in-inode xattr: overlapping e_value [ 404.361736][ T1655] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6035: couldn't read orphan inode 15 (err -117) [ 404.435827][ T1655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.744806][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 404.744852][ T29] audit: type=1326 audit(1757634087.407:24372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9181eba9 code=0x7ffc0000 [ 404.760453][ T1678] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 404.775176][ T29] audit: type=1326 audit(1757634087.407:24373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1650 comm="syz.3.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9181eba9 code=0x7ffc0000 [ 404.784313][ T1678] SELinux: failed to load policy [ 404.952335][T19639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.056101][ T1702] SELinux: ebitmap: empty map [ 405.061116][ T1702] SELinux: failed to load policy [ 405.189731][ T1722] tipc: Enabling of bearer rejected, failed to enable media [ 405.281281][ T1730] SELinux: ebitmap: empty map [ 405.286303][ T1730] SELinux: failed to load policy [ 405.634806][ T1741] lo speed is unknown, defaulting to 1000 [ 405.653157][ T1741] lo speed is unknown, defaulting to 1000 [ 405.752710][T13289] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.779911][ T1741] chnl_net:caif_netlink_parms(): no params data found [ 405.846910][T13289] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.863432][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.870673][ T1741] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.956930][ T1741] bridge_slave_0: entered allmulticast mode [ 405.963504][ T1741] bridge_slave_0: entered promiscuous mode [ 405.971632][ T1741] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.978679][ T1741] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.986630][ T1741] bridge_slave_1: entered allmulticast mode [ 405.994023][ T1773] futex_wake_op: syz.5.6083 tries to shift op by -1; fix this program [ 406.003278][ T1741] bridge_slave_1: entered promiscuous mode [ 406.010455][T13289] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.041865][ T1741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.060020][T13289] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.073259][ T1741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.110453][ T1741] team0: Port device team_slave_0 added [ 406.117123][ T1741] team0: Port device team_slave_1 added [ 406.150308][ T1741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.157256][ T1741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.183197][ T1741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.221637][ T29] audit: type=1326 audit(1757634088.877:24374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 406.245733][ T29] audit: type=1326 audit(1757634088.877:24375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 406.269278][ T29] audit: type=1326 audit(1757634088.877:24376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 406.293614][ T29] audit: type=1326 audit(1757634088.877:24377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 406.317212][ T29] audit: type=1326 audit(1757634088.877:24378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 406.341304][ T29] audit: type=1326 audit(1757634088.877:24379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 406.364835][ T29] audit: type=1326 audit(1757634088.877:24380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 406.388875][ T29] audit: type=1326 audit(1757634088.877:24381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1782 comm="syz.5.6088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 406.391490][ T1785] siw: device registration error -23 [ 406.424082][T13289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.443538][T13289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.469900][ T1789] loop5: detected capacity change from 0 to 1024 [ 406.477043][T13289] bond0 (unregistering): Released all slaves [ 406.491582][ T1741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.498534][ T1741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.524571][ T1741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.537941][ T1789] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 406.560456][ T1786] lo speed is unknown, defaulting to 1000 [ 406.575454][ T1789] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.6088: lblock 1 mapped to illegal pblock 1 (length 1) [ 406.592064][ T1786] lo speed is unknown, defaulting to 1000 [ 406.600433][ T1741] hsr_slave_0: entered promiscuous mode [ 406.620521][ T1741] hsr_slave_1: entered promiscuous mode [ 406.636134][ T1741] debugfs: 'hsr0' already exists in 'hsr' [ 406.641928][ T1741] Cannot create hsr debugfs directory [ 406.652271][T13289] hsr_slave_0: left promiscuous mode [ 406.660510][T13289] hsr_slave_1: left promiscuous mode [ 406.666150][ T1789] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.6088: Failed to acquire dquot type 0 [ 406.666255][T13289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.699880][ T1789] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.6088: Freeing blocks not in datazone - block = 0, count = 4096 [ 406.730485][ T1789] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.6088: Invalid inode bitmap blk 0 in block_group 0 [ 406.743381][T13289] team0 (unregistering): Port device team_slave_1 removed [ 406.752890][T13294] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 406.753433][ T1789] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 406.773376][T13294] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:31: Failed to release dquot type 0 [ 406.852109][T13289] team0 (unregistering): Port device team_slave_0 removed [ 406.874988][ T1799] futex_wake_op: syz.4.6094 tries to shift op by -1; fix this program [ 406.878581][ T1789] EXT4-fs (loop5): 1 orphan inode deleted [ 406.960120][ T1789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.981162][ T1802] tipc: Enabled bearer , priority 0 [ 406.990964][ T1801] tipc: Disabling bearer [ 407.097854][ T1789] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 16: comm syz.5.6088: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 407.451460][T13289] IPVS: stop unused estimator thread 0... [ 407.476635][ T1741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.493417][ T1741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.504649][ T1741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.514623][ T1741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 407.538014][ T1835] __nla_validate_parse: 24 callbacks suppressed [ 407.538042][ T1835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6109'. [ 407.594870][ T1741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.615618][ T1741] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.626054][ T1662] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.633139][ T1662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.660110][ T1741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 407.670573][ T1741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.682680][ T812] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.690979][ T1662] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.698741][ T1662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.766532][ T1741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.782336][ T1859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6114'. [ 407.817574][ T1856] SELinux: ebitmap: empty map [ 407.825412][ T1856] SELinux: failed to load policy [ 407.864267][ T1873] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6118'. [ 407.865087][ T1741] veth0_vlan: entered promiscuous mode [ 407.874196][ T1873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6118'. [ 407.893712][ T1741] veth1_vlan: entered promiscuous mode [ 407.912979][ T1741] veth0_macvtap: entered promiscuous mode [ 407.922749][ T1741] veth1_macvtap: entered promiscuous mode [ 407.931089][ T1876] lo speed is unknown, defaulting to 1000 [ 407.935424][ T1741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.957635][ T1741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.975805][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.988832][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.005375][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.032200][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.061724][ T1885] netlink: 4520 bytes leftover after parsing attributes in process `syz.3.6121'. [ 408.071076][ T1885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6121'. [ 408.117885][ T1889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6123'. [ 408.146670][ T1893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6125'. [ 408.266072][ T1899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6128'. [ 408.312272][ T1907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6130'. [ 408.381706][ T1923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.390449][ T1923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.418961][ T1927] siw: device registration error -23 [ 408.837427][ T1965] lo speed is unknown, defaulting to 1000 [ 408.873530][ T1965] loop2: detected capacity change from 0 to 512 [ 408.880575][ T1965] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 408.890960][ T1965] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.6153: corrupted in-inode xattr: overlapping e_value [ 408.906082][ T1965] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.6153: couldn't read orphan inode 15 (err -117) [ 408.919572][ T1965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.199119][ T689] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.268669][ T1980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.277560][ T1980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.638192][ T2046] lo speed is unknown, defaulting to 1000 [ 409.808635][ T2074] SELinux: ebitmap: empty map [ 409.819614][ T2074] SELinux: failed to load policy [ 409.885652][ T2087] tipc: Enabling of bearer rejected, failed to enable media [ 410.198796][ T2162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.208886][ T2162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.322742][ T2174] validate_nla: 2 callbacks suppressed [ 410.322753][ T2174] netlink: 'syz.2.6181': attribute type 21 has an invalid length. [ 410.713843][ T2193] SELinux: ebitmap: empty map [ 410.719057][ T2193] SELinux: failed to load policy [ 410.839411][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 410.839427][ T29] audit: type=1326 audit(1757634093.497:24574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.0.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 410.869480][ T29] audit: type=1326 audit(1757634093.497:24575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.0.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 410.893061][ T29] audit: type=1326 audit(1757634093.497:24576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.0.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 410.916664][ T29] audit: type=1326 audit(1757634093.497:24577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.0.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 410.940364][ T29] audit: type=1326 audit(1757634093.497:24578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.0.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 410.965670][ T29] audit: type=1326 audit(1757634093.567:24579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.0.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 410.989191][ T29] audit: type=1326 audit(1757634093.567:24580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.0.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 411.012883][ T29] audit: type=1326 audit(1757634093.637:24581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.0.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 411.036502][ T29] audit: type=1326 audit(1757634093.637:24582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.0.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 411.052487][ T2227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.060695][ T29] audit: type=1326 audit(1757634093.687:24583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.0.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 411.070463][ T2227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.115583][ T2233] netlink: 'syz.3.6201': attribute type 21 has an invalid length. [ 411.607670][ T2318] lo speed is unknown, defaulting to 1000 [ 411.850113][ T2345] futex_wake_op: syz.0.6218 tries to shift op by -1; fix this program [ 412.342777][ T2407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.359436][ T2407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.447911][ T2417] lo speed is unknown, defaulting to 1000 [ 412.494055][ T2418] loop5: detected capacity change from 0 to 512 [ 412.505143][ T2415] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 412.510900][ T2418] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 412.519357][ T2415] SELinux: failed to load policy [ 412.548826][ T2418] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.6230: corrupted in-inode xattr: overlapping e_value [ 412.569499][ T2418] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6230: couldn't read orphan inode 15 (err -117) [ 412.609560][ T2418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.673818][ T2422] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 412.693772][ T2422] SELinux: failed to load policy [ 412.978642][ T2436] lo speed is unknown, defaulting to 1000 [ 412.993303][ T2438] __nla_validate_parse: 20 callbacks suppressed [ 412.993316][ T2438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6238'. [ 413.148563][ T2451] SELinux: ebitmap: empty map [ 413.154036][ T2451] SELinux: failed to load policy [ 413.197803][ T2455] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6245'. [ 413.257187][ T812] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.583437][ T2485] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 413.621061][ T2485] SELinux: failed to load policy [ 413.720997][ T2497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6265'. [ 413.797585][ T2506] siw: device registration error -23 [ 413.856462][ T2510] futex_wake_op: syz.2.6269 tries to shift op by -1; fix this program [ 413.918029][ T2520] loop4: detected capacity change from 0 to 1024 [ 413.952058][ T2528] netlink: 'syz.0.6277': attribute type 13 has an invalid length. [ 413.961743][ T2520] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 414.009105][ T2535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6279'. [ 414.018719][ T2537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6276'. [ 414.065316][ T2520] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.6271: lblock 1 mapped to illegal pblock 1 (length 1) [ 414.136393][ T2540] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 414.159940][ T2540] SELinux: failed to load policy [ 414.195002][ T2520] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6271: Failed to acquire dquot type 0 [ 414.208085][ T2520] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.6271: Freeing blocks not in datazone - block = 0, count = 4096 [ 414.227600][ T2520] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.6271: Invalid inode bitmap blk 0 in block_group 0 [ 414.247930][ T2520] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 414.267148][ T2520] EXT4-fs (loop4): 1 orphan inode deleted [ 414.290339][ T2520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.303293][T13283] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 414.321923][ T2549] futex_wake_op: syz.2.6286 tries to shift op by -1; fix this program [ 414.343998][T13283] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:20: Failed to release dquot type 0 [ 414.359435][ T2551] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 414.370397][ T2551] SELinux: failed to load policy [ 414.380312][ T2520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.453879][ T2563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6291'. [ 414.503342][ T2569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6293'. [ 414.577744][ T2579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6297'. [ 414.594121][ T2569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6293'. [ 414.700996][ T2585] futex_wake_op: syz.3.6299 tries to shift op by -1; fix this program [ 414.963682][ T2620] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6305'. [ 415.051596][ T2631] 9pnet_fd: Insufficient options for proto=fd [ 415.311441][ T2669] lo speed is unknown, defaulting to 1000 [ 415.361447][ T2677] lo speed is unknown, defaulting to 1000 [ 415.367199][ T2677] lo speed is unknown, defaulting to 1000 [ 415.388393][ T2677] lo speed is unknown, defaulting to 1000 [ 415.408167][ T2677] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 415.473877][ T2677] lo speed is unknown, defaulting to 1000 [ 415.555847][ T2677] lo speed is unknown, defaulting to 1000 [ 415.562771][ T2677] lo speed is unknown, defaulting to 1000 [ 415.568753][ T2677] lo speed is unknown, defaulting to 1000 [ 415.627409][ T2677] lo speed is unknown, defaulting to 1000 [ 415.643761][ T2677] lo speed is unknown, defaulting to 1000 [ 415.839582][ T2721] futex_wake_op: syz.5.6318 tries to shift op by -1; fix this program [ 415.889620][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 415.889635][ T29] audit: type=1326 audit(1757634098.547:25004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.3.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bed9eba9 code=0x7ffc0000 [ 415.890756][ T2728] tipc: Enabled bearer , priority 0 [ 415.895846][ T29] audit: type=1326 audit(1757634098.547:25005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.3.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bed9eba9 code=0x7ffc0000 [ 415.988588][ T2727] tipc: Disabling bearer [ 415.999394][ T29] audit: type=1326 audit(1757634098.617:25006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.3.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8bed9eba9 code=0x7ffc0000 [ 416.022966][ T29] audit: type=1326 audit(1757634098.617:25007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.3.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bed9eba9 code=0x7ffc0000 [ 416.046478][ T29] audit: type=1326 audit(1757634098.617:25008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.3.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bed9eba9 code=0x7ffc0000 [ 416.070122][ T29] audit: type=1326 audit(1757634098.617:25009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.3.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8bed9eba9 code=0x7ffc0000 [ 416.093673][ T29] audit: type=1326 audit(1757634098.617:25010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.3.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bed9eba9 code=0x7ffc0000 [ 416.117376][ T29] audit: type=1326 audit(1757634098.617:25011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.3.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bed9eba9 code=0x7ffc0000 [ 416.140967][ T29] audit: type=1326 audit(1757634098.617:25012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.3.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8bed9eba9 code=0x7ffc0000 [ 416.164577][ T29] audit: type=1326 audit(1757634098.617:25013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz.3.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8bed9eba9 code=0x7ffc0000 [ 416.242674][ T2743] netlink: 'syz.2.6325': attribute type 21 has an invalid length. [ 416.278539][ T2745] 9pnet_fd: Insufficient options for proto=fd [ 416.285169][ T2725] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 416.336514][ T2725] SELinux: failed to load policy [ 416.583350][ T2759] lo speed is unknown, defaulting to 1000 [ 416.605687][ T2759] lo speed is unknown, defaulting to 1000 [ 416.950969][ T2782] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 416.975174][ T2782] SELinux: failed to load policy [ 417.266225][ T2794] siw: device registration error -23 [ 417.383154][ T2800] lo speed is unknown, defaulting to 1000 [ 417.399938][ T2800] lo speed is unknown, defaulting to 1000 [ 417.527636][ T2809] 9pnet_fd: Insufficient options for proto=fd [ 417.604816][ T2811] SELinux: ebitmap: empty map [ 417.609766][ T2811] SELinux: failed to load policy [ 417.813566][ T2830] lo speed is unknown, defaulting to 1000 [ 417.830963][ T2830] lo speed is unknown, defaulting to 1000 [ 417.863664][ T2833] loop3: detected capacity change from 0 to 512 [ 417.871345][ T2833] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 417.914575][ T2833] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.6358: corrupted in-inode xattr: overlapping e_value [ 418.017460][ T2841] 9pnet_fd: Insufficient options for proto=fd [ 418.068675][ T2835] futex_wake_op: syz.0.6359 tries to shift op by -1; fix this program [ 418.078962][ T2833] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6358: couldn't read orphan inode 15 (err -117) [ 418.092528][ T2833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.196640][ T2846] lo speed is unknown, defaulting to 1000 [ 418.246471][ T2846] lo speed is unknown, defaulting to 1000 [ 418.558802][ T2866] __nla_validate_parse: 8 callbacks suppressed [ 418.558817][ T2866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6370'. [ 418.560541][ T2868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6369'. [ 418.586890][ T1741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.644419][ T2887] lo speed is unknown, defaulting to 1000 [ 418.654254][ T2887] lo speed is unknown, defaulting to 1000 [ 418.724077][ T2901] siw: device registration error -23 [ 419.115748][ T2964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6388'. [ 419.116595][ T2950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6385'. [ 419.322283][ T2964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6388'. [ 419.466021][ T3027] syzkaller0: entered promiscuous mode [ 419.471598][ T3027] syzkaller0: entered allmulticast mode [ 419.534618][ T3027] tipc: Enabled bearer , priority 0 [ 419.555759][ T3023] tipc: Resetting bearer [ 419.632870][ T3023] tipc: Disabling bearer [ 419.723261][ T3054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6404'. [ 419.803625][ T3061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6406'. [ 419.825995][ T3061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6406'. [ 419.843890][ T3054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6404'. [ 419.918312][ T3076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6411'. [ 419.920637][ T3068] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 419.937604][ T3068] SELinux: failed to load policy [ 420.313561][ T3134] loop4: detected capacity change from 0 to 1024 [ 420.329780][ T3134] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 420.369548][ T3134] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.6430: lblock 1 mapped to illegal pblock 1 (length 1) [ 420.393338][ T3134] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6430: Failed to acquire dquot type 0 [ 420.475570][ T3134] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.6430: Freeing blocks not in datazone - block = 0, count = 4096 [ 420.525556][ T3134] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.6430: Invalid inode bitmap blk 0 in block_group 0 [ 420.539806][ T41] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 420.566928][ T41] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 420.590185][ T3134] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 420.599033][ T3134] EXT4-fs (loop4): 1 orphan inode deleted [ 420.631367][ T3134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.706504][ T3134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.715558][ T3154] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 420.724063][ T3160] lo speed is unknown, defaulting to 1000 [ 420.725239][ T3154] SELinux: failed to load policy [ 420.731958][ T3160] lo speed is unknown, defaulting to 1000 [ 420.844432][ T3169] loop3: detected capacity change from 0 to 1024 [ 420.861315][ T3169] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 420.873567][ T3169] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.6449: lblock 1 mapped to illegal pblock 1 (length 1) [ 420.889957][ T3169] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.6449: Failed to acquire dquot type 0 [ 420.902609][ T3169] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.6449: Freeing blocks not in datazone - block = 0, count = 4096 [ 420.918783][ T3169] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.6449: Invalid inode bitmap blk 0 in block_group 0 [ 420.931818][T13290] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 420.955994][T13290] __quota_error: 334 callbacks suppressed [ 420.956010][T13290] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 420.970894][T13290] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:27: Failed to release dquot type 0 [ 420.976324][ T29] audit: type=1326 audit(1757634103.637:25343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3174 comm="syz.2.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae7e3eba9 code=0x7ffc0000 [ 421.007239][ T3169] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 421.042880][ T3169] EXT4-fs (loop3): 1 orphan inode deleted [ 421.057013][ T3169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.090787][ T29] audit: type=1326 audit(1757634103.677:25344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3174 comm="syz.2.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae7e3eba9 code=0x7ffc0000 [ 421.114392][ T29] audit: type=1326 audit(1757634103.677:25345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3174 comm="syz.2.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae7e3eba9 code=0x7ffc0000 [ 421.138001][ T29] audit: type=1326 audit(1757634103.687:25346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3174 comm="syz.2.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae7e3eba9 code=0x7ffc0000 [ 421.161539][ T29] audit: type=1326 audit(1757634103.687:25347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3174 comm="syz.2.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae7e3eba9 code=0x7ffc0000 [ 421.185349][ T29] audit: type=1326 audit(1757634103.687:25348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3174 comm="syz.2.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae7e3eba9 code=0x7ffc0000 [ 421.208881][ T29] audit: type=1326 audit(1757634103.687:25349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3174 comm="syz.2.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae7e3eba9 code=0x7ffc0000 [ 421.232431][ T29] audit: type=1326 audit(1757634103.687:25350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3174 comm="syz.2.6451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f8ae7e3eba9 code=0x7ffc0000 [ 421.256150][ T29] audit: type=1326 audit(1757634103.747:25351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3159 comm="syz.0.6445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6457a4eba9 code=0x7ffc0000 [ 421.280703][ T3169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.369775][ T3190] syzkaller0: entered promiscuous mode [ 421.375349][ T3190] syzkaller0: entered allmulticast mode [ 421.390451][ T3190] tipc: Enabled bearer , priority 0 [ 421.397994][ T3189] tipc: Resetting bearer [ 421.406099][ T3189] tipc: Disabling bearer [ 421.939243][ T3253] loop2: detected capacity change from 0 to 1024 [ 421.963497][ T3253] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 422.040944][ T3269] lo speed is unknown, defaulting to 1000 [ 422.051774][ T3253] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.6464: lblock 1 mapped to illegal pblock 1 (length 1) [ 422.066299][ T3269] lo speed is unknown, defaulting to 1000 [ 422.091976][ T3253] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.6464: Failed to acquire dquot type 0 [ 422.123829][ T3253] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.6464: Freeing blocks not in datazone - block = 0, count = 4096 [ 422.164064][ T3253] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.6464: Invalid inode bitmap blk 0 in block_group 0 [ 422.191804][T13293] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 422.227677][ T3309] 9pnet_fd: Insufficient options for proto=fd [ 422.281288][T13293] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:30: Failed to release dquot type 0 [ 422.284066][ T3253] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 422.317423][ T3253] EXT4-fs (loop2): 1 orphan inode deleted [ 422.353061][ T3253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.408638][ T3253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.425830][ T3328] syzkaller0: entered promiscuous mode [ 422.431963][ T3328] syzkaller0: entered allmulticast mode [ 422.443913][ T3328] tipc: Enabled bearer , priority 0 [ 422.451434][ T3326] tipc: Resetting bearer [ 422.460504][ T3326] tipc: Disabling bearer [ 422.587843][ T3331] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 422.598310][ T3331] SELinux: failed to load policy [ 422.604547][ T3338] netlink: 'syz.0.6482': attribute type 4 has an invalid length. [ 422.653616][ T3342] lo speed is unknown, defaulting to 1000 [ 422.669581][ T3349] 9pnet_fd: Insufficient options for proto=fd [ 422.678890][ T3342] lo speed is unknown, defaulting to 1000 [ 422.788123][ T3350] siw: device registration error -23 [ 422.802851][ T3354] futex_wake_op: syz.0.6488 tries to shift op by -1; fix this program [ 423.024845][ T3381] FAULT_INJECTION: forcing a failure. [ 423.024845][ T3381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.038055][ T3381] CPU: 1 UID: 0 PID: 3381 Comm: syz.3.6495 Not tainted syzkaller #0 PREEMPT(voluntary) [ 423.038124][ T3381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.038135][ T3381] Call Trace: [ 423.038142][ T3381] [ 423.038151][ T3381] __dump_stack+0x1d/0x30 [ 423.038221][ T3381] dump_stack_lvl+0xe8/0x140 [ 423.038302][ T3381] dump_stack+0x15/0x1b [ 423.038348][ T3381] should_fail_ex+0x265/0x280 [ 423.038370][ T3381] should_fail+0xb/0x20 [ 423.038393][ T3381] should_fail_usercopy+0x1a/0x20 [ 423.038428][ T3381] _copy_to_user+0x20/0xa0 [ 423.038454][ T3381] simple_read_from_buffer+0xb5/0x130 [ 423.038549][ T3381] proc_fail_nth_read+0x10e/0x150 [ 423.038596][ T3381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.038619][ T3381] vfs_read+0x1a8/0x770 [ 423.038638][ T3381] ? __rcu_read_unlock+0x4f/0x70 [ 423.038694][ T3381] ? __fget_files+0x184/0x1c0 [ 423.038722][ T3381] ksys_read+0xda/0x1a0 [ 423.038741][ T3381] __x64_sys_read+0x40/0x50 [ 423.038760][ T3381] x64_sys_call+0x27bc/0x2ff0 [ 423.038783][ T3381] do_syscall_64+0xd2/0x200 [ 423.038863][ T3381] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 423.038954][ T3381] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 423.039042][ T3381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.039062][ T3381] RIP: 0033:0x7fc8bed9d5bc [ 423.039076][ T3381] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 423.039123][ T3381] RSP: 002b:00007fc8bd7ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.039141][ T3381] RAX: ffffffffffffffda RBX: 00007fc8befe5fa0 RCX: 00007fc8bed9d5bc [ 423.039154][ T3381] RDX: 000000000000000f RSI: 00007fc8bd7ff0a0 RDI: 0000000000000005 [ 423.039165][ T3381] RBP: 00007fc8bd7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 423.039175][ T3381] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 423.039185][ T3381] R13: 00007fc8befe6038 R14: 00007fc8befe5fa0 R15: 00007ffc457c9318 [ 423.039261][ T3381] [ 423.143217][ T3374] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 423.175267][ T3370] lo speed is unknown, defaulting to 1000 [ 423.239823][ T3374] SELinux: failed to load policy [ 423.278156][ T3370] lo speed is unknown, defaulting to 1000 [ 423.335502][ T3390] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 423.362527][ T3370] chnl_net:caif_netlink_parms(): no params data found [ 423.385626][ T3390] SELinux: failed to load policy [ 423.446027][ T3396] futex_wake_op: syz.5.6501 tries to shift op by -1; fix this program [ 423.548135][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.555885][ T3370] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.563222][ T3370] bridge_slave_0: entered allmulticast mode [ 423.569601][ T3370] bridge_slave_0: entered promiscuous mode [ 423.575733][ T3416] __nla_validate_parse: 12 callbacks suppressed [ 423.575824][ T3416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6508'. [ 423.593681][ T3408] syzkaller0: entered promiscuous mode [ 423.599448][ T3408] syzkaller0: entered allmulticast mode [ 423.611192][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.618279][ T3370] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.625479][ T3370] bridge_slave_1: entered allmulticast mode [ 423.631970][ T3370] bridge_slave_1: entered promiscuous mode [ 423.656394][ T3408] tipc: Started in network mode [ 423.661337][ T3408] tipc: Node identity be98c567a879, cluster identity 4711 [ 423.668465][ T3408] tipc: Enabled bearer , priority 0 [ 423.683866][ T3422] FAULT_INJECTION: forcing a failure. [ 423.683866][ T3422] name failslab, interval 1, probability 0, space 0, times 0 [ 423.696565][ T3422] CPU: 1 UID: 0 PID: 3422 Comm: syz.5.6507 Not tainted syzkaller #0 PREEMPT(voluntary) [ 423.696614][ T3422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.696624][ T3422] Call Trace: [ 423.696630][ T3422] [ 423.696637][ T3422] __dump_stack+0x1d/0x30 [ 423.696655][ T3422] dump_stack_lvl+0xe8/0x140 [ 423.696672][ T3422] dump_stack+0x15/0x1b [ 423.696690][ T3422] should_fail_ex+0x265/0x280 [ 423.696772][ T3422] ? __request_module+0x1c4/0x3e0 [ 423.696795][ T3422] should_failslab+0x8c/0xb0 [ 423.696869][ T3422] ? dev_load+0xa3/0xc0 [ 423.696896][ T3422] __kmalloc_cache_noprof+0x4c/0x320 [ 423.696981][ T3422] ? dev_load+0xa3/0xc0 [ 423.697002][ T3422] __request_module+0x1c4/0x3e0 [ 423.697037][ T3422] dev_load+0xa3/0xc0 [ 423.697068][ T3422] dev_ioctl+0x6f4/0x960 [ 423.697090][ T3422] sock_do_ioctl+0x197/0x220 [ 423.697120][ T3422] sock_ioctl+0x41b/0x610 [ 423.697203][ T3422] ? __pfx_sock_ioctl+0x10/0x10 [ 423.697232][ T3422] __se_sys_ioctl+0xce/0x140 [ 423.697251][ T3422] __x64_sys_ioctl+0x43/0x50 [ 423.697346][ T3422] x64_sys_call+0x1816/0x2ff0 [ 423.697363][ T3422] do_syscall_64+0xd2/0x200 [ 423.697389][ T3422] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 423.697481][ T3422] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 423.697616][ T3422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.697634][ T3422] RIP: 0033:0x7fdd341aeba9 [ 423.697648][ T3422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.697720][ T3422] RSP: 002b:00007fdd32bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.697738][ T3422] RAX: ffffffffffffffda RBX: 00007fdd343f6090 RCX: 00007fdd341aeba9 [ 423.697813][ T3422] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000008 [ 423.697827][ T3422] RBP: 00007fdd32bee090 R08: 0000000000000000 R09: 0000000000000000 [ 423.697933][ T3422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.697947][ T3422] R13: 00007fdd343f6128 R14: 00007fdd343f6090 R15: 00007fff65a9cde8 [ 423.697965][ T3422] [ 423.921152][ T3370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.930524][ T3422] pim6reg1: entered promiscuous mode [ 423.935823][ T3422] pim6reg1: entered allmulticast mode [ 423.944116][ T3406] tipc: Resetting bearer [ 423.952310][ T3406] tipc: Disabling bearer [ 423.970755][ T3370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.013106][ T3370] team0: Port device team_slave_0 added [ 424.029920][ T3370] team0: Port device team_slave_1 added [ 424.068879][ T3429] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 424.082254][ T3435] loop3: detected capacity change from 0 to 512 [ 424.089233][ T3429] SELinux: failed to load policy [ 424.149618][ T3435] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 424.162176][ T3434] futex_wake_op: syz.5.6513 tries to shift op by -1; fix this program [ 424.217706][ T3432] lo speed is unknown, defaulting to 1000 [ 424.218774][ T3440] netlink: 160 bytes leftover after parsing attributes in process `syz.5.6514'. [ 424.223942][ T3432] lo speed is unknown, defaulting to 1000 [ 424.233411][ T3370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.245934][ T3370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.271844][ T3370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.282748][ T3435] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.6512: corrupted in-inode xattr: overlapping e_value [ 424.322253][ T3435] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6512: couldn't read orphan inode 15 (err -117) [ 424.338066][ T3370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.345175][ T3370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.371106][ T3370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.410794][ T3435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.435892][ T3451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6518'. [ 424.502926][T13283] bond0 (unregistering): Released all slaves [ 424.638581][T13283] tipc: Left network mode [ 424.645160][ T3370] hsr_slave_0: entered promiscuous mode [ 424.672152][ T3370] hsr_slave_1: entered promiscuous mode [ 424.699661][ T3370] debugfs: 'hsr0' already exists in 'hsr' [ 424.705425][ T3370] Cannot create hsr debugfs directory [ 424.719651][T13283] hsr_slave_0: left promiscuous mode [ 424.729672][ T1741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.744576][T13283] hsr_slave_1: left promiscuous mode [ 424.820833][ T3472] loop5: detected capacity change from 0 to 1024 [ 424.834032][ T3464] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 424.840034][ T3472] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 424.849347][ T3464] SELinux: failed to load policy [ 424.874406][ T3472] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.6527: lblock 1 mapped to illegal pblock 1 (length 1) [ 424.916036][ T3472] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.6527: Failed to acquire dquot type 0 [ 424.989830][ T3472] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.6527: Freeing blocks not in datazone - block = 0, count = 4096 [ 425.032630][ T3472] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.6527: Invalid inode bitmap blk 0 in block_group 0 [ 425.053183][T13293] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 425.075097][T13293] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:30: Failed to release dquot type 0 [ 425.101391][ T3472] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 425.125614][ T3472] EXT4-fs (loop5): 1 orphan inode deleted [ 425.139903][ T3472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.168296][ T3480] lo speed is unknown, defaulting to 1000 [ 425.176575][ T3480] lo speed is unknown, defaulting to 1000 [ 425.189907][ T3472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.429282][ T3505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=3505 comm=syz.0.6541 [ 425.457555][ T3514] loop2: detected capacity change from 0 to 1024 [ 425.469206][ T3370] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 425.482429][ T3370] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.491313][ T3370] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.498116][ T3514] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 425.514074][ T3370] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 425.533482][ T3514] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.6543: lblock 1 mapped to illegal pblock 1 (length 1) [ 425.545566][ T3507] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 425.557484][ T3514] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.6543: Failed to acquire dquot type 0 [ 425.572284][ T3520] netlink: 'syz.0.6545': attribute type 1 has an invalid length. [ 425.578139][ T3514] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.6543: Freeing blocks not in datazone - block = 0, count = 4096 [ 425.580587][ T3507] SELinux: failed to load policy [ 425.594816][ T3514] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.6543: Invalid inode bitmap blk 0 in block_group 0 [ 425.613676][T13287] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 425.628507][ T3514] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 425.629564][T13287] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:24: Failed to release dquot type 0 [ 425.651740][ T3514] EXT4-fs (loop2): 1 orphan inode deleted [ 425.657644][ T3520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.657899][ T3514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.693317][ T3524] bond1: (slave geneve2): making interface the new active one [ 425.705672][ T3514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.706624][ T3524] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 425.756131][ T3520] netlink: 'syz.0.6545': attribute type 27 has an invalid length. [ 425.766850][ T3534] lo speed is unknown, defaulting to 1000 [ 425.773681][ T3534] lo speed is unknown, defaulting to 1000 [ 425.776078][ T3370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.792035][ T3370] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.825990][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.833231][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.875443][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.887925][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.930980][ T3666] lo speed is unknown, defaulting to 1000 [ 425.936894][ T3666] syz2: Port: 1 Link DOWN [ 425.942513][ T3370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.953095][ T3370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.967461][T13291] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.977968][T13291] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.987860][T13283] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.994974][T13283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.003817][T13283] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.010891][T13283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.024922][ T3547] syzkaller0: entered promiscuous mode [ 426.030911][ T3547] syzkaller0: entered allmulticast mode [ 426.042152][T13291] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.062560][ T3547] tipc: Enabled bearer , priority 0 [ 426.086836][T13291] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.089518][ T3553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6555'. [ 426.105900][ T3546] tipc: Resetting bearer [ 426.117297][ T3546] tipc: Disabling bearer [ 426.136826][ T3370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.161125][ T3553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6555'. [ 426.187245][ T3564] lo speed is unknown, defaulting to 1000 [ 426.206990][ T3568] FAULT_INJECTION: forcing a failure. [ 426.206990][ T3568] name failslab, interval 1, probability 0, space 0, times 0 [ 426.211722][ T3564] lo speed is unknown, defaulting to 1000 [ 426.220368][ T3568] CPU: 0 UID: 0 PID: 3568 Comm: syz.0.6557 Not tainted syzkaller #0 PREEMPT(voluntary) [ 426.220395][ T3568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.220408][ T3568] Call Trace: [ 426.220414][ T3568] [ 426.220422][ T3568] __dump_stack+0x1d/0x30 [ 426.220444][ T3568] dump_stack_lvl+0xe8/0x140 [ 426.220503][ T3568] dump_stack+0x15/0x1b [ 426.220519][ T3568] should_fail_ex+0x265/0x280 [ 426.220565][ T3568] ? request_threaded_irq+0x1ad/0x2c0 [ 426.220590][ T3568] should_failslab+0x8c/0xb0 [ 426.220614][ T3568] __kmalloc_cache_noprof+0x4c/0x320 [ 426.220643][ T3568] ? __pfx_serial8250_interrupt+0x10/0x10 [ 426.220745][ T3568] request_threaded_irq+0x1ad/0x2c0 [ 426.220786][ T3568] ? __pfx_serial8250_interrupt+0x10/0x10 [ 426.220880][ T3568] univ8250_setup_irq+0x2b0/0x310 [ 426.220910][ T3568] serial8250_do_startup+0xa40/0x1b10 [ 426.220937][ T3568] serial8250_startup+0x41/0x50 [ 426.220962][ T3568] uart_startup+0x468/0x8e0 [ 426.220998][ T3568] uart_ioctl+0xba1/0xe80 [ 426.221019][ T3568] ? do_vfs_ioctl+0x866/0xe10 [ 426.221066][ T3568] ? tty_jobctrl_ioctl+0x29e/0x810 [ 426.221101][ T3568] tty_ioctl+0x7db/0xb80 [ 426.221144][ T3568] ? __pfx_tty_ioctl+0x10/0x10 [ 426.221163][ T3568] __se_sys_ioctl+0xce/0x140 [ 426.221182][ T3568] __x64_sys_ioctl+0x43/0x50 [ 426.221199][ T3568] x64_sys_call+0x1816/0x2ff0 [ 426.221220][ T3568] do_syscall_64+0xd2/0x200 [ 426.221321][ T3568] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 426.221344][ T3568] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 426.221372][ T3568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.221428][ T3568] RIP: 0033:0x7f6457a4eba9 [ 426.221444][ T3568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.221461][ T3568] RSP: 002b:00007f64564af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.221480][ T3568] RAX: ffffffffffffffda RBX: 00007f6457c95fa0 RCX: 00007f6457a4eba9 [ 426.221493][ T3568] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000006 [ 426.221540][ T3568] RBP: 00007f64564af090 R08: 0000000000000000 R09: 0000000000000000 [ 426.221552][ T3568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.221564][ T3568] R13: 00007f6457c96038 R14: 00007f6457c95fa0 R15: 00007ffd1e2d9338 [ 426.221582][ T3568] [ 426.413627][ T3370] veth0_vlan: entered promiscuous mode [ 426.419976][ T3370] veth1_vlan: entered promiscuous mode [ 426.438052][ T3570] loop5: detected capacity change from 0 to 512 [ 426.465548][ T3370] veth0_macvtap: entered promiscuous mode [ 426.502089][ T3570] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 426.519518][ T3370] veth1_macvtap: entered promiscuous mode [ 426.532621][ T3570] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.6556: corrupted in-inode xattr: overlapping e_value [ 426.599566][ T3585] syzkaller0: entered promiscuous mode [ 426.599749][ T3570] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6556: couldn't read orphan inode 15 (err -117) [ 426.605115][ T3585] syzkaller0: entered allmulticast mode [ 426.622085][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 426.622114][ T29] audit: type=1400 audit(1757634109.267:25662): avc: denied { mount } for pid=3579 comm="syz.2.6559" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 426.652700][ T29] audit: type=1400 audit(1757634109.267:25663): avc: denied { cpu } for pid=3579 comm="syz.2.6559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 426.672649][ T29] audit: type=1400 audit(1757634109.287:25664): avc: denied { unmount } for pid=3579 comm="syz.2.6559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 426.695425][ T3570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.708269][ T3582] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 426.718036][ T3582] SELinux: failed to load policy [ 426.742044][ T3589] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6562'. [ 426.754497][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6562'. [ 426.756565][ T3370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.788242][ T29] audit: type=1326 audit(1757634109.447:25665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3563 comm="syz.5.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 426.812389][ T29] audit: type=1326 audit(1757634109.447:25666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3563 comm="syz.5.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 426.835902][ T29] audit: type=1326 audit(1757634109.447:25667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3563 comm="syz.5.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 426.860011][ T29] audit: type=1326 audit(1757634109.447:25668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3563 comm="syz.5.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 426.883512][ T29] audit: type=1326 audit(1757634109.447:25669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3563 comm="syz.5.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 426.884618][ T3370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.907617][ T29] audit: type=1326 audit(1757634109.447:25670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3563 comm="syz.5.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 426.938186][ T29] audit: type=1326 audit(1757634109.447:25671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3563 comm="syz.5.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd341aeba9 code=0x7ffc0000 [ 426.943094][T13293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.991833][T13293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.018127][T13293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.029224][ T812] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.057086][T13293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.060878][ T3593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6564'. [ 427.103517][ T3609] lo speed is unknown, defaulting to 1000 [ 427.109913][ T3609] lo speed is unknown, defaulting to 1000 [ 427.131048][ T3613] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 427.163618][ T3609] siw: device registration error -23 [ 427.167912][ T3618] loop4: detected capacity change from 0 to 2048 [ 427.184459][ T3618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.329831][ T3370] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.448581][ T3659] syz.3.6576 (3659) used obsolete PPPIOCDETACH ioctl [ 427.455801][ T3659] FAULT_INJECTION: forcing a failure. [ 427.455801][ T3659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.484909][ T3659] CPU: 0 UID: 0 PID: 3659 Comm: syz.3.6576 Not tainted syzkaller #0 PREEMPT(voluntary) [ 427.484959][ T3659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.484971][ T3659] Call Trace: [ 427.484976][ T3659] [ 427.484982][ T3659] __dump_stack+0x1d/0x30 [ 427.485000][ T3659] dump_stack_lvl+0xe8/0x140 [ 427.485091][ T3659] dump_stack+0x15/0x1b [ 427.485108][ T3659] should_fail_ex+0x265/0x280 [ 427.485132][ T3659] should_fail+0xb/0x20 [ 427.485152][ T3659] should_fail_usercopy+0x1a/0x20 [ 427.485222][ T3659] _copy_to_user+0x20/0xa0 [ 427.485253][ T3659] simple_read_from_buffer+0xb5/0x130 [ 427.485276][ T3659] proc_fail_nth_read+0x10e/0x150 [ 427.485360][ T3659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.485383][ T3659] vfs_read+0x1a8/0x770 [ 427.485403][ T3659] ? clockevents_program_event+0x240/0x4e0 [ 427.485504][ T3659] ? __rcu_read_unlock+0x4f/0x70 [ 427.485526][ T3659] ? __fget_files+0x184/0x1c0 [ 427.485551][ T3659] ksys_read+0xda/0x1a0 [ 427.485575][ T3659] __x64_sys_read+0x40/0x50 [ 427.485636][ T3659] x64_sys_call+0x27bc/0x2ff0 [ 427.485654][ T3659] do_syscall_64+0xd2/0x200 [ 427.485680][ T3659] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 427.485707][ T3659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.485735][ T3659] RIP: 0033:0x7fc8bed9d5bc [ 427.485751][ T3659] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 427.485769][ T3659] RSP: 002b:00007fc8bd7ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 427.485789][ T3659] RAX: ffffffffffffffda RBX: 00007fc8befe5fa0 RCX: 00007fc8bed9d5bc [ 427.485800][ T3659] RDX: 000000000000000f RSI: 00007fc8bd7ff0a0 RDI: 0000000000000005 [ 427.485810][ T3659] RBP: 00007fc8bd7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 427.485824][ T3659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.485888][ T3659] R13: 00007fc8befe6038 R14: 00007fc8befe5fa0 R15: 00007ffc457c9318 [ 427.485908][ T3659] [ 427.746813][ T3711] ================================================================== [ 427.754914][ T3711] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 427.762465][ T3711] [ 427.764772][ T3711] write to 0xffff88810387c308 of 8 bytes by task 3708 on cpu 0: [ 427.772382][ T3711] mas_wr_store_entry+0x1581/0x2b50 [ 427.777570][ T3711] mas_store_prealloc+0x74d/0x9e0 [ 427.782588][ T3711] commit_merge+0x6a5/0x730 [ 427.787080][ T3711] vma_expand+0x220/0x320 [ 427.791397][ T3711] vma_merge_new_range+0x296/0x310 [ 427.796493][ T3711] mmap_region+0xa59/0x1630 [ 427.800983][ T3711] do_mmap+0x9b3/0xbe0 [ 427.805046][ T3711] vm_mmap_pgoff+0x17a/0x2e0 [ 427.809627][ T3711] ksys_mmap_pgoff+0xc2/0x310 [ 427.814285][ T3711] x64_sys_call+0x14a3/0x2ff0 [ 427.818949][ T3711] do_syscall_64+0xd2/0x200 [ 427.823451][ T3711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.829329][ T3711] [ 427.831636][ T3711] read to 0xffff88810387c308 of 8 bytes by task 3711 on cpu 1: [ 427.839159][ T3711] mas_state_walk+0x28f/0x650 [ 427.843827][ T3711] mas_walk+0x60/0x150 [ 427.847888][ T3711] lock_vma_under_rcu+0x8d/0x160 [ 427.852818][ T3711] do_user_addr_fault+0x233/0x1090 [ 427.857923][ T3711] exc_page_fault+0x62/0xa0 [ 427.862418][ T3711] asm_exc_page_fault+0x26/0x30 [ 427.867253][ T3711] [ 427.869559][ T3711] value changed: 0x00007fc8b53bdfff -> 0xffff88810387c108 [ 427.876646][ T3711] [ 427.878951][ T3711] Reported by Kernel Concurrency Sanitizer on: [ 427.885079][ T3711] CPU: 1 UID: 0 PID: 3711 Comm: syz.3.6577 Not tainted syzkaller #0 PREEMPT(voluntary) [ 427.894782][ T3711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.904818][ T3711] ================================================================== [ 427.923958][ T3709] loop3: detected capacity change from 0 to 1024 [ 427.953466][ T3709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.972898][ T3709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.