last executing test programs: 2.047454345s ago: executing program 1 (id=303): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) io_getevents(0x0, 0xffd, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095", @ANYRES32=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x2000000008001}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc0000000001050500000000000000000a0000053c0002802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb140004002001000000000000000000000000000108000740000000000800084000000000080015"], 0xdc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 1.947391706s ago: executing program 1 (id=304): ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f0000000180)={&(0x7f0000000140)=""/61, 0x3d}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0xfffffff8, 0x5, 0x9, 0x0, 0x0}) capset(&(0x7f0000000500)={0x20080522, r0}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x6, 0x7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x5, 0x4, 0xfffffff, 0x1, r1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0x23}], 0x1) r5 = fcntl$dupfd(r4, 0x406, r4) write$sndseq(r5, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @tick=0xb, {0xb2, 0xb8}, {0x3, 0x2}, @result={0x10, 0x43b53}}, {0x0, 0x0, 0xfd, 0x4, @time={0x8, 0x8}, {0x9, 0x4}, {0xc}, @result={0x8, 0x2}}], 0x38) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000000)={'pimreg0\x00', @multicast}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1a24ca8125c89822de010073797a300000000008000240000000032c000000030a01030000e6ff00020000000900010073797a30000000000900030073797a320000000014000000110001000000"], 0x7c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000000800070000000000080002"], 0x34}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r10) getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYRES16=r7, @ANYBLOB="072e2a20f840429a8b824577978fbd5f1fe5c6343e36c67c8a47b14070ab032a1c0974ab9285f3b844827cdaa549b85d9ea5a0c63c1af652cade598c160e353fde0f939f2e467da16059", @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="771159f6", @ANYRES16=r12, @ANYBLOB="00012bbd7000ffdbdf255e0000000c009900010000004c0000000800a0000c000000050018010c00000008002201c202000008009f00040000000800a10021000000080027000300000008002700030000000800260002170000"], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x80c0) 1.613122958s ago: executing program 2 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffff2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000340)={0xeec4, 0x1, [{0x6}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000240), 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000e1ac00"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000000085bf0901ff0000000055000000000000009500000000000000bf910000000000288f9bf456c79387008500000084000000b700000000000000950000000000200000000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0xfffffffe, 0x160}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r8, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r11, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r12 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/19, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x34}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r12, 0x2216, 0x72e9, 0x1c, 0x0, 0xfffffffffffffd93) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') 1.34315192s ago: executing program 2 (id=316): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 1.278814441s ago: executing program 2 (id=318): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close_range(r1, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utime(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000010000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000a80)=0x4) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000000c0)=0x550b6c) read(r7, 0x0, 0x0) 1.048810802s ago: executing program 1 (id=323): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xff}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x800, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x0, 0xf00}, {}, {0x3, 0xfd}, {0xfffe, 0xd, 0x0, 0x10000000}, {}, {0x6, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x6e23, 0x20006, @empty, 0x6}}, 0x4, 0x2, 0x0, 0x5, 0x392, 0x97}, 0x9c) r4 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f0000000580)={[{@bsdgroups}, {@jqfmt_vfsv1}], [{@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x38, 0x0, 0x66, 0x63, 0xd, 0x0, 0x39], 0x2d, [0x36, 0x65, 0x64, 0x30], 0x2d, [0x64, 0x30, 0x62, 0x65], 0x2d, [0x65, 0x65, 0x66, 0x64], 0x2d, [0x31, 0x31, 0x34, 0x36, 0x31, 0x65, 0x36, 0x32]}}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '\x00'}}, {@flag='mand'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'bsdgroups'}}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0xb6fbc0a97f5e1276) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000040)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006", @ANYRESDEC=r5, @ANYRES16=r7, @ANYRES32, @ANYRESOCT=r2], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff0000000000000000000000000000000051d0886fe0be0af0efcfd57bc657d2f730e6034fefb67569940698893ffdcad1cad4d23934a5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_io_uring_setup(0x3fa6, &(0x7f0000000180)={0x0, 0x3256, 0x20, 0x3, 0xb8}, &(0x7f0000000000), &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r10, 0x0, 0x7fffffffffffffff}, 0x18) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x11}, 0x1c) close_range(r11, 0xffffffffffffffff, 0x0) 1.011620323s ago: executing program 3 (id=325): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close_range(r1, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utime(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000010000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000000c0)=0x550b6c) 936.192364ms ago: executing program 1 (id=326): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) r4 = memfd_create(&(0x7f0000000200)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xd6\x06\a\x0e\xfd\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0_o\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9s\xcb\x89\xf2\xf6a\xcb[\xcc+\x1a`.\x00\xcf\x1c\x14\x1d$\x98\xf3\xed\x1cA\xc1+0\x87\xd1\xf2\xc6\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1cO5\xce9\xf9\x02h\x0e%\xa1\x11COf\xed[z\xc6\xc1:L\xdb\xac\x84Ru=E\xf7\x94\xae\x18v\v\xcc\xcd\b\xa5\x19\xb5idBc\xf1S\x93\x0f\x82me\x9a\xb8\a\xff\x91\xed\x9d|\xa7D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00', 0x5) fsetxattr$security_selinux(r4, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x24000840) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) munlock(&(0x7f00006db000/0x3000)=nil, 0x3000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x890008, &(0x7f00000001c0), 0xff, 0x548, &(0x7f0000001300)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r6, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20c28, 0x0, 0x3, 0x0, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10001) 671.468406ms ago: executing program 1 (id=328): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close_range(r1, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utime(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000010000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000a80)=0x4) 647.674616ms ago: executing program 3 (id=329): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200001, 0xfffffbff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 559.435266ms ago: executing program 0 (id=333): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SCHED_CORE(0x3d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9e51, 0x1c, 0x0, 0x0, @ib={0x1b, 0x0, 0x1ff, {"90ad7cb84557d79bd955f8e8f01b1d40"}, 0x5, 0x3ff, 0xf}, @ib={0x1b, 0x0, 0x40000003, {"78000002850000002000"}, 0x0, 0x7, 0xe}}}, 0x118) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000540)=0x2000204, 0x300) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) munlockall() 558.538826ms ago: executing program 1 (id=334): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a0531030000"], 0x0) fadvise64(r0, 0x807f, 0x1000000, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 512.583687ms ago: executing program 4 (id=335): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0c00000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500001b0100000095e9ae13e339c3490dd12c7928ce2a178b8b951c7dadf1d99684b1481a32fd7471bac39408812b0cde5f8fd5bd17e281602250f770211444ec7be9bd0539dfe71dbe16052dace4b230e13bc176c3c9eb8925862ac7a5b79ba3879e60ea3d9b26bc54d3fe5d09393686d27c74613e8550fe2e7a89cd26ae366e6f4153aba877a71b6f62b866bb5b154bd7b30501aa002458c7688cb054094f5835e797208a9498bcc8956c5e97201038cbb88a10b4b25aa689eba4389cf6015f9ce5154377d40cee"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000e4000080000000000000bf7953a63d318ebd1b0c2542a0582bec1282e6c8b6bfc0190800000006dd713aaa4dee8d80", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860058b928b44b89c934fb000095010036cf0000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x6}, 0x18) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000004c0)={'vlan0\x00', &(0x7f0000002080)=@ethtool_perm_addr={0x20, 0xfe0, "d19a521137c34a65faefe0cb3459f5d0a57a7a62578bb7a74117d876d9c16191aacb093a01530713d3ada190b728985e02877e4add395e44afc03283ff13474c3ee3d3da7cc4f0ecd275f4c73e843d538244ed9bd44b0908fde64d6668577af0cf28ab1f679f4ab665bde29601ba9afe7d579e0eb2e07436e03b3b39153130ccb4d9377d563e158baae156930f53440b5b1530b461643be295d4249eb0ab6f50831ccb4ea70d9705085345853c38220bc67980b4b149a8a7fc578f39b992dde869c995ba7d4d4e72f0587bdc78bfccb907f55fc0b57d2e3e0cb7c532fbce9646bfb4cdf1e9c4d0bdbddba5f6ea21186bea451ecc7396ee7ce41d24859fcc2b73d04842c51634ff77ce7d80e84cbbd906bd43f81c236b6683f2acb5f175bd3d960cf478755f199dde5146fe8c296726a27f5c1619595d218030a76281a4ad00a1bd3c556d19fe0ad9de9074d9cc6dd299c44599afee879da264056026bdb06414cc449d1ac281c785299043756011cfedbda07d564a17a9810e3762bb846defa6216e7361de143a81e9b731898b528bd75a2364f8d412bdc9c630855c3b19dfb1d425ee867b8146bc0bcc0c73f1ad18b516a3e0acba6a9230cbc1a0361b4c8451746bf22484767b1844f116bb7120f48661f1bb67ec15ccaf68b3c7c111a0f18fd69f2ed30a0f18b2b5bb8b714002534b7f64e55e2e6075450df382bdee7412e09e8e1ed9efef8dd3642ef8894101a2754f6f0f628bafad755f6d9090d43991ceeee8e43f22b0dc90f35acd2915a1d2a4f42c104f50126eb37d555d1a725a5757ef624154b8991cb11a14c6220404f69be804c4662ef794fc12bb37b29eb8a5a3331656d07239ed989145d1947fb2800a8e46a7f4a57929089c02061c36c1a27ab8c7da7fa9522a7c2eafc819e41dcbf22d9fb9509a3c58ea411b3a319cd39ec9bb2dfee0bdc5ff903ebbf8c4e0786d61f6c2c0c2d2848943a3583274cb6c9ee7dec1c3484b0521f8eeae58a1f0b54a01a91279a404f9ad5c537f2b2beda1eda85f986e12a501a07790be47d71456ab4ca507548f3846f1ae86d95a3b1cb052d7684ab28c6bc5667e995278bef5117fd95a1e42cf229897892bf468b21c1fe90c3ee42a8db0d9229dceda4a094fa0f299c44ea999bc51efe847b88dc8f7abe79159c21efa1420d02b8e224c483c8ac6419d0e2fb4eaa61501cf3e9a65ee2f78c7e42bcada9b2e6e637a93a3846e78bf62e72c327a3bd9bcdf4446364652bc488dff07bb060d43577a4f9a8e30845c6422d6cfe034dccbd25a2490306cc7e5be892f830cd24ea516367ab5f4079e6e6c620f54dded675a6764959ee1b574458d39a693dc82449909b3d4e6cd92869a595b875b180e60f5862f305069dd0ee05b6b701c7458b93f7a97138509b67d787847ccc391432463ca67a7161a82f1f3087f72938dcf107e02fc7a934c4be93565697b49f76df7fdf5313f3989930a7962f4444c43c7469eb0dc7b41b0d9d311a54afdfa4c16a27c898b51959c5ca94030c839f221b4a8d503a4a3d32acecb4af667f53e204c5a8966de1e11df3bbc4f6b64d0bce81ea478797a2fc7c8db6691a4c737f38d558a48a4cdd00b2377bd0047ae4bcb6b552a1769af3a11704ce724613dba0f560c197cf6d4d0acb5018bdbb35384172399cef97cec6feab23471be80a78df3e93bcae3a129f1b26793bf44129f796625502654f3f8a966336167f54f1b804d8882fc6da1a6b5db0303542914112262dac1608a71b5dff86a4dfadad2880a296d0f951129bbb34eb6a5891c423475caa34f0824f30822a0dbfafa5e55fe4133565f539ac2a654ad0817b8871c432b3e91427318f5e4df98da7948557a0c06bef147c0f3fa045ba66d9d7ac1b904e36c0cf11742f31a4a986db1b2558dd6d08d825afa99838a7dfd0e477e1d225fb1a8cb8b12c007ff3097d0d44c3c28c582138b0bb73b01a56f977ae4fb4f9de3ac61803d2fade672a81b147318af990bfcf46427a61900b167c7da67f7cfb6baffd8096b2ceaa785f71cf4f28b511d5162b3cc0e40e4fb4c2b0950a164e98564d358cd856939461cbc9536d60b7fa6f9ccabe06129e234373fe0ac861db0834e233c5496c553e8f041430c8860b84beae00397b78c33e596450f653233b963010c17fcbbb4ab48a470a8555514f67f528853b80baa708888a704554f3f8798fb921eb59bf85d4d978d223f8fb211e2a39f434df237f94825344975e959a4c1eb287a16aa873b8b0e8a645dea16f30986c875af3155e2aa9b30641a5ea5bbd400695d5c93d9fd96fd1dca49f77ce4879da8a815c28807f24638ba2bda4eaf306d12c6dad2a967177ce61f704df5a09a9addf87822bab83838074577bdb44878d3fe1ea90dfda9bea3849296a5b2ee36abf9202464f492c8c697d657b141f7b5ed0d4bd27086b95f2a13f3e5b63208b1bc5860ad58ce0d061727e00df4d7522df2c537010b7993926e49af2c94ab7fed3e5d79486d12bc28b89df6449764130cd002049c65b109205480f744d6f0b360f1f5f652c69e56d53a56d83b15992796f8b8aea3de609d6932efdb65bd458fa319481aa0b2089a030272902694b8c72205067a05ad7ca9af271e9f976fc32c2dcc149689abbcb0f63e5d410ae70759277e516cc4b85548eacd3b0b5f15bdfab91633c0bdb02e9ba3ebaa25e2017f9827b3dc39eb88db7eecd2df13337430c8bb362b040d9bc6a46c732353bdeb0eafa57e06eaea9065aed382d075f62912421e48608178a3a780333ca193d914c3d44de853c5ab3625fb91f95d67aba4ed6abd3800995689ac875fcec28dd7e006cfeb5d1ed89edd05b580af323b5325a4705e29e72a5fa7257944f93624172364613aed1667e47457b9411fd492e9d0e981656f84ce12dc4aac554b5ed199a8c075183449c37bbcffe57291cf8daf4694402162a4990fccc195d4a8129c61836ec9ddc6569cb16505f08b44467e19864d04b203089d3291e1623ff43783d2ca29272e39e311513e57055467e6b3961fdd86acb0d109786e28ded192d1915b9f9c56f64c34e95bb60d7b32310deab49513613cc7f6292b238224a3211b54fc8d18f1b3e4b142af94d651b3f6d8803ed4de17356ef3b61b3f720f4a03e7ebd39be4e74288a6bd1551a03d7e5107eb8a55f84b71f5916987343e1742cab38841f9531dd7cffedb6b00f1c40445ee33dbcd81a16ac95696fb59963ded88f5a9f9076e1c445d4790375c51e41dc98cccc9c9119b0d330d3bcbd907207fd8f62c432ac89f6f72ba563e9896a9d7693e4387cbb171327094f71b49c906fc9971dc818699c132e69aa5a5885f53041e583e310d035c073b409e0ac3212ea8283b8b167d9a59d4b407a402e39a01b7c0ec7c5ac27e8a18232f35d7f0942c3fab4021c83046737e655e74e7d80b9110c16d374ea12e40703f66d59b6450117da5c2337f6d5d35674241fbd7a8cc314bc2c0b3c4c0b945bdc87a3bee6b45cd8f1038e367452e059687dbb86e70885ddd860f470091969efe7549636e43ed44282977e9ed0aee20fe4d2f7df263b22aea21dde6fc71c20f5403d30c7631a45e372899ac1ee97d271f71b34126610769c0bdfdebd30b498d65a4dfbf33dfdd8520be5c65e18d9d5e8461f8b972f1d59819dd3fa2d0319585d86f0b10e0eb20f57899f616248e9b9dcf504933d520fe4ab62ed5c50225f7f8eb1a10f94ccb02a44d3a426f62956e3d491ea32513627d634e7dbb245c00ffffc858831a804c90f04d159185251b3896be62e7aaf1d7d607be0f38ef685d7067d522fe6e41a86ee03a225dcfbbbc6b0c07c6db173aa154dc55c423dbbacc7110396fdf738db80b0c268345927dede8e87ea0d9cc7946719a3475c3ce0244ccdab568905327974e59efae176be69de78cea335ea51a7cbf1f7536132c7f006c2ae7f5775aa07487564c0676da74156376f4064682a14d83585510a8d780fd01b3961327cf809970516da8a9d187b8f38c150b62f511d41d5bd627aae7bbdad80f5415ca80edb1081763cc65819c244f6c55d74b7611d2af253b66cdd2e4a62f066626e7448c6b5eecd2abd8cecc70423b5532aa48569eaf1f6dd9070c3874307b7157596ffe1a82fc3c44aaff4f249f6e7182afc2b217f667598c591950d68c6b07535902f4bbded2a030ecba75011fa34d6fc8a4f6a1fc72ff92618edcbe1872484864e6db5ccffd04904f3a58542546c54114e25728bac2cd12ffa055fb77000cadd6b1bd0e73b04674978cff49b84b3f14dd782c32285f1b5de6660d15de57cb5108fa096b8d3dc4386a929adc35d36d29f14e036da6d3180cb93a9b2d5a203f6e4135eee71a12688df4101daf02983a71cc964009f64ed87defaa621e57f1015f6fd138fe1945844e1197f1a9fad65d8392bce3a0dcf33941b362f35e34a46f28e4c1a8b630e64dd412ebbb61ce4f771a670ea594d41faacf97abda16fda7e034f2de273323d0deca3ee999d6d3b5dd6910cc60d3b39bd97ce77b30e4a977de7c9390add30c6e0150a27ea7ec735cbb50862e23f305940176f5eedf6df90abd5e69146ff94549ad4102c4244bfc6290eb6d784858c01d7bc0b5ac3a5753ee9e485b952fe71807d75e9725bb8e923662f358c888931532c07e64ffe96fb08e6d3e821f219a136281782da2227821e51da769439b5e47e201e813245e0bec6f424d9d7e060e7acc565e9f36278316d8c1183bbb7b5f824f882c5bf754ea89b800cac4f32d8e63e6fcefe8d5484aab412560048a4df81d8f7c987a90975dd4e2cbd4de33316bf628f9af1b277756d528aab6ab850f2b0e85f7f6ac93e9bd1564639fe9e8a716e641c753a01e64cea213b3432903b2458efaf788b1fac372e627caa7eafe7d69eb16673ffd839f8051fe4e29f3a4625cf947d4ce228725d7f2da82a295139a81dfd83fd944c25e21a84f3d68a7bfb21f18b322b54e3b3855c76db9ea5a6c92ca55fc6225bf05d0d9c5c4714e0a0eac254f71933178e8fb48f99989bcf54c836665b563ad38da010913fefd35e379c01d0c13f5e30709613beb6a2d828d449f6b5b4c7351236c788452b2b0572ff4a6c0d147de56fef5329f84228697caf8c9ef10c8c31fb85a400d35c9ccde43f02656ee7e43e355f6eb26a276932d5a0ef5da35e2c7e62b146dcd30420bbd22e1a1d73e0f35b2e9b755d2771496eceb9a6d293d7713eb06ca42ec554fd52f3629f19e64bebfb6fe033dbbbfa47223146201cb8b1348091fa3a3be4943aa5d64ce9e5a5c24571ba2f1e2d324c12732eb9b5a9343471be7badde9f3276af5eab03aa86ea089a7d7851fd95cc988842f46cff3d6eff67d619ee8110b0aa4d7cab6ba4046652e794aa0f0e97a51a44104deb7e2b89351c136af1fd46fa4b4e910eb184089fb672c589b1847fb13d15d674a52720666ba54f7a72c555d9e7b559bfad69d6089d70c28fd5dc4cb72f1fa0cec5edcbfc8a9a6767bba83c5d5e715de5f528bde21d147281ea2caf19ba3074ffd648b3ab96ff77085786f0d0cc01efc70f66c3cbd37cbda0a89205a3c738fa83b29f01ba4956ed5e9113a6baa382dd1a767faef78c6a36ee25bb4cca4561a9a2363b8558461aea88c464de8fce50477ad615b1f5b07abc399b60078a0151888919539958255d473431948b7fccf77d3b8fac769193a3dc87ba49bfe578a09ded258518eb067dd48f5e9ed7b6f7dccae"}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x24, @short={0x2, 0x0, 0xffff}}, 0x3, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) read$msr(0xffffffffffffffff, &(0x7f00000030c0)=""/4096, 0x1000) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r14, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) r15 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_FREE_STREAMS(r15, 0x8008551d, &(0x7f0000000340)=ANY=[@ANYBLOB="cdc5000000ff"]) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@empty, {}, {0xfffffffffffffffd, 0x7, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) 501.830117ms ago: executing program 0 (id=336): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) ustat(0x400, &(0x7f00000003c0)) 497.997707ms ago: executing program 3 (id=337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffff2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000340)={0xeec4, 0x1, [{0x6}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000240), 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000e1ac00"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000000085bf0901ff0000000055000000000000009500000000000000bf910000000000288f9bf456c79387008500000084000000b700000000000000950000000000200000000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0xfffffffe, 0x160}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r8, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r11, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/19, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x34}}, 0x0) 455.748287ms ago: executing program 0 (id=338): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_create_resource$binfmt(0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 434.693017ms ago: executing program 4 (id=339): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SCHED_CORE(0x3d, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000f00)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9e51, 0x1c, 0x0, 0x0, @ib={0x1b, 0x0, 0x1ff, {"90ad7cb84557d79bd955f8e8f01b1d40"}, 0x5, 0x3ff, 0xf}, @ib={0x1b, 0x0, 0x40000003, {"78000002850000002000"}, 0x0, 0x7, 0xe}}}, 0x118) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000540)=0x2000204, 0x300) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) munlockall() 338.125208ms ago: executing program 4 (id=340): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3={0x3000000, [{}, {0x40000}]}, 0x18, 0x1) 324.859718ms ago: executing program 2 (id=341): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1a00400, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e2, &(0x7f0000001740)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) open(&(0x7f0000000300)='./file2\x00', 0x101042, 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800110129bd7000000000000a008000050000080020000008000400", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x80, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x3}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4000090) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r9], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 254.955789ms ago: executing program 4 (id=342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd6000050000103afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) 222.813469ms ago: executing program 4 (id=343): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 204.300209ms ago: executing program 3 (id=344): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 191.568119ms ago: executing program 0 (id=345): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3={0x3000000, [{}, {0x40000}]}, 0x18, 0x1) 137.198189ms ago: executing program 2 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r6, 0x0, 0x7}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r7, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x13, @void}, 0x10) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x315f) r9 = socket$unix(0x1, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r10}, &(0x7f0000000400), &(0x7f00000005c0)=r11}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c00)='ext4_ext_remove_space_done\x00', r11, 0x0, 0x9}, 0xfffffffffffffe91) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 134.10507ms ago: executing program 0 (id=347): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200001, 0xfffffbff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 80.98945ms ago: executing program 4 (id=348): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000000000106a0531030000"], 0x0) fadvise64(r0, 0x807f, 0x1000000, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 80.58787ms ago: executing program 3 (id=349): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000e4000080000000000000bf7953a63d318ebd1b0c2542a0582bec1282e6c8b6bfc0190800000006dd713aaa4dee8d80", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860058b928b44b89c934fb000095010036cf0000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x6}, 0x18) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000004c0)={'vlan0\x00', &(0x7f0000002080)=@ethtool_perm_addr={0x20, 0xfe0, "d19a521137c34a65faefe0cb3459f5d0a57a7a62578bb7a74117d876d9c16191aacb093a01530713d3ada190b728985e02877e4add395e44afc03283ff13474c3ee3d3da7cc4f0ecd275f4c73e843d538244ed9bd44b0908fde64d6668577af0cf28ab1f679f4ab665bde29601ba9afe7d579e0eb2e07436e03b3b39153130ccb4d9377d563e158baae156930f53440b5b1530b461643be295d4249eb0ab6f50831ccb4ea70d9705085345853c38220bc67980b4b149a8a7fc578f39b992dde869c995ba7d4d4e72f0587bdc78bfccb907f55fc0b57d2e3e0cb7c532fbce9646bfb4cdf1e9c4d0bdbddba5f6ea21186bea451ecc7396ee7ce41d24859fcc2b73d04842c51634ff77ce7d80e84cbbd906bd43f81c236b6683f2acb5f175bd3d960cf478755f199dde5146fe8c296726a27f5c1619595d218030a76281a4ad00a1bd3c556d19fe0ad9de9074d9cc6dd299c44599afee879da264056026bdb06414cc449d1ac281c785299043756011cfedbda07d564a17a9810e3762bb846defa6216e7361de143a81e9b731898b528bd75a2364f8d412bdc9c630855c3b19dfb1d425ee867b8146bc0bcc0c73f1ad18b516a3e0acba6a9230cbc1a0361b4c8451746bf22484767b1844f116bb7120f48661f1bb67ec15ccaf68b3c7c111a0f18fd69f2ed30a0f18b2b5bb8b714002534b7f64e55e2e6075450df382bdee7412e09e8e1ed9efef8dd3642ef8894101a2754f6f0f628bafad755f6d9090d43991ceeee8e43f22b0dc90f35acd2915a1d2a4f42c104f50126eb37d555d1a725a5757ef624154b8991cb11a14c6220404f69be804c4662ef794fc12bb37b29eb8a5a3331656d07239ed989145d1947fb2800a8e46a7f4a57929089c02061c36c1a27ab8c7da7fa9522a7c2eafc819e41dcbf22d9fb9509a3c58ea411b3a319cd39ec9bb2dfee0bdc5ff903ebbf8c4e0786d61f6c2c0c2d2848943a3583274cb6c9ee7dec1c3484b0521f8eeae58a1f0b54a01a91279a404f9ad5c537f2b2beda1eda85f986e12a501a07790be47d71456ab4ca507548f3846f1ae86d95a3b1cb052d7684ab28c6bc5667e995278bef5117fd95a1e42cf229897892bf468b21c1fe90c3ee42a8db0d9229dceda4a094fa0f299c44ea999bc51efe847b88dc8f7abe79159c21efa1420d02b8e224c483c8ac6419d0e2fb4eaa61501cf3e9a65ee2f78c7e42bcada9b2e6e637a93a3846e78bf62e72c327a3bd9bcdf4446364652bc488dff07bb060d43577a4f9a8e30845c6422d6cfe034dccbd25a2490306cc7e5be892f830cd24ea516367ab5f4079e6e6c620f54dded675a6764959ee1b574458d39a693dc82449909b3d4e6cd92869a595b875b180e60f5862f305069dd0ee05b6b701c7458b93f7a97138509b67d787847ccc391432463ca67a7161a82f1f3087f72938dcf107e02fc7a934c4be93565697b49f76df7fdf5313f3989930a7962f4444c43c7469eb0dc7b41b0d9d311a54afdfa4c16a27c898b51959c5ca94030c839f221b4a8d503a4a3d32acecb4af667f53e204c5a8966de1e11df3bbc4f6b64d0bce81ea478797a2fc7c8db6691a4c737f38d558a48a4cdd00b2377bd0047ae4bcb6b552a1769af3a11704ce724613dba0f560c197cf6d4d0acb5018bdbb35384172399cef97cec6feab23471be80a78df3e93bcae3a129f1b26793bf44129f796625502654f3f8a966336167f54f1b804d8882fc6da1a6b5db0303542914112262dac1608a71b5dff86a4dfadad2880a296d0f951129bbb34eb6a5891c423475caa34f0824f30822a0dbfafa5e55fe4133565f539ac2a654ad0817b8871c432b3e91427318f5e4df98da7948557a0c06bef147c0f3fa045ba66d9d7ac1b904e36c0cf11742f31a4a986db1b2558dd6d08d825afa99838a7dfd0e477e1d225fb1a8cb8b12c007ff3097d0d44c3c28c582138b0bb73b01a56f977ae4fb4f9de3ac61803d2fade672a81b147318af990bfcf46427a61900b167c7da67f7cfb6baffd8096b2ceaa785f71cf4f28b511d5162b3cc0e40e4fb4c2b0950a164e98564d358cd856939461cbc9536d60b7fa6f9ccabe06129e234373fe0ac861db0834e233c5496c553e8f041430c8860b84beae00397b78c33e596450f653233b963010c17fcbbb4ab48a470a8555514f67f528853b80baa708888a704554f3f8798fb921eb59bf85d4d978d223f8fb211e2a39f434df237f94825344975e959a4c1eb287a16aa873b8b0e8a645dea16f30986c875af3155e2aa9b30641a5ea5bbd400695d5c93d9fd96fd1dca49f77ce4879da8a815c28807f24638ba2bda4eaf306d12c6dad2a967177ce61f704df5a09a9addf87822bab83838074577bdb44878d3fe1ea90dfda9bea3849296a5b2ee36abf9202464f492c8c697d657b141f7b5ed0d4bd27086b95f2a13f3e5b63208b1bc5860ad58ce0d061727e00df4d7522df2c537010b7993926e49af2c94ab7fed3e5d79486d12bc28b89df6449764130cd002049c65b109205480f744d6f0b360f1f5f652c69e56d53a56d83b15992796f8b8aea3de609d6932efdb65bd458fa319481aa0b2089a030272902694b8c72205067a05ad7ca9af271e9f976fc32c2dcc149689abbcb0f63e5d410ae70759277e516cc4b85548eacd3b0b5f15bdfab91633c0bdb02e9ba3ebaa25e2017f9827b3dc39eb88db7eecd2df13337430c8bb362b040d9bc6a46c732353bdeb0eafa57e06eaea9065aed382d075f62912421e48608178a3a780333ca193d914c3d44de853c5ab3625fb91f95d67aba4ed6abd3800995689ac875fcec28dd7e006cfeb5d1ed89edd05b580af323b5325a4705e29e72a5fa7257944f93624172364613aed1667e47457b9411fd492e9d0e981656f84ce12dc4aac554b5ed199a8c075183449c37bbcffe57291cf8daf4694402162a4990fccc195d4a8129c61836ec9ddc6569cb16505f08b44467e19864d04b203089d3291e1623ff43783d2ca29272e39e311513e57055467e6b3961fdd86acb0d109786e28ded192d1915b9f9c56f64c34e95bb60d7b32310deab49513613cc7f6292b238224a3211b54fc8d18f1b3e4b142af94d651b3f6d8803ed4de17356ef3b61b3f720f4a03e7ebd39be4e74288a6bd1551a03d7e5107eb8a55f84b71f5916987343e1742cab38841f9531dd7cffedb6b00f1c40445ee33dbcd81a16ac95696fb59963ded88f5a9f9076e1c445d4790375c51e41dc98cccc9c9119b0d330d3bcbd907207fd8f62c432ac89f6f72ba563e9896a9d7693e4387cbb171327094f71b49c906fc9971dc818699c132e69aa5a5885f53041e583e310d035c073b409e0ac3212ea8283b8b167d9a59d4b407a402e39a01b7c0ec7c5ac27e8a18232f35d7f0942c3fab4021c83046737e655e74e7d80b9110c16d374ea12e40703f66d59b6450117da5c2337f6d5d35674241fbd7a8cc314bc2c0b3c4c0b945bdc87a3bee6b45cd8f1038e367452e059687dbb86e70885ddd860f470091969efe7549636e43ed44282977e9ed0aee20fe4d2f7df263b22aea21dde6fc71c20f5403d30c7631a45e372899ac1ee97d271f71b34126610769c0bdfdebd30b498d65a4dfbf33dfdd8520be5c65e18d9d5e8461f8b972f1d59819dd3fa2d0319585d86f0b10e0eb20f57899f616248e9b9dcf504933d520fe4ab62ed5c50225f7f8eb1a10f94ccb02a44d3a426f62956e3d491ea32513627d634e7dbb245c00ffffc858831a804c90f04d159185251b3896be62e7aaf1d7d607be0f38ef685d7067d522fe6e41a86ee03a225dcfbbbc6b0c07c6db173aa154dc55c423dbbacc7110396fdf738db80b0c268345927dede8e87ea0d9cc7946719a3475c3ce0244ccdab568905327974e59efae176be69de78cea335ea51a7cbf1f7536132c7f006c2ae7f5775aa07487564c0676da74156376f4064682a14d83585510a8d780fd01b3961327cf809970516da8a9d187b8f38c150b62f511d41d5bd627aae7bbdad80f5415ca80edb1081763cc65819c244f6c55d74b7611d2af253b66cdd2e4a62f066626e7448c6b5eecd2abd8cecc70423b5532aa48569eaf1f6dd9070c3874307b7157596ffe1a82fc3c44aaff4f249f6e7182afc2b217f667598c591950d68c6b07535902f4bbded2a030ecba75011fa34d6fc8a4f6a1fc72ff92618edcbe1872484864e6db5ccffd04904f3a58542546c54114e25728bac2cd12ffa055fb77000cadd6b1bd0e73b04674978cff49b84b3f14dd782c32285f1b5de6660d15de57cb5108fa096b8d3dc4386a929adc35d36d29f14e036da6d3180cb93a9b2d5a203f6e4135eee71a12688df4101daf02983a71cc964009f64ed87defaa621e57f1015f6fd138fe1945844e1197f1a9fad65d8392bce3a0dcf33941b362f35e34a46f28e4c1a8b630e64dd412ebbb61ce4f771a670ea594d41faacf97abda16fda7e034f2de273323d0deca3ee999d6d3b5dd6910cc60d3b39bd97ce77b30e4a977de7c9390add30c6e0150a27ea7ec735cbb50862e23f305940176f5eedf6df90abd5e69146ff94549ad4102c4244bfc6290eb6d784858c01d7bc0b5ac3a5753ee9e485b952fe71807d75e9725bb8e923662f358c888931532c07e64ffe96fb08e6d3e821f219a136281782da2227821e51da769439b5e47e201e813245e0bec6f424d9d7e060e7acc565e9f36278316d8c1183bbb7b5f824f882c5bf754ea89b800cac4f32d8e63e6fcefe8d5484aab412560048a4df81d8f7c987a90975dd4e2cbd4de33316bf628f9af1b277756d528aab6ab850f2b0e85f7f6ac93e9bd1564639fe9e8a716e641c753a01e64cea213b3432903b2458efaf788b1fac372e627caa7eafe7d69eb16673ffd839f8051fe4e29f3a4625cf947d4ce228725d7f2da82a295139a81dfd83fd944c25e21a84f3d68a7bfb21f18b322b54e3b3855c76db9ea5a6c92ca55fc6225bf05d0d9c5c4714e0a0eac254f71933178e8fb48f99989bcf54c836665b563ad38da010913fefd35e379c01d0c13f5e30709613beb6a2d828d449f6b5b4c7351236c788452b2b0572ff4a6c0d147de56fef5329f84228697caf8c9ef10c8c31fb85a400d35c9ccde43f02656ee7e43e355f6eb26a276932d5a0ef5da35e2c7e62b146dcd30420bbd22e1a1d73e0f35b2e9b755d2771496eceb9a6d293d7713eb06ca42ec554fd52f3629f19e64bebfb6fe033dbbbfa47223146201cb8b1348091fa3a3be4943aa5d64ce9e5a5c24571ba2f1e2d324c12732eb9b5a9343471be7badde9f3276af5eab03aa86ea089a7d7851fd95cc988842f46cff3d6eff67d619ee8110b0aa4d7cab6ba4046652e794aa0f0e97a51a44104deb7e2b89351c136af1fd46fa4b4e910eb184089fb672c589b1847fb13d15d674a52720666ba54f7a72c555d9e7b559bfad69d6089d70c28fd5dc4cb72f1fa0cec5edcbfc8a9a6767bba83c5d5e715de5f528bde21d147281ea2caf19ba3074ffd648b3ab96ff77085786f0d0cc01efc70f66c3cbd37cbda0a89205a3c738fa83b29f01ba4956ed5e9113a6baa382dd1a767faef78c6a36ee25bb4cca4561a9a2363b8558461aea88c464de8fce50477ad615b1f5b07abc399b60078a0151888919539958255d473431948b7fccf77d3b8fac769193a3dc87ba49bfe578a09ded258518eb067dd48f5e9ed7b6f7dccae"}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x24, @short={0x2, 0x0, 0xffff}}, 0x3, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) read$msr(0xffffffffffffffff, &(0x7f00000030c0)=""/4096, 0x1000) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r14, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) r15 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_FREE_STREAMS(r15, 0x8008551d, &(0x7f0000000340)=ANY=[@ANYBLOB="cdc5000000ff"]) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@empty, {}, {0xfffffffffffffffd, 0x7, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) 45.01193ms ago: executing program 2 (id=350): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) r4 = memfd_create(&(0x7f0000000200)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xd6\x06\a\x0e\xfd\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0_o\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9s\xcb\x89\xf2\xf6a\xcb[\xcc+\x1a`.\x00\xcf\x1c\x14\x1d$\x98\xf3\xed\x1cA\xc1+0\x87\xd1\xf2\xc6\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1cO5\xce9\xf9\x02h\x0e%\xa1\x11COf\xed[z\xc6\xc1:L\xdb\xac\x84Ru=E\xf7\x94\xae\x18v\v\xcc\xcd\b\xa5\x19\xb5idBc\xf1S\x93\x0f\x82me\x9a\xb8\a\xff\x91\xed\x9d|\xa7D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00', 0x5) fsetxattr$security_selinux(r4, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x24000840) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) munlock(&(0x7f00006db000/0x3000)=nil, 0x3000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x890008, &(0x7f00000001c0), 0xff, 0x548, &(0x7f0000001300)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a1100000500"], 0x18}}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20c28, 0x0, 0x3, 0x0, &(0x7f0000000080)) socket$xdp(0x2c, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10001) 43.87696ms ago: executing program 3 (id=351): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 0s ago: executing program 0 (id=352): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close_range(r1, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utime(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000010000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000a80)=0x4) read(r7, 0x0, 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 32.717690][ T29] audit: type=1400 audit(1762810209.833:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.740789][ T29] audit: type=1400 audit(1762810209.863:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.741829][ T3304] cgroup: Unknown subsys name 'net' [ 32.768557][ T29] audit: type=1400 audit(1762810209.883:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.929720][ T3304] cgroup: Unknown subsys name 'cpuset' [ 32.936061][ T3304] cgroup: Unknown subsys name 'rlimit' [ 33.067442][ T29] audit: type=1400 audit(1762810210.183:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.090810][ T29] audit: type=1400 audit(1762810210.183:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.111360][ T29] audit: type=1400 audit(1762810210.183:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.131724][ T29] audit: type=1400 audit(1762810210.183:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.152162][ T29] audit: type=1400 audit(1762810210.213:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.158608][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.176988][ T29] audit: type=1400 audit(1762810210.213:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.208924][ T29] audit: type=1400 audit(1762810210.303:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.210631][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.443759][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.484991][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.588163][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.595311][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.602462][ T3315] bridge_slave_0: entered allmulticast mode [ 35.609027][ T3315] bridge_slave_0: entered promiscuous mode [ 35.615887][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.623085][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.630214][ T3315] bridge_slave_1: entered allmulticast mode [ 35.636554][ T3315] bridge_slave_1: entered promiscuous mode [ 35.652862][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.666555][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.673680][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.680866][ T3321] bridge_slave_0: entered allmulticast mode [ 35.687302][ T3321] bridge_slave_0: entered promiscuous mode [ 35.707637][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.714804][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.722076][ T3321] bridge_slave_1: entered allmulticast mode [ 35.728497][ T3321] bridge_slave_1: entered promiscuous mode [ 35.736111][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.745360][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 35.769448][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.782641][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 35.821703][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.846282][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.861289][ T3315] team0: Port device team_slave_0 added [ 35.881476][ T3315] team0: Port device team_slave_1 added [ 35.899297][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.906488][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.913669][ T3314] bridge_slave_0: entered allmulticast mode [ 35.920178][ T3314] bridge_slave_0: entered promiscuous mode [ 35.940634][ T3321] team0: Port device team_slave_0 added [ 35.946366][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.953625][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.960851][ T3314] bridge_slave_1: entered allmulticast mode [ 35.967470][ T3314] bridge_slave_1: entered promiscuous mode [ 35.983863][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.991105][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.998287][ T3323] bridge_slave_0: entered allmulticast mode [ 36.004822][ T3323] bridge_slave_0: entered promiscuous mode [ 36.012174][ T3321] team0: Port device team_slave_1 added [ 36.017936][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.025156][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.032616][ T3323] bridge_slave_1: entered allmulticast mode [ 36.039095][ T3323] bridge_slave_1: entered promiscuous mode [ 36.050757][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.057896][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.083921][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.114204][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.121306][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.147296][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.158073][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.166047][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.173232][ T3319] bridge_slave_0: entered allmulticast mode [ 36.179677][ T3319] bridge_slave_0: entered promiscuous mode [ 36.186439][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.193530][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.200691][ T3319] bridge_slave_1: entered allmulticast mode [ 36.207243][ T3319] bridge_slave_1: entered promiscuous mode [ 36.224193][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.236798][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.261202][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.268163][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.294113][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.306040][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.315528][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.322523][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.348554][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.366549][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.376493][ T3314] team0: Port device team_slave_0 added [ 36.383379][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.400678][ T3314] team0: Port device team_slave_1 added [ 36.407393][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.452236][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.459269][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.485177][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.496939][ T3323] team0: Port device team_slave_0 added [ 36.504944][ T3315] hsr_slave_0: entered promiscuous mode [ 36.511004][ T3315] hsr_slave_1: entered promiscuous mode [ 36.517427][ T3319] team0: Port device team_slave_0 added [ 36.535301][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.542319][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.568329][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.579929][ T3323] team0: Port device team_slave_1 added [ 36.591716][ T3319] team0: Port device team_slave_1 added [ 36.616782][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.623892][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.649933][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.662704][ T3321] hsr_slave_0: entered promiscuous mode [ 36.668754][ T3321] hsr_slave_1: entered promiscuous mode [ 36.674695][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 36.680449][ T3321] Cannot create hsr debugfs directory [ 36.706454][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.713523][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.739406][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.757926][ T3314] hsr_slave_0: entered promiscuous mode [ 36.764084][ T3314] hsr_slave_1: entered promiscuous mode [ 36.770073][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.775796][ T3314] Cannot create hsr debugfs directory [ 36.781646][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.788650][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.815020][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.828970][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.835967][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.862025][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.926761][ T3323] hsr_slave_0: entered promiscuous mode [ 36.932684][ T3323] hsr_slave_1: entered promiscuous mode [ 36.938596][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 36.944344][ T3323] Cannot create hsr debugfs directory [ 37.017006][ T3319] hsr_slave_0: entered promiscuous mode [ 37.023102][ T3319] hsr_slave_1: entered promiscuous mode [ 37.029005][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 37.034731][ T3319] Cannot create hsr debugfs directory [ 37.140290][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.148936][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.160575][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.169272][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.202114][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.216241][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.225233][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.239598][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.260459][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.273138][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.283875][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.301319][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.338380][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.349879][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.358544][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.374845][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.386141][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.404878][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.414123][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.430793][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.440179][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.454423][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.474649][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.484525][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.491710][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.514235][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.521482][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.534972][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.558405][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.565508][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.590927][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.598116][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.627993][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.648257][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.674990][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.689476][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.710165][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.723139][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.730327][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.740381][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.747711][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.759100][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.771393][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.778461][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.795427][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.802543][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.814648][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.828714][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.851100][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.858237][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.870142][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.877205][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.888462][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.967539][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.978051][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.029959][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.045315][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.076659][ T3315] veth0_vlan: entered promiscuous mode [ 38.098200][ T3321] veth0_vlan: entered promiscuous mode [ 38.115692][ T3321] veth1_vlan: entered promiscuous mode [ 38.128845][ T3315] veth1_vlan: entered promiscuous mode [ 38.151395][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.172587][ T3321] veth0_macvtap: entered promiscuous mode [ 38.182532][ T3321] veth1_macvtap: entered promiscuous mode [ 38.207823][ T3315] veth0_macvtap: entered promiscuous mode [ 38.228229][ T3315] veth1_macvtap: entered promiscuous mode [ 38.244266][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.252008][ T3319] veth0_vlan: entered promiscuous mode [ 38.265920][ T3319] veth1_vlan: entered promiscuous mode [ 38.281232][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.291899][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.308333][ T3319] veth0_macvtap: entered promiscuous mode [ 38.316513][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.328929][ T407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.337946][ T407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.350839][ T3319] veth1_macvtap: entered promiscuous mode [ 38.371987][ T407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.393486][ T407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.402641][ T407] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.411694][ T407] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.421670][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.430503][ T3314] veth0_vlan: entered promiscuous mode [ 38.438572][ T3323] veth0_vlan: entered promiscuous mode [ 38.444628][ T407] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.453438][ T407] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.468655][ T3314] veth1_vlan: entered promiscuous mode [ 38.477182][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.477440][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.477457][ T29] audit: type=1400 audit(1762810215.593:81): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.Z1Iv2V/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.515358][ T29] audit: type=1400 audit(1762810215.603:82): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.517927][ T3323] veth1_vlan: entered promiscuous mode [ 38.537336][ T29] audit: type=1400 audit(1762810215.603:83): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.Z1Iv2V/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.559848][ T3323] veth0_macvtap: entered promiscuous mode [ 38.568147][ T29] audit: type=1400 audit(1762810215.603:84): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.576851][ T3323] veth1_macvtap: entered promiscuous mode [ 38.596143][ T29] audit: type=1400 audit(1762810215.613:85): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.Z1Iv2V/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.613934][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.628789][ T29] audit: type=1400 audit(1762810215.613:86): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.Z1Iv2V/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.645367][ T3314] veth0_macvtap: entered promiscuous mode [ 38.663285][ T29] audit: type=1400 audit(1762810215.613:87): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.688779][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.697206][ T3314] veth1_macvtap: entered promiscuous mode [ 38.703385][ T29] audit: type=1400 audit(1762810215.813:88): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.726248][ T29] audit: type=1400 audit(1762810215.813:89): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="gadgetfs" ino=4678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.739009][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.767417][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.783201][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.792290][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.801605][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.814809][ T29] audit: type=1400 audit(1762810215.933:90): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.842543][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.863874][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.871425][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.913446][ T3485] bridge_slave_0: left allmulticast mode [ 38.919242][ T3485] bridge_slave_0: left promiscuous mode [ 38.924969][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.942205][ T3485] bridge_slave_1: left allmulticast mode [ 38.948001][ T3485] bridge_slave_1: left promiscuous mode [ 38.953862][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.958546][ T3490] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.972186][ T3490] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 38.980060][ T3490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.990866][ T3485] bond0: (slave bond_slave_0): Releasing backup interface [ 39.010074][ T3485] bond0: (slave bond_slave_1): Releasing backup interface [ 39.042367][ T3485] team0: Port device team_slave_0 removed [ 39.055710][ T3493] loop1: detected capacity change from 0 to 1024 [ 39.062628][ T3493] EXT4-fs: Ignoring removed orlov option [ 39.069171][ T3491] loop0: detected capacity change from 0 to 512 [ 39.077963][ T3491] journal_path: Lookup failure for './file0/../file0' [ 39.084883][ T3491] EXT4-fs: error: could not find journal device path [ 39.090361][ T3485] team0: Port device team_slave_1 removed [ 39.111252][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.118768][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.141419][ T3493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.160490][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.167958][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.176983][ T3485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 39.195180][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.204923][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.214072][ T3489] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 39.222051][ T3490] batman_adv: batadv0: Adding interface: veth1_vlan [ 39.229003][ T3490] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.279301][ T3490] batman_adv: batadv0: Interface activated: veth1_vlan [ 39.309729][ T3499] loop0: detected capacity change from 0 to 128 [ 39.323110][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.350257][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.361790][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.371980][ T3499] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 39.400672][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.439296][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.463878][ T3503] syz.0.6: attempt to access beyond end of device [ 39.463878][ T3503] loop0: rw=1, sector=137, nr_sectors = 8 limit=128 [ 39.478823][ T3492] infiniband syz2: set active [ 39.483255][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.483583][ T3492] infiniband syz2: added bond0 [ 39.502472][ T3502] loop1: detected capacity change from 0 to 512 [ 39.557352][ T3503] syz.0.6: attempt to access beyond end of device [ 39.557352][ T3503] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 39.577118][ T3506] 9pnet_fd: Insufficient options for proto=fd [ 39.596738][ T3492] RDS/IB: syz2: added [ 39.605723][ T3492] smc: adding ib device syz2 with port count 1 [ 39.612248][ T3503] syz.0.6: attempt to access beyond end of device [ 39.612248][ T3503] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 39.625793][ T3492] smc: ib device syz2 port 1 has no pnetid [ 39.635901][ T3503] syz.0.6: attempt to access beyond end of device [ 39.635901][ T3503] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 39.649173][ T3503] syz.0.6: attempt to access beyond end of device [ 39.649173][ T3503] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 39.662374][ T3503] syz.0.6: attempt to access beyond end of device [ 39.662374][ T3503] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 39.675635][ T3503] syz.0.6: attempt to access beyond end of device [ 39.675635][ T3503] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 39.689309][ T3503] syz.0.6: attempt to access beyond end of device [ 39.689309][ T3503] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 39.702850][ T3503] syz.0.6: attempt to access beyond end of device [ 39.702850][ T3503] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 39.721533][ T3512] loop3: detected capacity change from 0 to 128 [ 39.728830][ T3503] syz.0.6: attempt to access beyond end of device [ 39.728830][ T3503] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 39.744618][ T3512] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 39.811842][ T3515] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8'. [ 39.842602][ T3509] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 39.910062][ T3515] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 39.917651][ T3515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8'. [ 39.928463][ T3514] loop4: detected capacity change from 0 to 2048 [ 39.974008][ T60] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 40.012711][ T3514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.040665][ T60] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 40.045698][ T3514] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.169378][ T3528] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10: bg 0: block 345: padding at end of block bitmap is not set [ 40.221539][ T3528] EXT4-fs (loop4): Remounting filesystem read-only [ 40.236739][ T3527] loop3: detected capacity change from 0 to 8192 [ 40.263991][ T3530] loop0: detected capacity change from 0 to 2048 [ 40.280016][ T3510] loop3: p2 p3 p4 [ 40.283980][ T3510] loop3: p2 start 164919041 is beyond EOD, truncated [ 40.290805][ T3510] loop3: p3 size 66846464 extends beyond EOD, truncated [ 40.301960][ T3510] loop3: p4 size 37048832 extends beyond EOD, truncated [ 40.314101][ T3527] loop3: p2 p3 p4 [ 40.317883][ T3527] loop3: p2 start 164919041 is beyond EOD, truncated [ 40.324655][ T3527] loop3: p3 size 66846464 extends beyond EOD, truncated [ 40.338195][ T3530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.358177][ T3492] syz.2.3 (3492) used greatest stack depth: 10520 bytes left [ 40.361067][ T3527] loop3: p4 size 37048832 extends beyond EOD, truncated [ 40.424094][ T3530] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.514262][ T3536] loop2: detected capacity change from 0 to 512 [ 40.523502][ T3540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.617931][ T3540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.658048][ T3528] syz.4.10 (3528) used greatest stack depth: 10360 bytes left [ 40.711196][ T3546] vhci_hcd: invalid port number 96 [ 40.716363][ T3546] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 40.724921][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.763104][ T3540] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.15: bg 0: block 345: padding at end of block bitmap is not set [ 40.809894][ T3540] EXT4-fs (loop0): Remounting filesystem read-only [ 40.965766][ T3558] netlink: 172 bytes leftover after parsing attributes in process `syz.4.19'. [ 41.066421][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 41.066703][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 41.099919][ T3563] loop3: detected capacity change from 0 to 1024 [ 41.109363][ T3563] EXT4-fs: Ignoring removed orlov option [ 41.122848][ T3563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.140769][ T3563] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.148691][ T3563] IPv6: Can't replace route, no match found [ 41.220414][ T3573] loop1: detected capacity change from 0 to 1024 [ 41.229254][ T3573] EXT4-fs: Ignoring removed orlov option [ 41.238596][ T3573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.256989][ T3573] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.265366][ T3573] IPv6: Can't replace route, no match found [ 41.360397][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.390867][ T3581] loop1: detected capacity change from 0 to 2048 [ 41.399941][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.411536][ T3581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.423862][ T3581] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.442810][ T3581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.453096][ T3581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.517659][ T3587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25'. [ 41.526635][ T3587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25'. [ 41.535661][ T3587] netlink: 'syz.3.25': attribute type 6 has an invalid length. [ 41.649207][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.688928][ T3589] syz.0.26 uses obsolete (PF_INET,SOCK_PACKET) [ 41.749142][ T3591] loop2: detected capacity change from 0 to 512 [ 41.830290][ T3598] loop2: detected capacity change from 0 to 512 [ 41.855257][ T3598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.864103][ T3602] loop0: detected capacity change from 0 to 1024 [ 41.874562][ T3598] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.887392][ T3602] EXT4-fs: Ignoring removed orlov option [ 42.002163][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.031450][ T3602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.053987][ T3602] IPv6: NLM_F_CREATE should be specified when creating new route [ 42.062450][ T3602] IPv6: Can't replace route, no match found [ 42.100742][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.190431][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.306913][ T3609] loop2: detected capacity change from 0 to 2048 [ 42.342702][ T3609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.362510][ T3616] loop3: detected capacity change from 0 to 128 [ 42.381097][ T3616] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 42.389040][ T3609] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.499313][ T3609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.521732][ T3609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.532727][ T3620] loop1: detected capacity change from 0 to 8192 [ 42.562851][ T3609] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.32: bg 0: block 345: padding at end of block bitmap is not set [ 42.597960][ T3609] EXT4-fs (loop2): Remounting filesystem read-only [ 42.628007][ T37] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 42.669987][ T3510] loop1: p2 p3 p4 [ 42.674861][ T3510] loop1: p2 start 164919041 is beyond EOD, truncated [ 42.681664][ T3510] loop1: p3 size 66846464 extends beyond EOD, truncated [ 42.713586][ T3625] bridge_slave_0: left allmulticast mode [ 42.719326][ T3625] bridge_slave_0: left promiscuous mode [ 42.725207][ T3625] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.733781][ T3510] loop1: p4 size 37048832 extends beyond EOD, truncated [ 42.746642][ T3620] loop1: p2 p3 p4 [ 42.751946][ T3625] bridge_slave_1: left allmulticast mode [ 42.757662][ T3625] bridge_slave_1: left promiscuous mode [ 42.760119][ T3629] netlink: 56 bytes leftover after parsing attributes in process `syz.4.37'. [ 42.763476][ T3625] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.774848][ T3629] netlink: 'syz.4.37': attribute type 10 has an invalid length. [ 42.786924][ T3629] netlink: 40 bytes leftover after parsing attributes in process `syz.4.37'. [ 42.802531][ T3630] rdma_rxe: rxe_newlink: failed to add bond0 [ 42.819530][ T3620] loop1: p2 start 164919041 is beyond EOD, truncated [ 42.826298][ T3620] loop1: p3 size 66846464 extends beyond EOD, truncated [ 42.851582][ T3620] loop1: p4 size 37048832 extends beyond EOD, truncated [ 42.868448][ T3625] bond0: (slave bond_slave_0): Releasing backup interface [ 42.894323][ T3625] bond0: (slave bond_slave_1): Releasing backup interface [ 42.973838][ T3625] team0: Port device team_slave_0 removed [ 42.998811][ T3625] team0: Port device team_slave_1 removed [ 43.023311][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.030848][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.050579][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.058132][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.077177][ T3635] siw: device registration error -23 [ 43.083134][ T3635] smc: removing ib device syz2 [ 43.093452][ T3625] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 43.110386][ T3627] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.163832][ T3629] batman_adv: batadv0: Adding interface: veth1_vlan [ 43.170578][ T3629] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.197358][ T3629] batman_adv: batadv0: Interface activated: veth1_vlan [ 43.268431][ T3639] loop4: detected capacity change from 0 to 2048 [ 43.339764][ T3639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.366878][ T3639] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.410431][ T3649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.421997][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.465154][ T3654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.474980][ T3654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.483408][ T3651] vhci_hcd: invalid port number 96 [ 43.488578][ T3651] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 43.491793][ T3654] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.40: bg 0: block 345: padding at end of block bitmap is not set [ 43.510251][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 43.510264][ T29] audit: type=1400 audit(1762810220.613:485): avc: denied { bind } for pid=3652 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.537059][ T3654] EXT4-fs (loop4): Remounting filesystem read-only [ 43.553892][ T29] audit: type=1400 audit(1762810220.633:486): avc: denied { write } for pid=3652 comm="syz.0.45" path="socket:[5235]" dev="sockfs" ino=5235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.582287][ T3649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.641475][ T3649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.652415][ T3659] loop3: detected capacity change from 0 to 512 [ 43.670251][ T29] audit: type=1326 audit(1762810220.783:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 43.693454][ T29] audit: type=1326 audit(1762810220.783:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 43.746604][ T3661] loop0: detected capacity change from 0 to 512 [ 43.798574][ T3649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.817205][ T29] audit: type=1326 audit(1762810220.843:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 43.829010][ T3667] audit: audit_backlog=65 > audit_backlog_limit=64 [ 43.840914][ T29] audit: type=1326 audit(1762810220.843:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 43.846903][ T3667] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 43.870640][ T29] audit: type=1326 audit(1762810220.843:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3660 comm="syz.0.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 43.877672][ T3667] audit: backlog limit exceeded [ 43.971880][ T407] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.996618][ T407] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.011974][ T407] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.040975][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.044999][ T3672] loop2: detected capacity change from 0 to 8192 [ 44.089143][ T3510] loop2: p2 p3 p4 [ 44.093082][ T3510] loop2: p2 start 164919041 is beyond EOD, truncated [ 44.099840][ T3510] loop2: p3 size 66846464 extends beyond EOD, truncated [ 44.107749][ T3510] loop2: p4 size 37048832 extends beyond EOD, truncated [ 44.122870][ T3672] loop2: p2 p3 p4 [ 44.130302][ T3672] loop2: p2 start 164919041 is beyond EOD, truncated [ 44.137074][ T3672] loop2: p3 size 66846464 extends beyond EOD, truncated [ 44.148130][ T3663] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.162222][ T3672] loop2: p4 size 37048832 extends beyond EOD, truncated [ 44.211992][ T3678] loop1: detected capacity change from 0 to 128 [ 44.261351][ T3678] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 44.482105][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.597613][ T3688] netlink: 56 bytes leftover after parsing attributes in process `syz.4.53'. [ 44.606045][ T3687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 44.641622][ T37] bio_check_eod: 371 callbacks suppressed [ 44.641637][ T37] kworker/u8:2: attempt to access beyond end of device [ 44.641637][ T37] loop1: rw=1, sector=761, nr_sectors = 8 limit=128 [ 44.684956][ T3687] netlink: 'syz.4.53': attribute type 10 has an invalid length. [ 44.692716][ T3687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.53'. [ 44.714148][ T37] kworker/u8:2: attempt to access beyond end of device [ 44.714148][ T37] loop1: rw=1, sector=777, nr_sectors = 8 limit=128 [ 44.761506][ T3694] loop3: detected capacity change from 0 to 512 [ 44.767978][ T37] kworker/u8:2: attempt to access beyond end of device [ 44.767978][ T37] loop1: rw=1, sector=793, nr_sectors = 8 limit=128 [ 44.768034][ T3687] loop4: detected capacity change from 0 to 1024 [ 44.788070][ T37] kworker/u8:2: attempt to access beyond end of device [ 44.788070][ T37] loop1: rw=1, sector=809, nr_sectors = 8 limit=128 [ 44.809347][ T3687] EXT4-fs: Ignoring removed orlov option [ 44.829993][ T3694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.839113][ T37] kworker/u8:2: attempt to access beyond end of device [ 44.839113][ T37] loop1: rw=1, sector=825, nr_sectors = 8 limit=128 [ 44.856594][ T37] kworker/u8:2: attempt to access beyond end of device [ 44.856594][ T37] loop1: rw=1, sector=841, nr_sectors = 8 limit=128 [ 44.870273][ T37] kworker/u8:2: attempt to access beyond end of device [ 44.870273][ T37] loop1: rw=1, sector=857, nr_sectors = 8 limit=128 [ 44.883644][ T37] kworker/u8:2: attempt to access beyond end of device [ 44.883644][ T37] loop1: rw=1, sector=873, nr_sectors = 8 limit=128 [ 44.893134][ T3694] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.897942][ T37] kworker/u8:2: attempt to access beyond end of device [ 44.897942][ T37] loop1: rw=1, sector=889, nr_sectors = 8 limit=128 [ 44.921293][ T37] kworker/u8:2: attempt to access beyond end of device [ 44.921293][ T37] loop1: rw=1, sector=905, nr_sectors = 8 limit=128 [ 44.926399][ T3687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.936243][ T37] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 45.003388][ T3687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.020119][ T3702] vhci_hcd: invalid port number 96 [ 45.025325][ T3702] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 45.056704][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.096400][ T3700] loop1: detected capacity change from 0 to 2048 [ 45.143951][ T3704] bridge_slave_0: left allmulticast mode [ 45.149665][ T3704] bridge_slave_0: left promiscuous mode [ 45.155505][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.169545][ T3704] bridge_slave_1: left allmulticast mode [ 45.175323][ T3704] bridge_slave_1: left promiscuous mode [ 45.181064][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.181271][ T3706] loop0: detected capacity change from 0 to 2048 [ 45.198776][ T3700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.210452][ T3706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.211297][ T3700] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.233734][ T3706] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.233791][ T3704] bond0: (slave bond_slave_0): Releasing backup interface [ 45.308598][ T3704] bond0: (slave bond_slave_1): Releasing backup interface [ 45.329109][ T3717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.341865][ T3716] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.54: bg 0: block 345: padding at end of block bitmap is not set [ 45.359912][ T3704] team0: Port device team_slave_0 removed [ 45.369817][ T3716] EXT4-fs (loop1): Remounting filesystem read-only [ 45.376631][ T3704] team0: Port device team_slave_1 removed [ 45.383815][ T3717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.393884][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.401515][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.423947][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.431439][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.443949][ T3717] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.60: bg 0: block 345: padding at end of block bitmap is not set [ 45.459567][ T3704] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.482720][ T3717] EXT4-fs (loop0): Remounting filesystem read-only [ 45.517973][ T3710] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.662940][ T3729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.711461][ T3732] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.741701][ T3732] netlink: 'syz.4.65': attribute type 10 has an invalid length. [ 45.749453][ T3732] netlink: 40 bytes leftover after parsing attributes in process `syz.4.65'. [ 45.768658][ T3729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.780248][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.791493][ T3739] netlink: 168 bytes leftover after parsing attributes in process `syz.3.64'. [ 45.841181][ T3732] loop4: detected capacity change from 0 to 1024 [ 45.856022][ T3729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.874978][ T3732] EXT4-fs: Ignoring removed orlov option [ 45.888801][ T3752] loop1: detected capacity change from 0 to 512 [ 45.900616][ T3732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.918178][ T3757] loop2: detected capacity change from 0 to 128 [ 45.925691][ T3752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.934099][ T3757] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 45.947500][ T3752] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.960851][ T3729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.985709][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.006332][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.049051][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.060331][ T3759] loop4: detected capacity change from 0 to 1024 [ 46.066987][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.072398][ T3759] EXT4-fs: Ignoring removed orlov option [ 46.081143][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.108675][ T3759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.127867][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.147795][ T3759] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.148297][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 46.155671][ T3759] IPv6: Can't replace route, no match found [ 46.194949][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.239099][ T3763] loop1: detected capacity change from 0 to 8192 [ 46.270042][ T3763] loop1: p2 p3 p4 [ 46.281051][ T3769] vhci_hcd: invalid port number 96 [ 46.286273][ T3769] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 46.297740][ T3763] loop1: p2 start 164919041 is beyond EOD, truncated [ 46.304533][ T3763] loop1: p3 size 66846464 extends beyond EOD, truncated [ 46.319525][ T3763] loop1: p4 size 37048832 extends beyond EOD, truncated [ 46.434223][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.457724][ T3778] loop3: detected capacity change from 0 to 1024 [ 46.472193][ T3779] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.479330][ T3778] EXT4-fs: Ignoring removed orlov option [ 46.504625][ T3778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.540274][ T3784] netlink: 168 bytes leftover after parsing attributes in process `syz.4.73'. [ 46.573861][ T3778] IPv6: Can't replace route, no match found [ 46.637748][ T3779] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.671344][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.718405][ T3779] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.778029][ T3779] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.800373][ T3789] loop0: detected capacity change from 0 to 8192 [ 46.821600][ T3793] bridge_slave_0: left allmulticast mode [ 46.827361][ T3793] bridge_slave_0: left promiscuous mode [ 46.833130][ T3793] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.841996][ T3794] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 46.849755][ T3794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.78'. [ 46.861649][ T3793] bridge_slave_1: left allmulticast mode [ 46.865497][ T3789] loop0: p2 p3 p4 [ 46.867324][ T3793] bridge_slave_1: left promiscuous mode [ 46.867508][ T3793] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.879464][ T3789] loop0: p2 start 164919041 is beyond EOD, truncated [ 46.890556][ T3789] loop0: p3 size 66846464 extends beyond EOD, truncated [ 46.899213][ T3789] loop0: p4 size 37048832 extends beyond EOD, truncated [ 46.915131][ T3796] loop3: detected capacity change from 0 to 1024 [ 46.922823][ T3793] bond0: (slave bond_slave_0): Releasing backup interface [ 46.930223][ T3797] loop1: detected capacity change from 0 to 512 [ 46.930814][ T3796] EXT4-fs: Ignoring removed orlov option [ 46.944707][ T3796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.037349][ T3793] bond0: (slave bond_slave_1): Releasing backup interface [ 47.056187][ T3797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.089558][ T3797] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.112089][ T3793] team0: Port device team_slave_0 removed [ 47.113092][ T3804] 9pnet_fd: Insufficient options for proto=fd [ 47.126968][ T3793] team0: Port device team_slave_1 removed [ 47.164021][ T3793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.171570][ T3793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.181176][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.194895][ T3793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.202388][ T3793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.262947][ T3793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 47.323836][ T3794] batman_adv: batadv0: Adding interface: veth1_vlan [ 47.330539][ T3794] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.358008][ T3794] batman_adv: batadv0: Interface activated: veth1_vlan [ 47.384175][ T407] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.409133][ T407] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.423108][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.432550][ T407] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.496240][ T3817] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 47.543659][ T3817] netlink: 56 bytes leftover after parsing attributes in process `syz.4.86'. [ 47.561028][ T3817] netlink: 'syz.4.86': attribute type 10 has an invalid length. [ 47.568707][ T3817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.86'. [ 47.590463][ T3823] syz.2.87 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.598066][ T407] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.637915][ T3827] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.659626][ T3830] loop0: detected capacity change from 0 to 512 [ 47.688211][ T3830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.701279][ T3830] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.721043][ T3834] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.753559][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.764765][ T3833] netlink: 168 bytes leftover after parsing attributes in process `syz.1.88'. [ 47.803426][ T3827] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.826842][ T3833] capability: warning: `syz.1.88' uses 32-bit capabilities (legacy support in use) [ 47.844228][ T3837] netlink: 168 bytes leftover after parsing attributes in process `syz.4.89'. [ 47.854839][ T3834] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.902242][ T3827] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.940987][ T3834] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.985529][ T3843] 9pnet_fd: Insufficient options for proto=fd [ 48.004039][ T3827] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.050747][ T3846] loop2: detected capacity change from 0 to 1024 [ 48.060519][ T3834] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.081455][ T3846] EXT4-fs: Ignoring removed orlov option [ 48.114075][ T3846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.153394][ T3846] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.161325][ T3846] IPv6: Can't replace route, no match found [ 48.176326][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.214242][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.229493][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.247258][ T3850] loop0: detected capacity change from 0 to 128 [ 48.254302][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.279092][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.289914][ T3850] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 48.393900][ T3853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 48.415117][ T3853] netlink: 'syz.2.96': attribute type 10 has an invalid length. [ 48.427315][ T3853] batman_adv: batadv0: Adding interface: veth1_vlan [ 48.434063][ T3853] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.460560][ T3853] batman_adv: batadv0: Interface activated: veth1_vlan [ 48.477888][ T3853] loop2: detected capacity change from 0 to 1024 [ 48.499226][ T3853] EXT4-fs: Ignoring removed orlov option [ 48.549898][ T3853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.589340][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.600837][ T407] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 48.640898][ T3863] lo speed is unknown, defaulting to 1000 [ 48.649515][ T3863] lo speed is unknown, defaulting to 1000 [ 48.666338][ T3863] lo speed is unknown, defaulting to 1000 [ 48.682789][ T3863] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 48.700517][ T3862] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 48.710157][ T3863] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 48.719831][ T3864] lo speed is unknown, defaulting to 1000 [ 48.742706][ T3862] netlink: 'syz.2.99': attribute type 10 has an invalid length. [ 48.760448][ T3863] lo speed is unknown, defaulting to 1000 [ 48.771176][ T3863] lo speed is unknown, defaulting to 1000 [ 48.787837][ T3871] loop3: detected capacity change from 0 to 128 [ 48.795840][ T3871] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 48.806966][ T3863] lo speed is unknown, defaulting to 1000 [ 48.818651][ T3863] lo speed is unknown, defaulting to 1000 [ 48.831666][ T3863] lo speed is unknown, defaulting to 1000 [ 48.977769][ T3880] loop2: detected capacity change from 0 to 1024 [ 48.984766][ T52] Buffer I/O error on dev loop3, logical block 376, lost async page write [ 48.987664][ T3880] EXT4-fs: Ignoring removed orlov option [ 49.000651][ T52] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 49.012881][ T3880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.031821][ T3880] IPv6: Can't replace route, no match found [ 49.050751][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.080533][ T3883] bridge_slave_0: left allmulticast mode [ 49.086321][ T3883] bridge_slave_0: left promiscuous mode [ 49.092155][ T3883] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.105227][ T3883] bridge_slave_1: left allmulticast mode [ 49.110972][ T3883] bridge_slave_1: left promiscuous mode [ 49.116637][ T3883] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.125172][ T3889] netlink: 'syz.0.107': attribute type 10 has an invalid length. [ 49.139652][ T3883] bond0: (slave bond_slave_0): Releasing backup interface [ 49.158065][ T3883] bond0: (slave bond_slave_1): Releasing backup interface [ 49.181065][ T3883] team0: Port device team_slave_0 removed [ 49.202473][ T3883] team0: Port device team_slave_1 removed [ 49.227087][ T3883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.234648][ T3883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.243616][ T3883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.251133][ T3883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.260997][ T3883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 49.277276][ T1030] lo speed is unknown, defaulting to 1000 [ 49.285029][ T3889] batman_adv: batadv0: Adding interface: veth1_vlan [ 49.291682][ T3889] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.318461][ T3889] batman_adv: batadv0: Interface activated: veth1_vlan [ 49.346231][ T3890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.391646][ T3897] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 49.424449][ T3890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.425914][ T3897] netlink: 'syz.0.110': attribute type 10 has an invalid length. [ 49.453867][ T3897] loop0: detected capacity change from 0 to 1024 [ 49.461263][ T3897] EXT4-fs: Ignoring removed orlov option [ 49.470511][ T3897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.520138][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.541544][ T3900] loop3: detected capacity change from 0 to 2048 [ 49.542616][ T3890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.572153][ T3900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.584446][ T3900] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.617862][ T3890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.691880][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.727891][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.741295][ T3908] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 49.777085][ T780] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.789820][ T780] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.814251][ T3909] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.111: bg 0: block 345: padding at end of block bitmap is not set [ 49.836610][ T780] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.858965][ T780] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.867654][ T3909] EXT4-fs (loop3): Remounting filesystem read-only [ 49.994705][ T3914] loop1: detected capacity change from 0 to 8192 [ 50.059897][ T3914] loop1: p2 p3 p4 [ 50.067435][ T3914] loop1: p2 start 164919041 is beyond EOD, truncated [ 50.074189][ T3914] loop1: p3 size 66846464 extends beyond EOD, truncated [ 50.095902][ T3914] loop1: p4 size 37048832 extends beyond EOD, truncated [ 50.502172][ T3921] loop2: detected capacity change from 0 to 512 [ 50.521269][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 50.532506][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 50.546029][ T3921] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.559236][ T3921] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.589143][ T3921] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.117: bad orphan inode 131083 [ 50.610608][ T3921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.697770][ T3927] loop0: detected capacity change from 0 to 1024 [ 50.699356][ T29] kauditd_printk_skb: 641 callbacks suppressed [ 50.699376][ T29] audit: type=1400 audit(1762810227.823:1133): avc: denied { ioctl } for pid=3920 comm="syz.2.117" path="/25/bus/file1" dev="loop2" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.706756][ T3927] EXT4-fs: Ignoring removed orlov option [ 50.761137][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.773617][ T3927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.798984][ T29] audit: type=1326 audit(1762810227.913:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2062eaf6c9 code=0x7ffc0000 [ 50.822392][ T29] audit: type=1326 audit(1762810227.913:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2062eaf6c9 code=0x7ffc0000 [ 50.823554][ T3927] IPv6: Can't replace route, no match found [ 50.845746][ T29] audit: type=1326 audit(1762810227.913:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2062eaf6c9 code=0x7ffc0000 [ 50.875114][ T29] audit: type=1326 audit(1762810227.913:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2062eaf6c9 code=0x7ffc0000 [ 50.898503][ T29] audit: type=1326 audit(1762810227.913:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2062eaf6c9 code=0x7ffc0000 [ 50.921906][ T29] audit: type=1326 audit(1762810227.913:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2062eaf6c9 code=0x7ffc0000 [ 50.946024][ T29] audit: type=1326 audit(1762810227.913:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2062eaf6c9 code=0x7ffc0000 [ 50.969752][ T29] audit: type=1326 audit(1762810227.913:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2062eaf6c9 code=0x7ffc0000 [ 50.993109][ T29] audit: type=1326 audit(1762810227.913:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3929 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2062eaf6c9 code=0x7ffc0000 [ 51.017483][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.039064][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.071956][ T3936] FAULT_INJECTION: forcing a failure. [ 51.071956][ T3936] name failslab, interval 1, probability 0, space 0, times 1 [ 51.084643][ T3936] CPU: 1 UID: 0 PID: 3936 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.084775][ T3936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.084789][ T3936] Call Trace: [ 51.084796][ T3936] [ 51.084803][ T3936] __dump_stack+0x1d/0x30 [ 51.084832][ T3936] dump_stack_lvl+0xe8/0x140 [ 51.084891][ T3936] dump_stack+0x15/0x1b [ 51.084911][ T3936] should_fail_ex+0x265/0x280 [ 51.084930][ T3936] should_failslab+0x8c/0xb0 [ 51.084970][ T3936] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 51.085006][ T3936] ? __alloc_skb+0x101/0x320 [ 51.085129][ T3936] __alloc_skb+0x101/0x320 [ 51.085165][ T3936] netlink_alloc_large_skb+0xbf/0xf0 [ 51.085330][ T3936] netlink_sendmsg+0x3cf/0x6b0 [ 51.085435][ T3936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.085461][ T3936] __sock_sendmsg+0x145/0x180 [ 51.085494][ T3936] ____sys_sendmsg+0x31e/0x4e0 [ 51.085598][ T3936] ___sys_sendmsg+0x17b/0x1d0 [ 51.085636][ T3936] __x64_sys_sendmsg+0xd4/0x160 [ 51.085658][ T3936] x64_sys_call+0x191e/0x3000 [ 51.085753][ T3936] do_syscall_64+0xd2/0x200 [ 51.085781][ T3936] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.085818][ T3936] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 51.085914][ T3936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.085942][ T3936] RIP: 0033:0x7f073a2df6c9 [ 51.085971][ T3936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.086023][ T3936] RSP: 002b:00007f0738d3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.086047][ T3936] RAX: ffffffffffffffda RBX: 00007f073a535fa0 RCX: 00007f073a2df6c9 [ 51.086064][ T3936] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 51.086075][ T3936] RBP: 00007f0738d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.086087][ T3936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.086098][ T3936] R13: 00007f073a536038 R14: 00007f073a535fa0 R15: 00007ffde3ac57a8 [ 51.086115][ T3936] [ 51.298218][ T3938] lo speed is unknown, defaulting to 1000 [ 51.388039][ T3951] tipc: Started in network mode [ 51.393045][ T3951] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 51.403778][ T3951] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 51.412039][ T3951] tipc: Enabled bearer , priority 10 [ 51.413565][ T3947] loop0: detected capacity change from 0 to 1024 [ 51.429919][ T3947] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.440951][ T3947] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.470729][ T3947] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 51.479541][ T3947] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 51.746489][ T3959] loop2: detected capacity change from 0 to 2048 [ 51.781378][ T3959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.807501][ T3959] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.820890][ T3959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.829955][ T3959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.972875][ T3969] loop1: detected capacity change from 0 to 128 [ 51.979998][ T3969] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 51.999465][ T780] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.030844][ T780] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.051776][ T3970] bio_check_eod: 408 callbacks suppressed [ 52.051790][ T3970] syz.1.131: attempt to access beyond end of device [ 52.051790][ T3970] loop1: rw=1, sector=137, nr_sectors = 8 limit=128 [ 52.059435][ T780] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.109740][ T3972] siw: device registration error -23 [ 52.136466][ T780] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.145061][ T3970] syz.1.131: attempt to access beyond end of device [ 52.145061][ T3970] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 52.164404][ T3970] syz.1.131: attempt to access beyond end of device [ 52.164404][ T3970] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 52.177769][ T3970] syz.1.131: attempt to access beyond end of device [ 52.177769][ T3970] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 52.232108][ T3977] loop4: detected capacity change from 0 to 1024 [ 52.249827][ T3977] EXT4-fs: Ignoring removed orlov option [ 52.283970][ T3979] __nla_validate_parse: 7 callbacks suppressed [ 52.283987][ T3979] netlink: 56 bytes leftover after parsing attributes in process `syz.3.134'. [ 52.301069][ T3977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.315948][ T3970] syz.1.131: attempt to access beyond end of device [ 52.315948][ T3970] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 52.329386][ T3970] syz.1.131: attempt to access beyond end of device [ 52.329386][ T3970] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 52.343408][ T3970] syz.1.131: attempt to access beyond end of device [ 52.343408][ T3970] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 52.356804][ T3970] syz.1.131: attempt to access beyond end of device [ 52.356804][ T3970] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 52.370168][ T3970] syz.1.131: attempt to access beyond end of device [ 52.370168][ T3970] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 52.385908][ T3970] syz.1.131: attempt to access beyond end of device [ 52.385908][ T3970] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 52.419914][ T3977] IPv6: Can't replace route, no match found [ 52.446234][ T3976] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 52.468255][ T780] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 52.506430][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.539175][ T3403] tipc: Node number set to 1 [ 52.601278][ T3989] FAULT_INJECTION: forcing a failure. [ 52.601278][ T3989] name failslab, interval 1, probability 0, space 0, times 0 [ 52.613964][ T3989] CPU: 0 UID: 0 PID: 3989 Comm: syz.1.138 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.613989][ T3989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 52.614002][ T3989] Call Trace: [ 52.614010][ T3989] [ 52.614019][ T3989] __dump_stack+0x1d/0x30 [ 52.614046][ T3989] dump_stack_lvl+0xe8/0x140 [ 52.614147][ T3989] dump_stack+0x15/0x1b [ 52.614168][ T3989] should_fail_ex+0x265/0x280 [ 52.614187][ T3989] should_failslab+0x8c/0xb0 [ 52.614272][ T3989] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 52.614313][ T3989] ? __alloc_skb+0x101/0x320 [ 52.614416][ T3989] __alloc_skb+0x101/0x320 [ 52.614445][ T3989] netlink_alloc_large_skb+0xbf/0xf0 [ 52.614562][ T3989] netlink_sendmsg+0x3cf/0x6b0 [ 52.614588][ T3989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.614611][ T3989] __sock_sendmsg+0x145/0x180 [ 52.614638][ T3989] ____sys_sendmsg+0x31e/0x4e0 [ 52.614712][ T3989] ___sys_sendmsg+0x17b/0x1d0 [ 52.614750][ T3989] __x64_sys_sendmsg+0xd4/0x160 [ 52.614785][ T3989] x64_sys_call+0x191e/0x3000 [ 52.614858][ T3989] do_syscall_64+0xd2/0x200 [ 52.614880][ T3989] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.614915][ T3989] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.615024][ T3989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.615050][ T3989] RIP: 0033:0x7f5ecfc0f6c9 [ 52.615068][ T3989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.615090][ T3989] RSP: 002b:00007f5ece677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.615112][ T3989] RAX: ffffffffffffffda RBX: 00007f5ecfe65fa0 RCX: 00007f5ecfc0f6c9 [ 52.615124][ T3989] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000003 [ 52.615146][ T3989] RBP: 00007f5ece677090 R08: 0000000000000000 R09: 0000000000000000 [ 52.615157][ T3989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.615168][ T3989] R13: 00007f5ecfe66038 R14: 00007f5ecfe65fa0 R15: 00007ffe80589668 [ 52.615185][ T3989] [ 52.820728][ T3990] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.898611][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.906460][ T3991] netlink: 168 bytes leftover after parsing attributes in process `syz.4.136'. [ 52.929030][ T3993] loop0: detected capacity change from 0 to 2048 [ 52.940640][ T3990] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.974322][ T3993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.986830][ T3997] loop1: detected capacity change from 0 to 2048 [ 52.994647][ T3993] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.013703][ T3990] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.075786][ T4007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.096292][ T3997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.114087][ T4008] loop2: detected capacity change from 0 to 512 [ 53.122349][ T3990] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.139006][ T4007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.161113][ T3997] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.192024][ T4012] 9pnet_fd: Insufficient options for proto=fd [ 53.244720][ T4015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.259238][ T4015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.282781][ T4007] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.139: bg 0: block 345: padding at end of block bitmap is not set [ 53.299338][ T4015] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.141: bg 0: block 345: padding at end of block bitmap is not set [ 53.301896][ T4014] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.329697][ T4007] EXT4-fs (loop0): Remounting filesystem read-only [ 53.331007][ T4016] netlink: 56 bytes leftover after parsing attributes in process `syz.2.147'. [ 53.345490][ T4015] EXT4-fs (loop1): Remounting filesystem read-only [ 53.367589][ T4016] netlink: 'syz.2.147': attribute type 10 has an invalid length. [ 53.375394][ T4016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.147'. [ 54.023166][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.034984][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.088503][ T4028] lo speed is unknown, defaulting to 1000 [ 54.142469][ T4037] loop1: detected capacity change from 0 to 512 [ 54.156073][ T4037] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.170188][ T4037] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.154: bad orphan inode 131083 [ 54.377385][ T4048] netlink: 96 bytes leftover after parsing attributes in process `syz.2.158'. [ 54.423725][ T4048] netlink: 96 bytes leftover after parsing attributes in process `syz.2.158'. [ 54.535468][ T4052] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.589988][ T4055] netlink: 56 bytes leftover after parsing attributes in process `syz.0.160'. [ 54.603526][ T4057] loop2: detected capacity change from 0 to 128 [ 54.623735][ T4057] netlink: 'ÿ': attribute type 1 has an invalid length. [ 54.640805][ T4052] netlink: 'syz.0.160': attribute type 10 has an invalid length. [ 54.648598][ T4052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.160'. [ 54.652904][ T4054] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.721095][ T4061] loop1: detected capacity change from 0 to 2048 [ 54.752560][ T4061] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.763563][ T4069] sg_write: process 98 (syz.2.164) changed security contexts after opening file descriptor, this is not allowed. [ 54.819682][ T4071] lo speed is unknown, defaulting to 1000 [ 54.826327][ T4074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.850112][ T4074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.877533][ T4069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.164'. [ 54.914067][ T4069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.164'. [ 54.973336][ T4074] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.163: bg 0: block 345: padding at end of block bitmap is not set [ 54.999396][ T4074] EXT4-fs (loop1): Remounting filesystem read-only [ 55.018414][ T4083] loop3: detected capacity change from 0 to 128 [ 55.039387][ T4083] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 55.150582][ T31] Buffer I/O error on dev loop3, logical block 488, lost async page write [ 55.159666][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 55.353688][ T4092] loop3: detected capacity change from 0 to 512 [ 55.370595][ T4092] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.427467][ T4096] FAULT_INJECTION: forcing a failure. [ 55.427467][ T4096] name failslab, interval 1, probability 0, space 0, times 0 [ 55.440296][ T4096] CPU: 1 UID: 0 PID: 4096 Comm: syz.3.173 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.440327][ T4096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.440339][ T4096] Call Trace: [ 55.440345][ T4096] [ 55.440407][ T4096] __dump_stack+0x1d/0x30 [ 55.440436][ T4096] dump_stack_lvl+0xe8/0x140 [ 55.440464][ T4096] dump_stack+0x15/0x1b [ 55.440521][ T4096] should_fail_ex+0x265/0x280 [ 55.440540][ T4096] should_failslab+0x8c/0xb0 [ 55.440575][ T4096] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 55.440704][ T4096] ? __alloc_skb+0x101/0x320 [ 55.440736][ T4096] __alloc_skb+0x101/0x320 [ 55.440765][ T4096] netlink_alloc_large_skb+0xbf/0xf0 [ 55.440879][ T4096] netlink_sendmsg+0x3cf/0x6b0 [ 55.440908][ T4096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.440934][ T4096] __sock_sendmsg+0x145/0x180 [ 55.441026][ T4096] ____sys_sendmsg+0x31e/0x4e0 [ 55.441075][ T4096] ___sys_sendmsg+0x17b/0x1d0 [ 55.441113][ T4096] __x64_sys_sendmsg+0xd4/0x160 [ 55.441144][ T4096] x64_sys_call+0x191e/0x3000 [ 55.441215][ T4096] do_syscall_64+0xd2/0x200 [ 55.441243][ T4096] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.441346][ T4096] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.441384][ T4096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.441416][ T4096] RIP: 0033:0x7f2062eaf6c9 [ 55.441435][ T4096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.441479][ T4096] RSP: 002b:00007f206190f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.441503][ T4096] RAX: ffffffffffffffda RBX: 00007f2063105fa0 RCX: 00007f2062eaf6c9 [ 55.441582][ T4096] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 55.441598][ T4096] RBP: 00007f206190f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.441612][ T4096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.441624][ T4096] R13: 00007f2063106038 R14: 00007f2063105fa0 R15: 00007ffcffe40428 [ 55.441647][ T4096] [ 55.687358][ T4099] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 55.696370][ T4099] rdma_rxe: rxe_newlink: failed to add bond0 [ 55.747103][ T4102] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.894250][ T4113] loop0: detected capacity change from 0 to 1024 [ 55.903025][ T4113] EXT4-fs: Ignoring removed orlov option [ 55.931088][ T4110] lo speed is unknown, defaulting to 1000 [ 55.951889][ T4113] IPv6: Can't replace route, no match found [ 56.023874][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 56.023892][ T29] audit: type=1326 audit(1762810233.143:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 56.064772][ T29] audit: type=1326 audit(1762810233.173:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 56.088178][ T29] audit: type=1326 audit(1762810233.173:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 56.111566][ T29] audit: type=1326 audit(1762810233.173:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 56.134895][ T29] audit: type=1326 audit(1762810233.173:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 56.158342][ T29] audit: type=1326 audit(1762810233.173:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 56.181557][ T29] audit: type=1326 audit(1762810233.173:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 56.204891][ T29] audit: type=1326 audit(1762810233.173:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.0.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff38f05f6c9 code=0x7ffc0000 [ 56.228312][ T29] audit: type=1400 audit(1762810233.173:1541): avc: denied { read write } for pid=4124 comm="syz.0.184" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 56.252550][ T29] audit: type=1400 audit(1762810233.173:1542): avc: denied { open } for pid=4124 comm="syz.0.184" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 56.354867][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.376932][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.387203][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.397486][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.413300][ T4136] FAULT_INJECTION: forcing a failure. [ 56.413300][ T4136] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.426396][ T4136] CPU: 1 UID: 0 PID: 4136 Comm: syz.4.186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.426428][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.426503][ T4136] Call Trace: [ 56.426508][ T4136] [ 56.426516][ T4136] __dump_stack+0x1d/0x30 [ 56.426540][ T4136] dump_stack_lvl+0xe8/0x140 [ 56.426567][ T4136] dump_stack+0x15/0x1b [ 56.426634][ T4136] should_fail_ex+0x265/0x280 [ 56.426656][ T4136] should_fail+0xb/0x20 [ 56.426678][ T4136] should_fail_usercopy+0x1a/0x20 [ 56.426700][ T4136] _copy_from_user+0x1c/0xb0 [ 56.426770][ T4136] ___sys_sendmsg+0xc1/0x1d0 [ 56.426804][ T4136] __x64_sys_sendmsg+0xd4/0x160 [ 56.426829][ T4136] x64_sys_call+0x191e/0x3000 [ 56.426853][ T4136] do_syscall_64+0xd2/0x200 [ 56.426874][ T4136] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.426911][ T4136] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.426947][ T4136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.426969][ T4136] RIP: 0033:0x7fc32ec8f6c9 [ 56.427053][ T4136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.427071][ T4136] RSP: 002b:00007fc32d6ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.427091][ T4136] RAX: ffffffffffffffda RBX: 00007fc32eee5fa0 RCX: 00007fc32ec8f6c9 [ 56.427104][ T4136] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 56.427116][ T4136] RBP: 00007fc32d6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 56.427128][ T4136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.427140][ T4136] R13: 00007fc32eee6038 R14: 00007fc32eee5fa0 R15: 00007ffebc765e38 [ 56.427194][ T4136] [ 56.659405][ T4142] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.668300][ T4142] rdma_rxe: rxe_newlink: failed to add bond0 [ 56.672043][ T4140] loop0: detected capacity change from 0 to 2048 [ 56.690421][ T4140] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.753735][ T4145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.763922][ T4145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.882075][ T3964] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 56.913797][ T3964] EXT4-fs (loop0): Remounting filesystem read-only [ 56.925901][ T4150] loop4: detected capacity change from 0 to 512 [ 56.934337][ T4152] loop2: detected capacity change from 0 to 128 [ 56.957020][ T4152] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 56.984794][ T4156] loop3: detected capacity change from 0 to 1024 [ 56.989472][ T4154] sctp: [Deprecated]: syz.1.193 (pid 4154) Use of int in max_burst socket option. [ 56.989472][ T4154] Use struct sctp_assoc_value instead [ 56.994408][ T4156] EXT4-fs: Ignoring removed orlov option [ 57.023294][ T4159] siw: device registration error -23 [ 57.090343][ T4162] bio_check_eod: 219 callbacks suppressed [ 57.090358][ T4162] syz.2.192: attempt to access beyond end of device [ 57.090358][ T4162] loop2: rw=1, sector=137, nr_sectors = 8 limit=128 [ 57.115079][ T4162] syz.2.192: attempt to access beyond end of device [ 57.115079][ T4162] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 57.129108][ T4156] IPv6: Can't replace route, no match found [ 57.152359][ T2968] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 57.159849][ T2968] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 57.163070][ T4166] loop4: detected capacity change from 0 to 128 [ 57.167293][ T2968] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 57.180976][ T2968] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 57.183347][ T4162] syz.2.192: attempt to access beyond end of device [ 57.183347][ T4162] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 57.188384][ T2968] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 57.208888][ T2968] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 57.216313][ T2968] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 57.223811][ T2968] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 57.228239][ T4166] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 57.231321][ T2968] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 57.243933][ T4162] syz.2.192: attempt to access beyond end of device [ 57.243933][ T4162] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 57.247661][ T2968] hid-generic 0003:0003:0000.0001: unknown main item tag 0x0 [ 57.269187][ T2968] hid-generic 0003:0003:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 57.282093][ T4162] syz.2.192: attempt to access beyond end of device [ 57.282093][ T4162] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 57.298130][ T4162] syz.2.192: attempt to access beyond end of device [ 57.298130][ T4162] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 57.328189][ T4170] syz.4.196: attempt to access beyond end of device [ 57.328189][ T4170] loop4: rw=1, sector=137, nr_sectors = 8 limit=128 [ 57.353085][ T4169] loop3: detected capacity change from 0 to 2048 [ 57.359600][ T4162] syz.2.192: attempt to access beyond end of device [ 57.359600][ T4162] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 57.374188][ T4162] syz.2.192: attempt to access beyond end of device [ 57.374188][ T4162] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 57.388533][ T4162] syz.2.192: attempt to access beyond end of device [ 57.388533][ T4162] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 57.402175][ T4169] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.415864][ T4169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.447996][ T4169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.490944][ T407] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 57.500727][ T52] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 57.558278][ T4177] netlink: '+}[@': attribute type 10 has an invalid length. [ 57.598696][ T4176] loop2: detected capacity change from 0 to 8192 [ 57.639332][ T3510] loop2: p2 p3 p4 [ 57.643205][ T3510] loop2: p2 start 164919041 is beyond EOD, truncated [ 57.649922][ T3510] loop2: p3 size 66846464 extends beyond EOD, truncated [ 57.657252][ T3510] loop2: p4 size 37048832 extends beyond EOD, truncated [ 57.668565][ T4176] loop2: p2 p3 p4 [ 57.672606][ T4176] loop2: p2 start 164919041 is beyond EOD, truncated [ 57.679409][ T4176] loop2: p3 size 66846464 extends beyond EOD, truncated [ 57.683165][ T4182] netlink: 'syz.0.198': attribute type 11 has an invalid length. [ 57.687092][ T4176] loop2: p4 size 37048832 extends beyond EOD, truncated [ 57.694209][ T4182] __nla_validate_parse: 4 callbacks suppressed [ 57.694226][ T4182] netlink: 44 bytes leftover after parsing attributes in process `syz.0.198'. [ 57.722910][ T4182] FAULT_INJECTION: forcing a failure. [ 57.722910][ T4182] name failslab, interval 1, probability 0, space 0, times 0 [ 57.735620][ T4182] CPU: 1 UID: 0 PID: 4182 Comm: syz.0.198 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.735664][ T4182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 57.735676][ T4182] Call Trace: [ 57.735683][ T4182] [ 57.735691][ T4182] __dump_stack+0x1d/0x30 [ 57.735718][ T4182] dump_stack_lvl+0xe8/0x140 [ 57.735788][ T4182] dump_stack+0x15/0x1b [ 57.735805][ T4182] should_fail_ex+0x265/0x280 [ 57.735825][ T4182] should_failslab+0x8c/0xb0 [ 57.735886][ T4182] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 57.735928][ T4182] ? __alloc_skb+0x101/0x320 [ 57.736036][ T4182] __alloc_skb+0x101/0x320 [ 57.736090][ T4182] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 57.736133][ T4182] ? veth_set_features+0x49/0x180 [ 57.736166][ T4182] ? __pfx_rtnetlink_event+0x10/0x10 [ 57.736217][ T4182] rtnetlink_event+0x18c/0x200 [ 57.736240][ T4182] raw_notifier_call_chain+0x6f/0x1b0 [ 57.736264][ T4182] ? call_netdevice_notifiers_info+0x9c/0x100 [ 57.736297][ T4182] call_netdevice_notifiers_info+0xae/0x100 [ 57.736368][ T4182] netdev_update_features+0x62/0x90 [ 57.736403][ T4182] veth_xdp+0x5d3/0x650 [ 57.736437][ T4182] dev_xdp_install+0x2a7/0x3a0 [ 57.736486][ T4182] ? __pfx_veth_xdp+0x10/0x10 [ 57.736518][ T4182] bpf_xdp_link_release+0x25c/0x3a0 [ 57.736547][ T4182] ? __pfx_bpf_link_release+0x10/0x10 [ 57.736607][ T4182] bpf_link_free+0xae/0x340 [ 57.736630][ T4182] ? __pfx_bpf_link_release+0x10/0x10 [ 57.736671][ T4182] bpf_link_release+0x45/0x60 [ 57.736772][ T4182] __fput+0x29b/0x650 [ 57.736795][ T4182] ____fput+0x1c/0x30 [ 57.736818][ T4182] task_work_run+0x131/0x1a0 [ 57.736856][ T4182] exit_to_user_mode_loop+0xed/0x110 [ 57.736962][ T4182] do_syscall_64+0x1d6/0x200 [ 57.736987][ T4182] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.737112][ T4182] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 57.737217][ T4182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.737239][ T4182] RIP: 0033:0x7ff38f05f6c9 [ 57.737259][ T4182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.737282][ T4182] RSP: 002b:00007ff38dac7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 57.737336][ T4182] RAX: 0000000000000000 RBX: 00007ff38f2b5fa0 RCX: 00007ff38f05f6c9 [ 57.737353][ T4182] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 57.737369][ T4182] RBP: 00007ff38dac7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.737385][ T4182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.737401][ T4182] R13: 00007ff38f2b6038 R14: 00007ff38f2b5fa0 R15: 00007ffdef337e08 [ 57.737425][ T4182] [ 58.081722][ T4187] Zero length message leads to an empty skb [ 58.218362][ T4197] loop0: detected capacity change from 0 to 512 [ 58.222121][ T4198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.202'. [ 58.233856][ T4198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'. [ 58.244851][ T4198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 58.334983][ T4204] loop0: detected capacity change from 0 to 512 [ 58.388591][ T4210] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.416008][ T4212] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 58.425757][ T4212] rdma_rxe: rxe_newlink: failed to add bond0 [ 58.433578][ T4210] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.452068][ T4215] netlink: 168 bytes leftover after parsing attributes in process `syz.3.206'. [ 58.452073][ T4214] loop0: detected capacity change from 0 to 2048 [ 58.471102][ T4214] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.500759][ T4210] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.534730][ T4218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.546137][ T4218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.556301][ T4210] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.610572][ T4220] loop2: detected capacity change from 0 to 128 [ 58.634731][ T4220] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 58.677183][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.688980][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.706222][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.724069][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.749832][ T52] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 58.771125][ T4224] loop2: detected capacity change from 0 to 512 [ 58.800444][ T4224] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.872353][ T4230] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 58.900120][ T4230] netlink: 56 bytes leftover after parsing attributes in process `syz.2.213'. [ 58.909715][ T4230] netlink: 'syz.2.213': attribute type 10 has an invalid length. [ 58.917476][ T4230] netlink: 40 bytes leftover after parsing attributes in process `syz.2.213'. [ 59.041253][ T4238] lo speed is unknown, defaulting to 1000 [ 59.241621][ T4246] loop3: detected capacity change from 0 to 512 [ 59.318620][ T407] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 59.333923][ T407] EXT4-fs (loop0): Remounting filesystem read-only [ 59.428253][ T4249] lo speed is unknown, defaulting to 1000 [ 59.588296][ T4256] loop0: detected capacity change from 0 to 2048 [ 59.610623][ T4256] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.675165][ T4259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.693736][ T4259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.770118][ T4259] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.221: bg 0: block 345: padding at end of block bitmap is not set [ 59.784715][ T4259] EXT4-fs (loop0): Remounting filesystem read-only [ 59.891710][ T4261] loop1: detected capacity change from 0 to 1024 [ 59.907251][ T4261] EXT4-fs: Ignoring removed orlov option [ 59.924170][ T4261] IPv6: Can't replace route, no match found [ 59.932537][ T4264] loop2: detected capacity change from 0 to 512 [ 59.951212][ T4264] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.973685][ T4268] siw: device registration error -23 [ 60.024888][ T4273] loop1: detected capacity change from 0 to 512 [ 60.031777][ T4273] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.043052][ T4273] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.226: bad orphan inode 131083 [ 60.231889][ T4279] lo speed is unknown, defaulting to 1000 [ 60.279099][ T4283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.227'. [ 60.295212][ T4283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.227'. [ 60.308192][ T4283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.227'. [ 60.419292][ T4291] loop1: detected capacity change from 0 to 512 [ 60.512757][ T4296] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.582676][ T4296] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.640718][ T4296] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.720585][ T4296] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.803619][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.868989][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.882113][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.890606][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.041008][ C1] hrtimer: interrupt took 28846 ns [ 61.053237][ T4305] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8212 sclass=netlink_xfrm_socket pid=4305 comm=syz.4.235 [ 61.083144][ T4307] loop2: detected capacity change from 0 to 512 [ 61.111115][ T4307] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.197481][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 61.197495][ T29] audit: type=1326 audit(1762810238.313:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32ec8f6c9 code=0x7ffc0000 [ 61.199701][ T4313] loop3: detected capacity change from 0 to 2048 [ 61.239567][ T29] audit: type=1326 audit(1762810238.323:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fc32ec8f6c9 code=0x7ffc0000 [ 61.262908][ T29] audit: type=1326 audit(1762810238.323:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32ec8f6c9 code=0x7ffc0000 [ 61.286355][ T29] audit: type=1326 audit(1762810238.323:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc32ec8f6c9 code=0x7ffc0000 [ 61.309917][ T29] audit: type=1326 audit(1762810238.323:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32ec8f6c9 code=0x7ffc0000 [ 61.333267][ T29] audit: type=1326 audit(1762810238.323:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc32ec8f6c9 code=0x7ffc0000 [ 61.356766][ T29] audit: type=1326 audit(1762810238.323:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32ec8f6c9 code=0x7ffc0000 [ 61.380144][ T29] audit: type=1326 audit(1762810238.323:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4310 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc32ec8f6c9 code=0x7ffc0000 [ 61.404461][ T29] audit: type=1326 audit(1762810238.453:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4317 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073a2df6c9 code=0x7ffc0000 [ 61.428159][ T29] audit: type=1326 audit(1762810238.453:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4317 comm="syz.2.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073a2df6c9 code=0x7ffc0000 [ 61.498116][ T4313] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.573145][ T4325] siw: device registration error -23 [ 61.598083][ T4313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.609196][ T4313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.628203][ T4331] loop0: detected capacity change from 0 to 2048 [ 61.677350][ T4329] loop1: detected capacity change from 0 to 8192 [ 61.697687][ T4331] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.742417][ T3305] loop1: p2 p3 p4 [ 61.746250][ T3305] loop1: p2 start 164919041 is beyond EOD, truncated [ 61.753019][ T3305] loop1: p3 size 66846464 extends beyond EOD, truncated [ 61.799417][ T4341] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.244: bg 0: block 345: padding at end of block bitmap is not set [ 61.815308][ T3305] loop1: p4 size 37048832 extends beyond EOD, truncated [ 61.851077][ T4343] netlink: 'syz.4.246': attribute type 10 has an invalid length. [ 61.874958][ T4329] loop1: p2 p3 p4 [ 61.879425][ T4341] EXT4-fs (loop0): Remounting filesystem read-only [ 61.888487][ T4337] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.909226][ T4329] loop1: p2 start 164919041 is beyond EOD, truncated [ 61.915971][ T4329] loop1: p3 size 66846464 extends beyond EOD, truncated [ 61.945725][ T4340] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.969078][ T4329] loop1: p4 size 37048832 extends beyond EOD, truncated [ 62.019479][ T3005] loop1: p2 p3 p4 [ 62.023507][ T3005] loop1: p2 start 164919041 is beyond EOD, truncated [ 62.030265][ T3005] loop1: p3 size 66846464 extends beyond EOD, truncated [ 62.073913][ T3005] loop1: p4 size 37048832 extends beyond EOD, truncated [ 62.104227][ T4353] loop0: detected capacity change from 0 to 512 [ 62.143333][ T4353] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.247135][ T4358] loop2: detected capacity change from 0 to 512 [ 62.311106][ T4360] loop4: detected capacity change from 0 to 2048 [ 62.368317][ T4360] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.461032][ T4370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.483916][ T4370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.533746][ T4378] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 62.549075][ T4370] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.253: bg 0: block 345: padding at end of block bitmap is not set [ 62.569458][ T4378] rdma_rxe: rxe_newlink: failed to add bond0 [ 62.573502][ T4374] loop1: detected capacity change from 0 to 512 [ 62.611723][ T4382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.628426][ T4370] EXT4-fs (loop4): Remounting filesystem read-only [ 62.733328][ T4388] loop1: detected capacity change from 0 to 512 [ 62.764313][ T4388] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.784068][ T4390] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.887375][ T4397] loop1: detected capacity change from 0 to 2048 [ 62.900574][ T4399] loop2: detected capacity change from 0 to 512 [ 62.931030][ T4397] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.974395][ T4397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.984836][ T4397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.210876][ T4412] loop3: detected capacity change from 0 to 512 [ 63.384300][ T4420] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 63.391573][ T4420] batman_adv: batadv0: Removing interface: veth1_vlan [ 63.515262][ T4424] loop0: detected capacity change from 0 to 8192 [ 63.570614][ T4424] loop0: p2 p3 p4 [ 63.599674][ T4424] loop0: p2 start 164919041 is beyond EOD, truncated [ 63.606449][ T4424] loop0: p3 size 66846464 extends beyond EOD, truncated [ 63.637247][ T4431] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.657649][ T4424] loop0: p4 size 37048832 extends beyond EOD, truncated [ 63.714617][ T4436] siw: device registration error -23 [ 63.775433][ T4439] loop1: detected capacity change from 0 to 1024 [ 63.817674][ T4442] sctp: [Deprecated]: syz.3.283 (pid 4442) Use of int in max_burst socket option. [ 63.817674][ T4442] Use struct sctp_assoc_value instead [ 63.929423][ T4439] EXT4-fs: Ignoring removed orlov option [ 64.027862][ T4439] IPv6: Can't replace route, no match found [ 64.042743][ T4455] __nla_validate_parse: 3 callbacks suppressed [ 64.042774][ T4455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.284'. [ 64.098485][ T3410] hid_parser_main: 8 callbacks suppressed [ 64.104320][ T3410] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 64.111913][ T3410] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 64.119355][ T3410] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 64.126804][ T3410] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 64.134281][ T3410] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 64.141791][ T3410] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 64.149224][ T3410] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 64.150000][ T4455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.284'. [ 64.156760][ T3410] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 64.173102][ T3410] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 64.180578][ T3410] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 64.189521][ T3410] hid-generic 0003:0003:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 64.473985][ T4450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.284'. [ 64.527358][ T4464] lo speed is unknown, defaulting to 1000 [ 64.706979][ T4471] loop0: detected capacity change from 0 to 2048 [ 64.733229][ T4471] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.747522][ T4479] loop3: detected capacity change from 0 to 512 [ 64.801668][ T4482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.819421][ T4482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.842583][ T4482] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.289: bg 0: block 345: padding at end of block bitmap is not set [ 64.844851][ T4484] siw: device registration error -23 [ 64.857193][ T4482] EXT4-fs (loop0): Remounting filesystem read-only [ 64.915838][ T4492] loop3: detected capacity change from 0 to 2048 [ 64.922940][ T4492] ext4: Unknown parameter 'euid<00000000000000000000' [ 65.011857][ T4498] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.050445][ T4498] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.100703][ T4498] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.139897][ T4505] loop3: detected capacity change from 0 to 2048 [ 65.150797][ T4505] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.181105][ T4498] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.227735][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.237044][ T4508] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.302: bg 0: block 345: padding at end of block bitmap is not set [ 65.243882][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.260116][ T4508] EXT4-fs (loop3): Remounting filesystem read-only [ 65.268045][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.303388][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.374166][ T4511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.396042][ T4511] netlink: 56 bytes leftover after parsing attributes in process `syz.1.303'. [ 65.406332][ T4511] netlink: 'syz.1.303': attribute type 10 has an invalid length. [ 65.414115][ T4511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.303'. [ 65.478697][ T4515] loop3: detected capacity change from 0 to 128 [ 65.486312][ T4515] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 65.525202][ T4516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.304'. [ 65.542959][ T4516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'. [ 65.554808][ T4516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'. [ 65.573279][ T4521] bio_check_eod: 289 callbacks suppressed [ 65.573292][ T4521] syz.3.305: attempt to access beyond end of device [ 65.573292][ T4521] loop3: rw=1, sector=137, nr_sectors = 8 limit=128 [ 65.593138][ T4521] syz.3.305: attempt to access beyond end of device [ 65.593138][ T4521] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 65.606395][ T4521] syz.3.305: attempt to access beyond end of device [ 65.606395][ T4521] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 65.620077][ T4521] syz.3.305: attempt to access beyond end of device [ 65.620077][ T4521] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 65.633451][ T4521] syz.3.305: attempt to access beyond end of device [ 65.633451][ T4521] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 65.646650][ T4521] syz.3.305: attempt to access beyond end of device [ 65.646650][ T4521] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 65.668868][ T4521] syz.3.305: attempt to access beyond end of device [ 65.668868][ T4521] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 65.682121][ T4521] syz.3.305: attempt to access beyond end of device [ 65.682121][ T4521] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 65.695618][ T4521] syz.3.305: attempt to access beyond end of device [ 65.695618][ T4521] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 65.709164][ T4521] syz.3.305: attempt to access beyond end of device [ 65.709164][ T4521] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 65.745311][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 65.785627][ T4525] siw: device registration error -23 [ 65.823024][ T4529] loop4: detected capacity change from 0 to 512 [ 65.856095][ T4529] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.982044][ T4542] loop0: detected capacity change from 0 to 1024 [ 65.992186][ T4542] EXT4-fs: Ignoring removed orlov option [ 65.996705][ T4540] loop4: detected capacity change from 0 to 512 [ 66.010957][ T4542] IPv6: Can't replace route, no match found [ 66.074798][ T4547] loop4: detected capacity change from 0 to 1024 [ 66.107271][ T4547] EXT4-fs: Ignoring removed orlov option [ 66.132926][ T4547] IPv6: Can't replace route, no match found [ 66.144465][ T4553] siw: device registration error -23 [ 66.246692][ T4560] siw: device registration error -23 [ 66.324195][ T4566] loop1: detected capacity change from 0 to 2048 [ 66.350039][ T4566] ext4: Unknown parameter 'euid<00000000000000000000' [ 66.395461][ T29] kauditd_printk_skb: 670 callbacks suppressed [ 66.395515][ T29] audit: type=1326 audit(1762810243.513:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecfc0f6c9 code=0x7ffc0000 [ 66.466786][ T29] audit: type=1326 audit(1762810243.513:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ecfc0f6c9 code=0x7ffc0000 [ 66.490267][ T29] audit: type=1326 audit(1762810243.513:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecfc0f6c9 code=0x7ffc0000 [ 66.513735][ T29] audit: type=1326 audit(1762810243.513:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ecfc0f6c9 code=0x7ffc0000 [ 66.537126][ T29] audit: type=1326 audit(1762810243.513:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecfc0f6c9 code=0x7ffc0000 [ 66.560605][ T29] audit: type=1326 audit(1762810243.513:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ecfc0f6c9 code=0x7ffc0000 [ 66.584060][ T29] audit: type=1326 audit(1762810243.513:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecfc0f6c9 code=0x7ffc0000 [ 66.607425][ T29] audit: type=1326 audit(1762810243.513:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ecfc0f6c9 code=0x7ffc0000 [ 66.615689][ T4574] loop1: detected capacity change from 0 to 512 [ 66.630823][ T29] audit: type=1326 audit(1762810243.513:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ecfc0f6c9 code=0x7ffc0000 [ 66.642354][ T4576] loop4: detected capacity change from 0 to 1024 [ 66.660554][ T29] audit: type=1326 audit(1762810243.513:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4565 comm="syz.1.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ecfc0f6c9 code=0x7ffc0000 [ 66.695030][ T4576] EXT4-fs: Ignoring removed orlov option [ 66.754465][ T4576] IPv6: Can't replace route, no match found [ 66.917460][ T4591] loop1: detected capacity change from 0 to 2048 [ 67.054284][ T4591] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.078340][ T4591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.111902][ T4608] loop2: detected capacity change from 0 to 1024 [ 67.119160][ T4591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.132119][ T4608] EXT4-fs: Ignoring removed orlov option [ 67.194957][ T4608] IPv6: Can't replace route, no match found [ 67.319815][ T4626] siw: device registration error -23 [ 67.362041][ T4623] loop4: detected capacity change from 0 to 2048 [ 67.389554][ T407] ================================================================== [ 67.397698][ T407] BUG: KCSAN: data-race in touch_atime / touch_atime [ 67.404432][ T407] [ 67.406769][ T407] write to 0xffff88811abc0c90 of 4 bytes by task 37 on cpu 0: [ 67.414233][ T407] touch_atime+0x1e8/0x340 [ 67.418672][ T407] shmem_file_read_iter+0x477/0x540 [ 67.423886][ T407] lo_rw_aio+0x6a0/0x760 [ 67.428141][ T407] loop_process_work+0x52d/0xa60 [ 67.433094][ T407] loop_workfn+0x31/0x40 [ 67.437354][ T407] process_scheduled_works+0x4ce/0x9d0 [ 67.442852][ T407] worker_thread+0x582/0x770 [ 67.447443][ T407] kthread+0x489/0x510 [ 67.451512][ T407] ret_from_fork+0x122/0x1b0 [ 67.456124][ T407] ret_from_fork_asm+0x1a/0x30 [ 67.460900][ T407] [ 67.463228][ T407] read to 0xffff88811abc0c90 of 4 bytes by task 407 on cpu 1: [ 67.470681][ T407] touch_atime+0x194/0x340 [ 67.475113][ T407] shmem_file_read_iter+0x477/0x540 [ 67.480343][ T407] lo_rw_aio+0x6a0/0x760 [ 67.484604][ T407] loop_process_work+0x52d/0xa60 [ 67.489557][ T407] loop_rootcg_workfn+0x22/0x30 [ 67.494418][ T407] process_scheduled_works+0x4ce/0x9d0 [ 67.499898][ T407] worker_thread+0x582/0x770 [ 67.504492][ T407] kthread+0x489/0x510 [ 67.508562][ T407] ret_from_fork+0x122/0x1b0 [ 67.513166][ T407] ret_from_fork_asm+0x1a/0x30 [ 67.517938][ T407] [ 67.520261][ T407] value changed: 0x1e055c39 -> 0x1e9df2b9 [ 67.525974][ T407] [ 67.528313][ T407] Reported by Kernel Concurrency Sanitizer on: [ 67.534459][ T407] CPU: 1 UID: 0 PID: 407 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.544266][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.554328][ T407] Workqueue: loop4 loop_rootcg_workfn [ 67.559726][ T407] ================================================================== [ 67.572479][ T4631] loop2: detected capacity change from 0 to 512 [ 67.579329][ T4630] loop3: detected capacity change from 0 to 2048 [ 67.617205][ T4623] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.629589][ T4623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.638224][ T4623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.655842][ T4630] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.867644][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 67.882336][ T37] EXT4-fs (loop3): Remounting filesystem read-only