last executing test programs: 5.427202203s ago: executing program 1 (id=153): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @random="d683c6f314df", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x1, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "9cc18437269182954156db8db1d7014fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab75a4cfd8d760c853d36fb7cd232e8103ff26"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0xffffffffffffffcb, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT], 0x1, 0x1282, &(0x7f0000002880)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000008) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xd, 0xffff}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffdce, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2c}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 5.051787659s ago: executing program 1 (id=158): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1b, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x104) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x318a054d}, 0x18) wait4(0x0, 0x0, 0x40000000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 4.767251653s ago: executing program 1 (id=163): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x22c000, 0x800}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsgid(0xee00) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000053c0)={0x18, r6, 0x301, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x2000000000000000}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0xff9e, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES32=r4], 0x7c}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000009d47dc48a94fb16f6dad0000000000005ac6f8f69665d3f6424a92be09775a82af9efda02186af1256ae97efd266c40a655ab636bee55226ed9c3a36291f85af4de099aea1a8ff42a889c737118607000000000000004f4e11b343500964a013577098549894900902da01c1513c1e00700467deba0445a9b748d1ee95d84d9343c59a45cea73524a6775cf7aa7899d50c6b447600000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x8, r8}, 0x10) 4.634646566s ago: executing program 1 (id=165): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2800000, &(0x7f0000000400)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@abort}, {@delalloc}, {@nobh}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fa}}, {@user_xattr}, {@jqfmt_vfsv0}]}, 0x1, 0x57c, &(0x7f0000000a00)="$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") open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) fchmodat(r0, &(0x7f0000000000)='./file1\x00', 0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x300, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780), 0x0, 0xa000000}, 0x20) lsm_get_self_attr(0x65, &(0x7f0000000680)={0x0, 0x0, 0xf1, 0xd1, ""/209}, &(0x7f0000000440)=0xf1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2, 0xff, 0xb26) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) 4.169633743s ago: executing program 1 (id=170): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x64000600) r5 = gettid() epoll_create1(0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) tkill(r5, 0x7) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x4e4b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 1.787968631s ago: executing program 0 (id=201): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @random="d683c6f314df", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x1, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "9cc18437269182954156db8db1d7014fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab75a4cfd8d760c853d36fb7cd232e8103ff26"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4}, 0x8) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT], 0x1, 0x1282, &(0x7f0000002880)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000008) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xd, 0xffff}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffdce, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2c}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 1.770389871s ago: executing program 4 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1010, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000240)=@filename='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r6, &(0x7f0000000d80)={0x2, 0x4e24, @loopback}, 0x10) recvfrom(r6, 0x0, 0x0, 0x100e3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@discard}, {@init_itable}, {@noquota}, {@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@minixdf}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0x100000000}}]}, 0xfc, 0x574, &(0x7f0000000e40)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r11}, 0x10) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r7, 0x0) 1.497427366s ago: executing program 2 (id=205): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000ac0)) io_setup(0x7, &(0x7f0000000bc0)=0x0) r2 = eventfd2(0x0, 0x80001) io_submit(r1, 0x1, &(0x7f0000000980)=[&(0x7f0000000080)={0x1000000, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000300), 0x0, 0x4000000005, 0x0, 0x1}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000500)="05326fe32399b0d7eec086c7cf2ffe53da6afc1a21296fe5798f9765d8430dc007a753ffcd6f73b0944c58924e1d336a", 0x30}, {&(0x7f00000005c0)="fb79877a9fba77280c37a76113fd2877f15f4a9f190231e112be55af896a833dd48c51ba54523e32ae10575293c337438df0faadaa563ea44bec98fb81100b390d976371a11153", 0x47}, {&(0x7f0000000640)="f158976d", 0x4}, {&(0x7f0000000680)="b363143de9835bab19b1f57a2bc918379e887cb565488ea4bac63ce2ca486e3569cd48ab30e00434ae6e216e4670", 0x2e}, {&(0x7f0000000780)="7aed5f3333b8cb057d0ad83f4dc88cac5870a80082a3b7dda99c919e249bf2a6af2e307ac795f858c3728740473d9e33f40b1617a690f73e3f4b0c3725aebec3299ced4976a3334a449cac45e3d372bc4bb272ea1eea987096c3b9ff4001adc1f416407de379bd1ce97cf2d99accdf5bb48e056742b01bd7f3d2e74221e9cb0bfc75bfbbb50cb7191f6b218232154514079e90bf10d61b1ee214129663af5955ad35261a8fc8b2750f", 0xa9}, {&(0x7f0000000a00)="d64fd1c581bd59780a3d825fc20c29a8df9e343cb4da3a3cd4f7e08089730b66885fab64b29fd6a27c4e034fb5e0eae7a5e9e4437b6c9048553214ca7336bbf80c30c762e29637e39fc5cbeb486b3fd8bb9b5aaff31d935412d1cbc3153ca52207282fc881bdfa1f3bdb0bcbd2ed7e89d49a211efb75a3136148ebb357301731589bc4ffdd568f4377f00ce9b70e12a042781fb0f24abba0812acdcbca9106608a63e06dd380ef800dade6c13b3f49569c21", 0xb2}], 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES16], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x97160f11a6a6baa0, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x80000000}, 0x18) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r3], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) 1.469609896s ago: executing program 0 (id=206): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 1.389328687s ago: executing program 3 (id=207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.353645688s ago: executing program 2 (id=208): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f000001fe80)="$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") syz_open_dev$usbfs(&(0x7f0000000200), 0xc55d, 0x400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a000000140007800800114008000000050015000c00000012000300686173683a6e6574"], 0x60}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x10010000004e20, 0x0, @local, 0xe}, 0x1c) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mknod(0x0, 0x0, 0x0) ftruncate(r4, 0x81fd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x1, 0x4, @loopback, 0x3}, 0x1c) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2100, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000980008800c0007800800060000000000240007"], 0xd0}}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40843) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1.346147948s ago: executing program 3 (id=209): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 1.289752319s ago: executing program 3 (id=210): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f00000002c0), 0xff, 0x5be, &(0x7f0000001440)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400e8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 1.284017779s ago: executing program 4 (id=211): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x200}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 1.22206981s ago: executing program 0 (id=212): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x200}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 1.142635061s ago: executing program 4 (id=213): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f00000002c0), 0xff, 0x5be, &(0x7f0000001440)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400e8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 980.049684ms ago: executing program 2 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0xfffffffc, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4010) 954.784124ms ago: executing program 3 (id=215): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000280), &(0x7f00000006c0)='%pI4 \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 937.892395ms ago: executing program 0 (id=216): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x6f, &(0x7f0000000240)={@local, @random="d683c6f314df", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x1, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}, "9cc18437269182954156db8db1d7014fa662d8c2ac0cdacd59074a6b7fad6491599eab1b79e8fb43bc17ab75a4cfd8d760c853d36fb7cd232e8103ff26"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4}, 0x8) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT], 0x1, 0x1282, &(0x7f0000002880)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000008) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xd, 0xffff}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffdce, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2c}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 747.620487ms ago: executing program 3 (id=217): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x2a020480) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400002310001fff00000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 707.555928ms ago: executing program 2 (id=218): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000ac0)) io_setup(0x7, &(0x7f0000000bc0)=0x0) r2 = eventfd2(0x0, 0x80001) io_submit(r1, 0x1, &(0x7f0000000980)=[&(0x7f0000000080)={0x1000000, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000300), 0x0, 0x4000000005, 0x0, 0x1}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f0000000500)="05326fe32399b0d7eec086c7cf2ffe53da6afc1a21296fe5798f9765d8430dc007a753ffcd6f73b0944c58924e1d336a", 0x30}, {&(0x7f00000005c0)="fb79877a9fba77280c37a76113fd2877f15f4a9f190231e112be55af896a833dd48c51ba54523e32ae10575293c337438df0faadaa563ea44bec98fb81100b390d976371a11153", 0x47}, {&(0x7f0000000640)="f158976d", 0x4}, {&(0x7f0000000680)="b363143de9835bab19b1f57a2bc918379e887cb565488ea4bac63ce2ca486e3569cd48ab30e00434ae6e216e4670", 0x2e}, {0x0}, {&(0x7f0000000780)="7aed5f3333b8cb057d0ad83f4dc88cac5870a80082a3b7dda99c919e249bf2a6af2e307ac795f858c3728740473d9e33f40b1617a690f73e3f4b0c3725aebec3299ced4976a3334a449cac45e3d372bc4bb272ea1eea987096c3b9ff4001adc1f416407de379bd1ce97cf2d99accdf5bb48e056742b01bd7f3d2e74221e9cb0bfc75bfbbb50cb7191f6b218232154514079e90bf10d61b1ee214129663af5955ad35261a8fc8b2750f", 0xa9}, {&(0x7f0000000a00)="d64fd1c581bd59780a3d825fc20c29a8df9e343cb4da3a3cd4f7e08089730b66885fab64b29fd6a27c4e034fb5e0eae7a5e9e4437b6c9048553214ca7336bbf80c30c762e29637e39fc5cbeb486b3fd8bb9b5aaff31d935412d1cbc3153ca52207282fc881bdfa1f3bdb0bcbd2ed7e89d49a211efb75a3136148ebb357301731589bc4ffdd568f4377f00ce9b70e12a042781fb0f24abba0812acdcbca9106608a63e06dd380ef800dade6c13b3f49569c21", 0xb2}], 0x7) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES16], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x97160f11a6a6baa0, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x80000000}, 0x18) socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r3], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) 508.314771ms ago: executing program 4 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 416.296273ms ago: executing program 2 (id=220): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 415.660773ms ago: executing program 2 (id=221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1010, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000240)=@filename='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r6, &(0x7f0000000d80)={0x2, 0x4e24, @loopback}, 0x10) recvfrom(r6, 0x0, 0x0, 0x100e3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@discard}, {@init_itable}, {@noquota}, {@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@minixdf}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0x100000000}}]}, 0xfc, 0x574, &(0x7f0000000e40)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r11}, 0x10) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r7, 0x0) 375.614293ms ago: executing program 4 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x80, 0xf880, 0x9, 0x10001, {{0x7, 0x4, 0x2, 0x8, 0x1c, 0x67, 0x0, 0x81, 0x4, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x8, 0xc4, 0x0, 0x7, [0x4]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmmsg(r5, &(0x7f0000002fc0)=[{{&(0x7f0000000680)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000840)="f55a0d22bebe821e8c9c1a2713c02e5b40e8527e15955d7a072b1eb87a6c1f2f80850d7e017092fa8a211149ab534917425f77c680322ea758e95fad639abc3863df880d6b6f0b7bd2f57ecd6ba02d2b86a51496196538d2d08510ad64cde8f1d224eb1e7b13d39bae316226cdc35f9ff4a3264e03e0bfab2b5e099a10a1eb7051c12023cb634e367b0b5a5815eb20b40248a30606841eb5f2ce229cbe7130af770fb7fd526328e2ef72358752b5d01e6d8fbf5d2cabedafa32ad884e120a5a188f73f83a26e82965417d8cf1fcb5afe63f5bc2e71c13fdc", 0xd8}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="28136e925f924452db53eab2a04e1e1628b4df0afeb637d686358d1d80d91af03811451770dfbf6466eb0243b13a6705904997f029f918cc4620b8903709e48015400643c51e89f5ecefeeabaaa2037f414138d9093207e5e4f8c111222cd382deb6461a67e4f44a9446f51135ba1544889649a9983c88ec202be69e831fc3ad05680c3543ccc0af9aa8cfc32b05c054c524045cafb9b08b4da417ddbc2ee74c26e2836b5154500c41d2cafb410fee2c5ee949af26968e3242a6b646e1bbc2b0", 0xc0}], 0x3, &(0x7f0000000940)=[{0x68, 0x118, 0x7, "3b3384a530d9c45c555453367baa1e25ed61a7c421b167c3dec2bdb0e94c9dfe797c10b9c5068bc3669911d585042668353f94a0a061e291c3fc79bedde733e1957e24804a3eeafdb7e66179115013ec43312a92730cd39a"}], 0x68}}, {{&(0x7f0000002ac0)=@generic={0x1, "8822f46358fa6dab40d871cd9de3767d361ad20afd3a31efe62858332fbac56cbdf1c80eabbec4cb4655554fa389cdf555551674d902c3c131fe1d5851b5b00a5e9041e9d18f1c87b49ba0901d340717665f9fce355094a75717368e5fa425b0bdbaf6db8471e6fd99ff135fd19a37fb8d04f007f31b3e32e40c250cae20"}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002b40)}, {&(0x7f0000002c40)="a5c6fec03aa0a2fbdbea88eebe09749db63dcf3cca1125232416ddcd372edaf4490afdd2047c6863708b83c55f932fd0fb7bc15eaf874df5f00c2280a18b23280a1f39713473d3d51709031ee57653c4dea2d124c6b061f8a955a745b53309384ba123d297c4e0e634d28190bdc42ff07d8c4f41d95a5395ed68ebd0f7b1c05527da6748d12ff761", 0x88}, {&(0x7f0000002d00)}], 0x3, &(0x7f0000002dc0)=[{0x88, 0x10b, 0x3, "911508bb4fd74fdaa248a821640a58c237d22d53c85b8e595f6c3bc7b7d5d2277bb9f5c9281e508946acff818bd546968f0c6cf8656d42303fd79148d76af20c534316ccd5e7542234361eeddee552d94be7a39499f0180b2c13e2939a46365b1b9094001cf44d0842b0e046b0d4e5c41615f5a559d0"}, {0xe8, 0x115, 0xffff, "17e2ef93ddb57ab3f4d6fa357fd78b385607ead7230320df05787b231b92923e52475f3e8b876bf3d45b0edb268bd9974fe69666bb1bc6950cb6325d690cf90133612769d09c2fe426283faae6e171aa5b02be5b484b9c6f35af108d75f01d488a76011d697efe431cb94328469bb11028af7b63d3426f710654f7aeff9d5a8e1dc27246160449d22b96deb439f07b6502df8278da18ea632e3a089d581fa6ba64b8a63f49a059c2a7425d2f43b27d0c9662ea30642a22f5dcb148106b17f6ea7aaafa7c14dc7047c783f0bb88fc4173b5a6066f2fbbae6f"}, {0x68, 0x115, 0x6, "e31adeb7a910543b2fa7eee653ab87c36a7de2c5d8097649ce559be38550b597a134bbf605da6c641d638c21205cea3d0514aabb83b2e1cecb433f7daa90b5bf6b5a63a7c87f723448779fddf142c69f3c4f4aad"}], 0x1d8}}], 0x2, 0x11) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r6, {0xfff2}, {}, {0x9}}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@mpls_getroute={0x50, 0x1a, 0x0, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x10, 0x10, 0x4, 0x1, 0x2, 0xfd, 0x2, 0x700}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_OIF={0x8}, @RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r6}, @RTA_VIA={0x14, 0x12, {0x27, "df3864f7a31070e793f2f45de384"}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x84) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000640)=""/214, 0xd6, 0x0, &(0x7f0000000740)=""/179, 0xb3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="182b0000fb313a298d3b72bb6ce3b4be987e1bb758fdf7c169a126e6e457cc9a5d85fdc97a5bd08a73437352a7", @ANYRES32=r1, @ANYBLOB="00000000010000001a5b18000100000018110000", @ANYRES32, @ANYBLOB="52ca000000000000"], &(0x7f0000000280)='GPL\x00', 0xbf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x10, 0x81, 0x3}, 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)) 310.776724ms ago: executing program 0 (id=223): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 288.604695ms ago: executing program 1 (id=224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000016ecfddb3fbe09122cb4755097322dcf27835cc33cdd415d8a95cbe0dfad06e4c8e2f32eb73f5f725c21870aff5ec8cd621703c05cbba39769bbb1cd41b7897ec2d48ae10dd10b96eb899ef942ec691d9619b73a02884b89367f86f04b2a8ac511f13d84e2645b505e60534b39b1330d614a057f7ee37b4dadbda5ac1644a310f777bdd43fe0f08b65d7dc1b4d6db9b8f64b8455056b28bb8052dc1f0c974da5c58b905327d4fc9c44657e6ae6e9f619813bfc1226008840af8352d7fae71e579e01ff0eb80b1e2f1a8dcf0d724f5517a44e009cda348e6dc9"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={0x0, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) truncate(&(0x7f00000001c0)='./file0\x00', 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x202, 0x0) io_uring_enter(r5, 0x276e, 0x6d61, 0x0, &(0x7f0000000300)={[0x8]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) 155.622927ms ago: executing program 3 (id=225): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) rt_sigtimedwait(&(0x7f0000000040)={[0x10]}, &(0x7f00000000c0), &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) setreuid(0x0, 0xee00) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) ftruncate(r3, 0x2007ffc) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x800000009) 140.451577ms ago: executing program 4 (id=226): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5fef, 0x4) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) 0s ago: executing program 0 (id=227): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000040)='g', 0x1, 0x40840, &(0x7f00000000c0)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 36.917222][ T29] audit: type=1400 audit(1744538214.789:81): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 36.918278][ T3295] cgroup: Unknown subsys name 'net' [ 36.940132][ T29] audit: type=1400 audit(1744538214.789:82): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.968015][ T29] audit: type=1400 audit(1744538214.819:83): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.987965][ T29] audit: type=1400 audit(1744538214.819:84): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 37.105999][ T3295] cgroup: Unknown subsys name 'cpuset' [ 37.112376][ T3295] cgroup: Unknown subsys name 'rlimit' [ 37.232901][ T29] audit: type=1400 audit(1744538215.099:85): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.261044][ T29] audit: type=1400 audit(1744538215.099:86): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.281731][ T29] audit: type=1400 audit(1744538215.099:87): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.298065][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 37.302894][ T29] audit: type=1400 audit(1744538215.099:88): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 37.333756][ T29] audit: type=1400 audit(1744538215.099:89): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 37.358909][ T29] audit: type=1400 audit(1744538215.099:90): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 37.360368][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.550272][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 38.571106][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 38.642336][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 38.655941][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 38.709548][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 38.728757][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.736034][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.743358][ T3305] bridge_slave_0: entered allmulticast mode [ 38.749822][ T3305] bridge_slave_0: entered promiscuous mode [ 38.756465][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.763689][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.771330][ T3307] bridge_slave_0: entered allmulticast mode [ 38.778201][ T3307] bridge_slave_0: entered promiscuous mode [ 38.794362][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.801912][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.809357][ T3305] bridge_slave_1: entered allmulticast mode [ 38.815825][ T3305] bridge_slave_1: entered promiscuous mode [ 38.822729][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.829844][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.837095][ T3307] bridge_slave_1: entered allmulticast mode [ 38.843769][ T3307] bridge_slave_1: entered promiscuous mode [ 38.904756][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.914075][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.921571][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.929358][ T3306] bridge_slave_0: entered allmulticast mode [ 38.935923][ T3306] bridge_slave_0: entered promiscuous mode [ 38.947292][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.954572][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.961907][ T3308] bridge_slave_0: entered allmulticast mode [ 38.968549][ T3308] bridge_slave_0: entered promiscuous mode [ 38.976020][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.985420][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.992476][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.999745][ T3308] bridge_slave_1: entered allmulticast mode [ 39.006308][ T3308] bridge_slave_1: entered promiscuous mode [ 39.015913][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.030213][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.037387][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.044674][ T3306] bridge_slave_1: entered allmulticast mode [ 39.051331][ T3306] bridge_slave_1: entered promiscuous mode [ 39.058539][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.105234][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.112602][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.120019][ T3316] bridge_slave_0: entered allmulticast mode [ 39.126643][ T3316] bridge_slave_0: entered promiscuous mode [ 39.133829][ T3307] team0: Port device team_slave_0 added [ 39.146634][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.156684][ T3305] team0: Port device team_slave_0 added [ 39.163698][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.174364][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.183717][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.191149][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.198357][ T3316] bridge_slave_1: entered allmulticast mode [ 39.204882][ T3316] bridge_slave_1: entered promiscuous mode [ 39.212070][ T3307] team0: Port device team_slave_1 added [ 39.224160][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.234231][ T3305] team0: Port device team_slave_1 added [ 39.274580][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.281716][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.308099][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.330071][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.339486][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.346637][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.372841][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.384362][ T3306] team0: Port device team_slave_0 added [ 39.391260][ T3306] team0: Port device team_slave_1 added [ 39.397416][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.404534][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.431179][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.443118][ T3308] team0: Port device team_slave_0 added [ 39.450083][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.459835][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.466842][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.493320][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.517775][ T3308] team0: Port device team_slave_1 added [ 39.523848][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.530870][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.557660][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.581954][ T3316] team0: Port device team_slave_0 added [ 39.599139][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.606256][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.633308][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.654950][ T3316] team0: Port device team_slave_1 added [ 39.672472][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.679506][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.705920][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.717959][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.725017][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.751269][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.785733][ T3307] hsr_slave_0: entered promiscuous mode [ 39.792332][ T3307] hsr_slave_1: entered promiscuous mode [ 39.798937][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.805993][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.832692][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.856365][ T3306] hsr_slave_0: entered promiscuous mode [ 39.862438][ T3306] hsr_slave_1: entered promiscuous mode [ 39.868460][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.876275][ T3306] Cannot create hsr debugfs directory [ 39.882542][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.889641][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.916020][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.928961][ T3305] hsr_slave_0: entered promiscuous mode [ 39.935251][ T3305] hsr_slave_1: entered promiscuous mode [ 39.941073][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.948814][ T3305] Cannot create hsr debugfs directory [ 40.010997][ T3308] hsr_slave_0: entered promiscuous mode [ 40.017304][ T3308] hsr_slave_1: entered promiscuous mode [ 40.023309][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.031053][ T3308] Cannot create hsr debugfs directory [ 40.055794][ T3316] hsr_slave_0: entered promiscuous mode [ 40.062097][ T3316] hsr_slave_1: entered promiscuous mode [ 40.068468][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.076285][ T3316] Cannot create hsr debugfs directory [ 40.249102][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.260359][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.271732][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.283262][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.292820][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.302473][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.317289][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.326204][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.356473][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.368062][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.377296][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.389371][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.408458][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.418933][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.428795][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.442970][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.492733][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.506165][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.523394][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.541831][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.566058][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.577693][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.606408][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.621327][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.639090][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.646975][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.659611][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.670885][ T2450] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.678401][ T2450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.693092][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.707729][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.722564][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.729797][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.739857][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.747509][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.764325][ T2450] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.771622][ T2450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.787392][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.802883][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.810413][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.827975][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.835318][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.855448][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.862650][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.944420][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.973100][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.989276][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.006393][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.013749][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.043780][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.053395][ T1648] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.060875][ T1648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.073985][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.108908][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.217224][ T3307] veth0_vlan: entered promiscuous mode [ 41.248187][ T3308] veth0_vlan: entered promiscuous mode [ 41.259602][ T3307] veth1_vlan: entered promiscuous mode [ 41.268369][ T3308] veth1_vlan: entered promiscuous mode [ 41.284418][ T3307] veth0_macvtap: entered promiscuous mode [ 41.301809][ T3307] veth1_macvtap: entered promiscuous mode [ 41.311362][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.328791][ T3308] veth0_macvtap: entered promiscuous mode [ 41.338161][ T3306] veth0_vlan: entered promiscuous mode [ 41.348416][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.357328][ T3306] veth1_vlan: entered promiscuous mode [ 41.364030][ T3308] veth1_macvtap: entered promiscuous mode [ 41.377267][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.397850][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.408794][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.419215][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.427930][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.437009][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.445847][ T3307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.455752][ T3307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.474595][ T3305] veth0_vlan: entered promiscuous mode [ 41.484674][ T3306] veth0_macvtap: entered promiscuous mode [ 41.507240][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.518410][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.530654][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.539466][ T3306] veth1_macvtap: entered promiscuous mode [ 41.557536][ T3305] veth1_vlan: entered promiscuous mode [ 41.566439][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.575431][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.584609][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.593790][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.614813][ T3316] veth0_vlan: entered promiscuous mode [ 41.629808][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.640783][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.650711][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.661545][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.672391][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.682309][ T3316] veth1_vlan: entered promiscuous mode [ 41.690702][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.714168][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.724860][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.735051][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.745710][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.757263][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.766451][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.775572][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.784374][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.793759][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.826617][ T3305] veth0_macvtap: entered promiscuous mode [ 41.842325][ T3305] veth1_macvtap: entered promiscuous mode [ 41.866653][ T3316] veth0_macvtap: entered promiscuous mode [ 41.874449][ T3316] veth1_macvtap: entered promiscuous mode [ 41.890489][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.901134][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.911497][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.922492][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.929069][ T3451] loop2: detected capacity change from 0 to 512 [ 41.932450][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.949989][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.956977][ T3451] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.967495][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.976828][ C0] hrtimer: interrupt took 37789 ns [ 41.992811][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.003800][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.013989][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.024598][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.034445][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 42.034463][ T29] audit: type=1400 audit(1744538219.899:130): avc: denied { create } for pid=3448 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.034780][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.049338][ T29] audit: type=1400 audit(1744538219.919:131): avc: denied { prog_run } for pid=3448 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 42.061232][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.061249][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.061267][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.108817][ T3451] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.115008][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.122326][ T3451] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.138797][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.164429][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.174743][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.185295][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.195618][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.206267][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.217287][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.225709][ T3451] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.236764][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.247973][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.256983][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.265902][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.267418][ T3451] EXT4-fs (loop2): 1 truncate cleaned up [ 42.284340][ T3451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.286310][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.298013][ T29] audit: type=1400 audit(1744538220.169:132): avc: denied { mount } for pid=3450 comm="syz.2.6" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.308020][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.308035][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.350356][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.360395][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.370945][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.381256][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.392237][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.404213][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.411657][ T29] audit: type=1400 audit(1744538220.249:133): avc: denied { create } for pid=3450 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.416562][ T3452] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 42.431289][ T29] audit: type=1400 audit(1744538220.249:134): avc: denied { ioctl } for pid=3450 comm="syz.2.6" path="socket:[3724]" dev="sockfs" ino=3724 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.464605][ T29] audit: type=1400 audit(1744538220.279:135): avc: denied { setopt } for pid=3450 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.489910][ T3459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 42.518396][ T3460] loop0: detected capacity change from 0 to 2048 [ 42.525492][ T3459] bond0: (slave bond_slave_0): Releasing backup interface [ 42.537636][ T3463] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 42.548840][ T29] audit: type=1400 audit(1744538220.419:136): avc: denied { relabelto } for pid=3450 comm="syz.2.6" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 42.552737][ T3316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.585087][ T3316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.594973][ T3316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.600360][ T29] audit: type=1400 audit(1744538220.469:137): avc: denied { write } for pid=3450 comm="syz.2.6" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 42.605386][ T3316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.635047][ T29] audit: type=1400 audit(1744538220.469:138): avc: denied { add_name } for pid=3450 comm="syz.2.6" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 42.671684][ T3465] loop1: detected capacity change from 0 to 736 [ 42.672158][ T29] audit: type=1400 audit(1744538220.469:139): avc: denied { create } for pid=3450 comm="syz.2.6" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.731692][ T3465] Symlink component flag not implemented [ 42.741107][ T3465] Symlink component flag not implemented (122) [ 42.794088][ T3469] loop4: detected capacity change from 0 to 512 [ 42.832219][ T3469] ext4: Bad value for 'sb' [ 42.842460][ T3469] loop4: detected capacity change from 0 to 512 [ 42.859331][ T3469] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 42.879725][ T3469] EXT4-fs (loop4): 1 truncate cleaned up [ 42.886670][ T3469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.904151][ T3469] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 42.957475][ T3459] syz.2.6 (3459) used greatest stack depth: 10912 bytes left [ 42.966571][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.979339][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.142364][ T3481] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 43.154601][ T3479] netlink: 'syz.4.11': attribute type 3 has an invalid length. [ 43.300352][ T3495] loop2: detected capacity change from 0 to 1024 [ 43.310889][ T3497] xt_CT: No such helper "snmp_trap" [ 43.326331][ T3495] ======================================================= [ 43.326331][ T3495] WARNING: The mand mount option has been deprecated and [ 43.326331][ T3495] and is ignored by this kernel. Remove the mand [ 43.326331][ T3495] option from the mount to silence this warning. [ 43.326331][ T3495] ======================================================= [ 43.379796][ T3499] Zero length message leads to an empty skb [ 43.397100][ T3495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.425823][ T3495] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.534071][ T3504] loop0: detected capacity change from 0 to 256 [ 43.637411][ T3508] loop3: detected capacity change from 0 to 1024 [ 43.645931][ T3508] ext2: Bad value for 'journal_dev' [ 43.718454][ T110] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 393: padding at end of block bitmap is not set [ 43.719336][ T110] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 43.719539][ T110] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.719539][ T110] [ 43.747349][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.770821][ T3511] loop0: detected capacity change from 0 to 2048 [ 43.795904][ T3298] loop0: p1 < > p4 [ 43.805516][ T3298] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.810084][ T3511] loop0: p1 < > p4 [ 43.810719][ T3511] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.827431][ T3005] loop0: p1 < > p4 [ 43.925097][ T3005] loop0: p4 size 8388608 extends beyond EOD, truncated [ 43.983883][ T3519] loop2: detected capacity change from 0 to 512 [ 43.991325][ T3522] loop3: detected capacity change from 0 to 2048 [ 44.020149][ T3519] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.036158][ T3522] loop3: p1 < > p4 [ 44.041023][ T3522] loop3: p4 size 8388608 extends beyond EOD, truncated [ 44.061249][ T3519] EXT4-fs (loop2): 1 truncate cleaned up [ 44.108993][ T3005] loop3: p1 < > p4 [ 44.119430][ T3527] loop0: detected capacity change from 0 to 1024 [ 44.128659][ T3519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.144870][ T3005] loop3: p4 size 8388608 extends beyond EOD, truncated [ 44.177074][ T3527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.193086][ T3527] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.211692][ T3531] loop4: detected capacity change from 0 to 1024 [ 44.240920][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.280534][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.301892][ T3531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.329865][ T3533] netlink: 'syz.1.29': attribute type 3 has an invalid length. [ 44.353608][ T3531] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.406467][ T3544] loop1: detected capacity change from 0 to 2048 [ 44.416045][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.430721][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.467075][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 44.475746][ T3546] loop1: p1 < > p4 [ 44.490528][ T3546] loop1: p4 size 8388608 extends beyond EOD, truncated [ 44.499117][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 44.512237][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.512954][ T3381] udevd[3381]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.575325][ T3544] loop1: p1 < > p4 [ 44.582169][ T3544] loop1: p4 size 8388608 extends beyond EOD, truncated [ 44.586843][ T110] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 393: padding at end of block bitmap is not set [ 44.612367][ T3005] loop1: p1 < > p4 [ 44.628269][ T3005] loop1: p4 size 8388608 extends beyond EOD, truncated [ 44.666451][ T110] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 44.680303][ T110] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.680303][ T110] [ 44.707122][ T3005] loop1: p1 < > p4 [ 44.715925][ T3005] loop1: p4 size 8388608 extends beyond EOD, truncated [ 44.751878][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 44.764306][ T3545] udevd[3545]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 44.766103][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.817997][ T1648] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 393: padding at end of block bitmap is not set [ 44.860164][ T1648] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 44.873907][ T1648] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.873907][ T1648] [ 44.874393][ T3519] syz.2.22 (3519) used greatest stack depth: 10400 bytes left [ 44.914380][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.929699][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.001267][ T3563] netlink: 'syz.0.35': attribute type 4 has an invalid length. [ 45.023898][ T3568] veth0_vlan: entered allmulticast mode [ 45.102178][ T3568] veth0_vlan: left promiscuous mode [ 45.107699][ T3568] veth0_vlan: entered promiscuous mode [ 45.170090][ T3577] netlink: 'syz.1.39': attribute type 4 has an invalid length. [ 45.305547][ T3589] netlink: 'syz.2.43': attribute type 4 has an invalid length. [ 45.408338][ T3592] ieee802154 phy0 wpan0: encryption failed: -22 [ 45.412925][ T3594] loop2: detected capacity change from 0 to 1024 [ 45.427711][ T3594] ext2: Bad value for 'journal_dev' [ 45.502221][ T3600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 45.534639][ T3599] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 45.723837][ T3615] loop2: detected capacity change from 0 to 1024 [ 45.739000][ T3615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.752077][ T3617] loop4: detected capacity change from 0 to 512 [ 45.752435][ T3615] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.760343][ T3617] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.780988][ T3617] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.796965][ T3617] EXT4-fs (loop4): 1 truncate cleaned up [ 45.803501][ T3617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.821132][ T3617] veth0_to_bond: entered promiscuous mode [ 45.827351][ T3617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 45.852000][ T3617] veth0_to_bond (unregistering): left promiscuous mode [ 45.861132][ T3617] bond0: (slave bond_slave_0): Releasing backup interface [ 45.907118][ T3412] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 393: padding at end of block bitmap is not set [ 45.923124][ T3412] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 45.936475][ T3412] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.936475][ T3412] [ 45.959576][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.960907][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.090072][ T3631] netlink: 'syz.4.59': attribute type 4 has an invalid length. [ 46.115221][ T3630] netlink: 'syz.2.57': attribute type 4 has an invalid length. [ 46.146694][ T3635] vlan2: entered allmulticast mode [ 46.151916][ T3635] bond0: entered allmulticast mode [ 46.157279][ T3635] bond_slave_0: entered allmulticast mode [ 46.163054][ T3635] bond_slave_1: entered allmulticast mode [ 46.214726][ T3636] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.234468][ T3636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.262979][ T3636] bond1: entered allmulticast mode [ 46.269043][ T3636] bond0: (slave bond1): Enslaving as an active interface with an up link [ 46.332363][ T2968] hid (null): report_id 652387344 is invalid [ 46.334309][ T3646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 46.338693][ T2968] hid (null): bogus close delimiter [ 46.353147][ T2968] hid (null): unknown global tag 0xd [ 46.358577][ T2968] hid (null): unknown global tag 0xd [ 46.364105][ T2968] hid (null): unknown global tag 0xc [ 46.369597][ T2968] hid (null): unknown global tag 0xe [ 46.375274][ T2968] hid (null): invalid report_count -571575292 [ 46.381824][ T2968] hid (null): unknown global tag 0xd [ 46.387190][ T2968] hid (null): unknown global tag 0xd [ 46.397025][ T2968] hid (null): unknown global tag 0xd [ 46.402488][ T2968] hid (null): unknown global tag 0xd [ 46.406377][ T3643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.407825][ T2968] hid (null): unknown global tag 0x86 [ 46.421961][ T2968] hid (null): report_id 0 is invalid [ 46.427449][ T2968] hid (null): global environment stack underflow [ 46.438023][ T2968] hid (null): global environment stack underflow [ 46.439570][ T3643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.445457][ T2968] hid (null): report_id 0 is invalid [ 46.458371][ T2968] hid (null): unknown global tag 0xe [ 46.464067][ T2968] hid (null): unknown global tag 0xd [ 46.470018][ T2968] hid (null): unknown global tag 0xd [ 46.476059][ T2968] hid (null): unknown global tag 0xc [ 46.481483][ T2968] hid (null): unknown global tag 0xe [ 46.487847][ T2968] hid (null): unknown global tag 0xe [ 46.497821][ T2968] hid (null): report_id 34871 is invalid [ 46.504101][ T2968] hid (null): invalid report_size 4766 [ 46.510129][ T2968] hid (null): invalid report_size 7449 [ 46.516115][ T2968] hid (null): unknown global tag 0xe [ 46.521793][ T2968] hid (null): unknown global tag 0xd [ 46.527493][ T2968] hid (null): unknown global tag 0xd [ 46.533084][ T2968] hid (null): unknown global tag 0xe [ 46.538892][ T2968] hid (null): report_id 710 is invalid [ 46.544741][ T2968] hid (null): unknown global tag 0xc [ 46.550455][ T2968] hid (null): unknown global tag 0xe [ 46.556733][ T2968] hid (null): unknown global tag 0xc [ 46.562512][ T2968] hid (null): unknown global tag 0x6f [ 46.569878][ T2968] hid (null): invalid report_count -1641623532 [ 46.576457][ T2968] hid (null): invalid report_size 33057 [ 46.582448][ T2968] hid (null): invalid report_count -1886301395 [ 46.589049][ T2968] hid (null): unknown global tag 0xd [ 46.594695][ T2968] hid (null): unknown global tag 0xe [ 46.600523][ T2968] hid (null): bogus close delimiter [ 46.606070][ T2968] hid (null): unknown global tag 0xd4 [ 46.611681][ T2968] hid (null): invalid report_size 41636 [ 46.617592][ T2968] hid (null): invalid report_size 59345 [ 46.623442][ T2968] hid (null): unknown global tag 0xe [ 46.629053][ T2968] hid (null): unknown global tag 0xc [ 46.638182][ T2968] hid-generic 0010:0001:0008.0001: unknown main item tag 0x3 [ 46.645883][ T2968] hid-generic 0010:0001:0008.0001: unknown main item tag 0x3 [ 46.653306][ T2968] hid-generic 0010:0001:0008.0001: reserved main item tag 0xe [ 46.660984][ T2968] hid-generic 0010:0001:0008.0001: unexpected long global item [ 46.668841][ T2968] hid-generic 0010:0001:0008.0001: probe with driver hid-generic failed with error -22 [ 46.872197][ T3665] netlink: 'syz.2.69': attribute type 4 has an invalid length. [ 46.971856][ T3667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 47.071572][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 47.071603][ T29] audit: type=1326 audit(1744538224.939:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5980cd169 code=0x7ffc0000 [ 47.110734][ T29] audit: type=1326 audit(1744538224.969:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5980cd169 code=0x7ffc0000 [ 47.177937][ T3677] loop1: detected capacity change from 0 to 8192 [ 47.184979][ T29] audit: type=1326 audit(1744538225.009:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd5980cd169 code=0x7ffc0000 [ 47.208827][ T29] audit: type=1326 audit(1744538225.009:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5980cd169 code=0x7ffc0000 [ 47.232873][ T29] audit: type=1326 audit(1744538225.009:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5980cd169 code=0x7ffc0000 [ 47.256665][ T29] audit: type=1326 audit(1744538225.009:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5980cd169 code=0x7ffc0000 [ 47.281151][ T29] audit: type=1326 audit(1744538225.009:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5980cd169 code=0x7ffc0000 [ 47.286200][ T3681] loop4: detected capacity change from 0 to 1024 [ 47.305050][ T29] audit: type=1326 audit(1744538225.009:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5980cd169 code=0x7ffc0000 [ 47.335217][ T29] audit: type=1326 audit(1744538225.009:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5980cd169 code=0x7ffc0000 [ 47.359174][ T29] audit: type=1326 audit(1744538225.009:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3674 comm="syz.2.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5980cd169 code=0x7ffc0000 [ 47.387497][ T3677] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 47.396427][ T3677] FAT-fs (loop1): Filesystem has been set read-only [ 47.432983][ T3681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.446996][ T3677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 47.456943][ T3681] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.544713][ T3688] loop0: detected capacity change from 0 to 1024 [ 47.561069][ T3692] loop3: detected capacity change from 0 to 1024 [ 47.589171][ T3690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 47.616001][ T3692] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 47.627338][ T3692] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 47.653607][ T3692] JBD2: no valid journal superblock found [ 47.659579][ T3692] EXT4-fs (loop3): Could not load journal inode [ 47.667077][ T37] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 47.684369][ T3688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.702405][ T3692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 47.739873][ T3688] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.762586][ T3702] netlink: 'syz.1.81': attribute type 4 has an invalid length. [ 47.773652][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 47.786781][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.786781][ T37] [ 47.824083][ T3688] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.78: corrupted xattr block 128: overlapping e_value [ 47.843424][ T3688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 47.847540][ T3704] program syz.2.85 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.863762][ T3688] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.78: corrupted xattr block 128: overlapping e_value [ 47.872436][ T3704] FAULT_INJECTION: forcing a failure. [ 47.872436][ T3704] name failslab, interval 1, probability 0, space 0, times 1 [ 47.890399][ T3704] CPU: 1 UID: 0 PID: 3704 Comm: syz.2.85 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(voluntary) [ 47.890438][ T3704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.890464][ T3704] Call Trace: [ 47.890469][ T3704] [ 47.890477][ T3704] dump_stack_lvl+0xf6/0x150 [ 47.890499][ T3704] dump_stack+0x15/0x1a [ 47.890517][ T3704] should_fail_ex+0x261/0x270 [ 47.890608][ T3704] should_failslab+0x8f/0xb0 [ 47.890643][ T3704] kmem_cache_alloc_noprof+0x59/0x340 [ 47.890684][ T3704] ? audit_log_start+0x37f/0x6e0 [ 47.890769][ T3704] audit_log_start+0x37f/0x6e0 [ 47.890796][ T3704] audit_seccomp+0x4b/0x130 [ 47.890815][ T3704] __seccomp_filter+0x694/0x10e0 [ 47.890847][ T3704] ? do_vfs_ioctl+0x977/0x1570 [ 47.890954][ T3704] ? sg_ioctl+0x101e/0x18a0 [ 47.890985][ T3704] __secure_computing+0x7e/0x160 [ 47.891016][ T3704] syscall_trace_enter+0xcf/0x1f0 [ 47.891093][ T3704] do_syscall_64+0xaa/0x1c0 [ 47.891129][ T3704] ? clear_bhb_loop+0x25/0x80 [ 47.891177][ T3704] ? clear_bhb_loop+0x25/0x80 [ 47.891266][ T3704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.891292][ T3704] RIP: 0033:0x7fd5980cbb7c [ 47.891309][ T3704] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 47.891329][ T3704] RSP: 002b:00007fd59672f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.891462][ T3704] RAX: ffffffffffffffda RBX: 00007fd5982e5fa0 RCX: 00007fd5980cbb7c [ 47.891521][ T3704] RDX: 000000000000000f RSI: 00007fd59672f0a0 RDI: 000000000000000a [ 47.891578][ T3704] RBP: 00007fd59672f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.891591][ T3704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 47.891605][ T3704] R13: 0000000000000000 R14: 00007fd5982e5fa0 R15: 00007ffc1216cad8 [ 47.891622][ T3704] [ 47.892641][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.979317][ T3688] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 48.125947][ T3688] EXT4-fs error (device loop0): ext4_xattr_block_find:1869: inode #15: comm syz.0.78: corrupted xattr block 128: overlapping e_value [ 48.143908][ T3692] loop3: detected capacity change from 0 to 32768 [ 48.176471][ T3692] loop3: p1 p2 p3 < > [ 48.178661][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.193349][ T3692] loop3: p1 size 2164261888 extends beyond EOD, truncated [ 48.202515][ T3719] loop4: detected capacity change from 0 to 512 [ 48.229015][ T3719] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.256639][ T3719] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.279544][ T3724] netlink: 'syz.0.89': attribute type 10 has an invalid length. [ 48.287568][ T3724] netlink: 40 bytes leftover after parsing attributes in process `syz.0.89'. [ 48.304350][ T3721] loop2: detected capacity change from 0 to 512 [ 48.305198][ T3719] EXT4-fs (loop4): 1 truncate cleaned up [ 48.334463][ T3724] dummy0: entered promiscuous mode [ 48.340513][ T3721] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.352969][ T3719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.392036][ T3724] bridge0: port 3(dummy0) entered blocking state [ 48.392085][ T3724] bridge0: port 3(dummy0) entered disabled state [ 48.392210][ T3724] dummy0: entered allmulticast mode [ 48.393018][ T3724] bridge0: port 3(dummy0) entered blocking state [ 48.393090][ T3724] bridge0: port 3(dummy0) entered forwarding state [ 48.407391][ T3725] loop1: detected capacity change from 0 to 8192 [ 48.518928][ T3721] EXT4-fs (loop2): 1 truncate cleaned up [ 48.536640][ T3719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 48.549485][ T3721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.596193][ T3722] syz.1.86: attempt to access beyond end of device [ 48.596193][ T3722] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 48.639053][ T3728] loop0: detected capacity change from 0 to 8192 [ 48.652635][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.679939][ T3728] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 48.689236][ T3728] FAT-fs (loop0): Filesystem has been set read-only [ 48.705675][ T3725] capability: warning: `syz.1.86' uses deprecated v2 capabilities in a way that may be insecure [ 48.718269][ T3722] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 48.725601][ T3736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 48.726206][ T3722] FAT-fs (loop1): Filesystem has been set read-only [ 48.841503][ T3728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.91'. [ 48.857908][ T3722] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 48.979224][ T3722] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 49.006327][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.020130][ T3742] loop4: detected capacity change from 0 to 8192 [ 49.030642][ T3746] netlink: 'syz.3.95': attribute type 4 has an invalid length. [ 49.080239][ T3742] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 49.088842][ T3742] FAT-fs (loop4): Filesystem has been set read-only [ 49.134548][ T3742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'. [ 49.227863][ T3758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 49.285609][ T3760] loop0: detected capacity change from 0 to 128 [ 49.305646][ T3760] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 49.321970][ T3764] netlink: 'syz.1.97': attribute type 4 has an invalid length. [ 49.342221][ T3760] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.356798][ T3760] ext2 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.523547][ T3306] EXT4-fs error (device loop0): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 49.566421][ T3779] FAULT_INJECTION: forcing a failure. [ 49.566421][ T3779] name failslab, interval 1, probability 0, space 0, times 0 [ 49.579425][ T3779] CPU: 0 UID: 0 PID: 3779 Comm: syz.2.106 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(voluntary) [ 49.579545][ T3779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.579561][ T3779] Call Trace: [ 49.579567][ T3779] [ 49.579576][ T3779] dump_stack_lvl+0xf6/0x150 [ 49.579601][ T3779] dump_stack+0x15/0x1a [ 49.579634][ T3779] should_fail_ex+0x261/0x270 [ 49.579667][ T3779] should_failslab+0x8f/0xb0 [ 49.579705][ T3779] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 49.579733][ T3779] ? __d_alloc+0x3d/0x350 [ 49.579831][ T3779] __d_alloc+0x3d/0x350 [ 49.579858][ T3779] ? mpol_shared_policy_init+0xd2/0x510 [ 49.579891][ T3779] d_alloc_pseudo+0x1e/0x80 [ 49.579945][ T3779] alloc_file_pseudo+0x75/0x160 [ 49.579970][ T3779] __shmem_file_setup+0x1bb/0x1f0 [ 49.580071][ T3779] shmem_file_setup+0x3b/0x50 [ 49.580157][ T3779] __se_sys_memfd_create+0x2e1/0x5a0 [ 49.580185][ T3779] __x64_sys_memfd_create+0x31/0x40 [ 49.580244][ T3779] x64_sys_call+0x1163/0x2e10 [ 49.580271][ T3779] do_syscall_64+0xc9/0x1c0 [ 49.580355][ T3779] ? clear_bhb_loop+0x25/0x80 [ 49.580382][ T3779] ? clear_bhb_loop+0x25/0x80 [ 49.580408][ T3779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.580487][ T3779] RIP: 0033:0x7fd5980cd169 [ 49.580502][ T3779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.580520][ T3779] RSP: 002b:00007fd59672ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 49.580572][ T3779] RAX: ffffffffffffffda RBX: 00000000000004c6 RCX: 00007fd5980cd169 [ 49.580586][ T3779] RDX: 00007fd59672eef0 RSI: 0000000000000000 RDI: 00007fd59814f32c [ 49.580601][ T3779] RBP: 0000200000000b00 R08: 00007fd59672ebb7 R09: 00007fd59672ee40 [ 49.580615][ T3779] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 49.580629][ T3779] R13: 00007fd59672eef0 R14: 00007fd59672eeb0 R15: 00002000000000c0 [ 49.580652][ T3779] [ 49.583967][ T3306] EXT4-fs error (device loop0): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 49.707339][ T3783] loop1: detected capacity change from 0 to 1024 [ 49.725364][ T3782] infiniband syz0: set active [ 49.789406][ T3783] EXT4-fs: Ignoring removed nobh option [ 49.806076][ T3782] infiniband syz0: added bond0 [ 49.828210][ T3783] EXT4-fs: Ignoring removed bh option [ 49.833685][ T3783] ext3: Unknown parameter 'hash' [ 49.860761][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.871639][ T3782] RDS/IB: syz0: added [ 49.879070][ T3782] smc: adding ib device syz0 with port count 1 [ 49.905297][ T3782] smc: ib device syz0 port 1 has pnetid [ 49.950970][ T3793] loop0: detected capacity change from 0 to 512 [ 49.983444][ T3793] EXT4-fs (loop0): inodes count not valid: 19 vs 32 [ 50.023590][ T3800] loop2: detected capacity change from 0 to 256 [ 50.042992][ T3803] FAULT_INJECTION: forcing a failure. [ 50.042992][ T3803] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.056620][ T3803] CPU: 1 UID: 0 PID: 3803 Comm: syz.4.111 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(voluntary) [ 50.056669][ T3803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.056683][ T3803] Call Trace: [ 50.056691][ T3803] [ 50.056700][ T3803] dump_stack_lvl+0xf6/0x150 [ 50.056725][ T3803] dump_stack+0x15/0x1a [ 50.056742][ T3803] should_fail_ex+0x261/0x270 [ 50.056784][ T3803] should_fail+0xb/0x10 [ 50.056813][ T3803] should_fail_usercopy+0x1a/0x20 [ 50.056950][ T3803] _copy_from_iter+0xd8/0xd10 [ 50.056987][ T3803] ? kmalloc_reserve+0x16e/0x190 [ 50.057076][ T3803] ? __build_skb_around+0x199/0x1f0 [ 50.057105][ T3803] ? __alloc_skb+0x227/0x320 [ 50.057129][ T3803] ? __virt_addr_valid+0x1ed/0x250 [ 50.057150][ T3803] ? __check_object_size+0x367/0x510 [ 50.057216][ T3803] netlink_sendmsg+0x492/0x720 [ 50.057296][ T3803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.057370][ T3803] __sock_sendmsg+0x140/0x180 [ 50.057388][ T3803] ____sys_sendmsg+0x350/0x4e0 [ 50.057423][ T3803] __sys_sendmsg+0x1a0/0x240 [ 50.057472][ T3803] __x64_sys_sendmsg+0x46/0x50 [ 50.057526][ T3803] x64_sys_call+0x26f3/0x2e10 [ 50.057553][ T3803] do_syscall_64+0xc9/0x1c0 [ 50.057585][ T3803] ? clear_bhb_loop+0x25/0x80 [ 50.057611][ T3803] ? clear_bhb_loop+0x25/0x80 [ 50.057637][ T3803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.057686][ T3803] RIP: 0033:0x7ff756e3d169 [ 50.057705][ T3803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.057727][ T3803] RSP: 002b:00007ff75549f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.057748][ T3803] RAX: ffffffffffffffda RBX: 00007ff757055fa0 RCX: 00007ff756e3d169 [ 50.057835][ T3803] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 50.057847][ T3803] RBP: 00007ff75549f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.057858][ T3803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.057870][ T3803] R13: 0000000000000000 R14: 00007ff757055fa0 R15: 00007ffefe9c4718 [ 50.057890][ T3803] [ 50.293303][ T3803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 50.374243][ T3800] netlink: 'syz.2.110': attribute type 3 has an invalid length. [ 50.382226][ T3800] netlink: 666 bytes leftover after parsing attributes in process `syz.2.110'. [ 50.772939][ T3831] loop2: detected capacity change from 0 to 512 [ 50.807129][ T3831] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.825208][ T3831] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.851467][ T3831] EXT4-fs (loop2): 1 truncate cleaned up [ 50.865605][ T3831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.045429][ T3855] loop4: detected capacity change from 0 to 1024 [ 51.072300][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.085720][ T3840] loop1: detected capacity change from 0 to 8192 [ 51.092681][ T3855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.115468][ T3855] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.132973][ T3840] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 51.142847][ T3840] FAT-fs (loop1): Filesystem has been set read-only [ 51.274672][ T3867] netlink: 'syz.2.127': attribute type 13 has an invalid length. [ 51.321756][ T3412] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 393: padding at end of block bitmap is not set [ 51.350661][ T3412] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 51.365292][ T3412] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.365292][ T3412] [ 51.403953][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.414468][ T3867] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.459664][ T3871] loop1: detected capacity change from 0 to 2048 [ 51.535787][ T3871] loop1: p1 < > p4 [ 51.540675][ T3871] loop1: p4 size 8388608 extends beyond EOD, truncated [ 51.541723][ T3879] netlink: 'syz.4.131': attribute type 4 has an invalid length. [ 51.587687][ T3005] loop1: p1 < > p4 [ 51.602120][ T3005] loop1: p4 size 8388608 extends beyond EOD, truncated [ 51.686515][ T3005] loop1: p1 < > p4 [ 51.703564][ T3005] loop1: p4 size 8388608 extends beyond EOD, truncated [ 51.790545][ T3894] loop0: detected capacity change from 0 to 2048 [ 51.820908][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 51.834624][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 51.858901][ T3894] loop0: p1 < > p4 [ 51.871835][ T3894] loop0: p4 size 8388608 extends beyond EOD, truncated [ 51.884318][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 51.900212][ T3908] loop2: detected capacity change from 0 to 1024 [ 51.907728][ T3896] loop1: detected capacity change from 0 to 8192 [ 51.917447][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 52.031129][ T3896] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 52.039850][ T3896] FAT-fs (loop1): Filesystem has been set read-only [ 52.076258][ T3908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.077338][ T3917] netlink: 'syz.0.142': attribute type 13 has an invalid length. [ 52.113443][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 52.130089][ T3908] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.144094][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 52.177887][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 52.189457][ T3917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.199106][ T3908] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.141: corrupted xattr block 128: overlapping e_value [ 52.207609][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 52.253192][ T3908] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 52.270902][ T3908] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.141: corrupted xattr block 128: overlapping e_value [ 52.306688][ T3923] loop0: detected capacity change from 0 to 2048 [ 52.313525][ T3908] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 52.330229][ T3908] EXT4-fs error (device loop2): ext4_xattr_block_find:1869: inode #15: comm syz.2.141: corrupted xattr block 128: overlapping e_value [ 52.349677][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 52.349692][ T29] audit: type=1326 audit(1744538230.219:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756e3d169 code=0x7ffc0000 [ 52.420303][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.430171][ T29] audit: type=1326 audit(1744538230.249:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff756e3d169 code=0x7ffc0000 [ 52.453845][ T29] audit: type=1326 audit(1744538230.249:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756e3d169 code=0x7ffc0000 [ 52.478374][ T29] audit: type=1326 audit(1744538230.249:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756e3d169 code=0x7ffc0000 [ 52.502179][ T29] audit: type=1326 audit(1744538230.249:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff756e3d169 code=0x7ffc0000 [ 52.527035][ T29] audit: type=1326 audit(1744538230.249:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756e3d169 code=0x7ffc0000 [ 52.553082][ T29] audit: type=1326 audit(1744538230.249:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756e3d169 code=0x7ffc0000 [ 52.578085][ T29] audit: type=1326 audit(1744538230.259:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7ff756e3d169 code=0x7ffc0000 [ 52.603429][ T29] audit: type=1326 audit(1744538230.259:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756e3d169 code=0x7ffc0000 [ 52.631214][ T29] audit: type=1326 audit(1744538230.259:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3924 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff756e3d169 code=0x7ffc0000 [ 52.713484][ T3931] __nla_validate_parse: 5 callbacks suppressed [ 52.713502][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 52.747186][ T3931] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 52.970454][ T3945] loop1: detected capacity change from 0 to 8192 [ 53.024382][ T3931] syz.2.148 (3931) used greatest stack depth: 10296 bytes left [ 53.025998][ T3945] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 53.041153][ T3945] FAT-fs (loop1): Filesystem has been set read-only [ 53.041273][ T3954] loop4: detected capacity change from 0 to 2048 [ 53.057613][ T3952] loop0: detected capacity change from 0 to 512 [ 53.071520][ T3952] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.095598][ T3945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 53.118855][ T3952] EXT4-fs (loop0): 1 truncate cleaned up [ 53.133548][ T3952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.148929][ T3954] loop4: p1 < > p4 [ 53.153573][ T3954] loop4: p4 size 8388608 extends beyond EOD, truncated [ 53.172688][ T3957] loop2: detected capacity change from 0 to 512 [ 53.234614][ T3005] loop4: p1 < > p4 [ 53.246494][ T3957] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.273542][ T3005] loop4: p4 size 8388608 extends beyond EOD, truncated [ 53.358987][ T3957] EXT4-fs (loop2): 1 truncate cleaned up [ 53.446069][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 53.450643][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 53.486503][ T3957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.650977][ T3979] loop1: detected capacity change from 0 to 1024 [ 53.687439][ T3979] EXT4-fs: Ignoring removed nobh option [ 53.717731][ T3979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.753158][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.764106][ T3979] EXT4-fs error (device loop1): ext4_find_dest_de:2054: inode #2: block 16: comm syz.1.165: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=1024 fake=0 [ 53.768334][ T3991] FAULT_INJECTION: forcing a failure. [ 53.768334][ T3991] name failslab, interval 1, probability 0, space 0, times 0 [ 53.796759][ T3991] CPU: 1 UID: 0 PID: 3991 Comm: +}[@ Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(voluntary) [ 53.796791][ T3991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.796806][ T3991] Call Trace: [ 53.796813][ T3991] [ 53.796821][ T3991] dump_stack_lvl+0xf6/0x150 [ 53.796845][ T3991] dump_stack+0x15/0x1a [ 53.796865][ T3991] should_fail_ex+0x261/0x270 [ 53.796924][ T3991] should_failslab+0x8f/0xb0 [ 53.796957][ T3991] kmem_cache_alloc_noprof+0x59/0x340 [ 53.797027][ T3991] ? skb_clone+0x154/0x1f0 [ 53.797063][ T3991] skb_clone+0x154/0x1f0 [ 53.797117][ T3991] __netlink_deliver_tap+0x2bd/0x4f0 [ 53.797153][ T3991] netlink_unicast+0x69e/0x6c0 [ 53.797182][ T3991] netlink_sendmsg+0x609/0x720 [ 53.797240][ T3991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.797271][ T3991] __sock_sendmsg+0x140/0x180 [ 53.797293][ T3991] ____sys_sendmsg+0x350/0x4e0 [ 53.797378][ T3991] __sys_sendmmsg+0x22a/0x4b0 [ 53.797432][ T3991] __x64_sys_sendmmsg+0x57/0x70 [ 53.797462][ T3991] x64_sys_call+0x2b53/0x2e10 [ 53.797488][ T3991] do_syscall_64+0xc9/0x1c0 [ 53.797544][ T3991] ? clear_bhb_loop+0x25/0x80 [ 53.797594][ T3991] ? clear_bhb_loop+0x25/0x80 [ 53.797620][ T3991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.797646][ T3991] RIP: 0033:0x7ff756e3d169 [ 53.797662][ T3991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.797683][ T3991] RSP: 002b:00007ff75549f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 53.797705][ T3991] RAX: ffffffffffffffda RBX: 00007ff757055fa0 RCX: 00007ff756e3d169 [ 53.797758][ T3991] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 53.797773][ T3991] RBP: 00007ff75549f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.797787][ T3991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.797802][ T3991] R13: 0000000000000000 R14: 00007ff757055fa0 R15: 00007ffefe9c4718 [ 53.797880][ T3991] [ 54.025787][ T3993] netlink: 'syz.0.168': attribute type 13 has an invalid length. [ 54.060199][ T3993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.104368][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.140003][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.178517][ T36] IPVS: starting estimator thread 0... [ 54.233741][ T4007] loop3: detected capacity change from 0 to 1024 [ 54.257574][ T4007] EXT4-fs: Ignoring removed nobh option [ 54.265300][ T4000] IPVS: using max 2160 ests per chain, 108000 per kthread [ 54.311003][ T4007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.358099][ T4010] loop2: detected capacity change from 0 to 512 [ 54.379225][ T4007] EXT4-fs error (device loop3): ext4_find_dest_de:2054: inode #2: block 16: comm syz.3.175: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=1024 fake=0 [ 54.445979][ T4010] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.506174][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.568557][ T4010] EXT4-fs (loop2): 1 truncate cleaned up [ 54.629264][ T4018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 54.640911][ T4010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.849260][ T4024] loop3: detected capacity change from 0 to 512 [ 54.897961][ T4024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.994717][ T4024] EXT4-fs (loop3): 1 truncate cleaned up [ 55.024817][ T4024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.093957][ T4010] syz.2.174 (4010) used greatest stack depth: 10080 bytes left [ 55.103765][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.136974][ T4030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.181'. [ 55.248559][ T4039] loop0: detected capacity change from 0 to 512 [ 55.268073][ T4039] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.292880][ T4041] netlink: 'syz.4.182': attribute type 4 has an invalid length. [ 55.314021][ T4039] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.342561][ T4039] EXT4-fs (loop0): 1 truncate cleaned up [ 55.370722][ T4039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.431499][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 55.489798][ T4039] bond0: (slave bond_slave_0): Releasing backup interface [ 55.560295][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.588163][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.686311][ T4057] loop0: detected capacity change from 0 to 2048 [ 55.737335][ T4056] random: crng reseeded on system resumption [ 55.883940][ T4069] loop2: detected capacity change from 0 to 1024 [ 55.926812][ T4069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.959028][ T4069] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.015006][ T4074] loop3: detected capacity change from 0 to 1024 [ 56.023860][ T4069] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.194: corrupted xattr block 128: overlapping e_value [ 56.069464][ T4074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.104303][ T4069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 56.118148][ T4069] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.194: corrupted xattr block 128: overlapping e_value [ 56.132892][ T4080] geneve0: entered allmulticast mode [ 56.139458][ T4074] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.183351][ T4074] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.195: corrupted xattr block 128: overlapping e_value [ 56.200435][ T4069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 56.218606][ T4069] EXT4-fs error (device loop2): ext4_xattr_block_find:1869: inode #15: comm syz.2.194: corrupted xattr block 128: overlapping e_value [ 56.246696][ T4074] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 56.261456][ T4074] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.195: corrupted xattr block 128: overlapping e_value [ 56.276272][ T4074] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 56.288277][ T4084] FAULT_INJECTION: forcing a failure. [ 56.288277][ T4084] name failslab, interval 1, probability 0, space 0, times 0 [ 56.301256][ T4084] CPU: 1 UID: 0 PID: 4084 Comm: syz.0.199 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(voluntary) [ 56.301296][ T4084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 56.301309][ T4084] Call Trace: [ 56.301316][ T4084] [ 56.301324][ T4084] dump_stack_lvl+0xf6/0x150 [ 56.301352][ T4084] dump_stack+0x15/0x1a [ 56.301373][ T4084] should_fail_ex+0x261/0x270 [ 56.301461][ T4084] should_failslab+0x8f/0xb0 [ 56.301614][ T4084] kmem_cache_alloc_noprof+0x59/0x340 [ 56.301642][ T4084] ? skb_clone+0x154/0x1f0 [ 56.301676][ T4084] skb_clone+0x154/0x1f0 [ 56.301847][ T4084] __netlink_deliver_tap+0x2bd/0x4f0 [ 56.301882][ T4084] netlink_dump+0x7b3/0x810 [ 56.301909][ T4084] netlink_recvmsg+0x44e/0x780 [ 56.301942][ T4084] ? __pfx_netlink_recvmsg+0x10/0x10 [ 56.301989][ T4084] sock_recvmsg+0x13f/0x170 [ 56.302012][ T4084] ____sys_recvmsg+0xfb/0x290 [ 56.302121][ T4084] do_recvmmsg+0x2a1/0x6e0 [ 56.302168][ T4084] __x64_sys_recvmmsg+0xe4/0x170 [ 56.302231][ T4084] x64_sys_call+0x1b90/0x2e10 [ 56.302278][ T4084] do_syscall_64+0xc9/0x1c0 [ 56.302307][ T4084] ? clear_bhb_loop+0x25/0x80 [ 56.302329][ T4084] ? clear_bhb_loop+0x25/0x80 [ 56.302351][ T4084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.302507][ T4084] RIP: 0033:0x7f26036ed169 [ 56.302526][ T4084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.302547][ T4084] RSP: 002b:00007f2601d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 56.302570][ T4084] RAX: ffffffffffffffda RBX: 00007f2603905fa0 RCX: 00007f26036ed169 [ 56.302654][ T4084] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000003 [ 56.302666][ T4084] RBP: 00007f2601d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.302677][ T4084] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 56.302689][ T4084] R13: 0000000000000000 R14: 00007f2603905fa0 R15: 00007ffcdd0a40d8 [ 56.302709][ T4084] [ 56.314103][ T4074] EXT4-fs error (device loop3): ext4_xattr_block_find:1869: inode #15: comm syz.3.195: corrupted xattr block 128: overlapping e_value [ 56.530703][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.564814][ T4088] loop4: detected capacity change from 0 to 1024 [ 56.583033][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.615820][ T4088] ext2: Bad value for 'journal_dev' [ 56.672992][ T4087] loop0: detected capacity change from 0 to 8192 [ 56.704179][ T4087] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 56.704204][ T4087] FAT-fs (loop0): Filesystem has been set read-only [ 56.709206][ T4087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 56.833973][ T4102] loop0: detected capacity change from 0 to 2048 [ 56.883768][ T3298] loop0: p1 < > p4 [ 56.892055][ T3298] loop0: p4 size 8388608 extends beyond EOD, truncated [ 56.936867][ T4102] loop0: p1 < > p4 [ 56.941369][ T4107] loop2: detected capacity change from 0 to 128 [ 56.952955][ T4107] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.965504][ T4102] loop0: p4 size 8388608 extends beyond EOD, truncated [ 57.024039][ T4111] loop3: detected capacity change from 0 to 1024 [ 57.037647][ T3005] loop0: p1 < > p4 [ 57.042968][ T3005] loop0: p4 size 8388608 extends beyond EOD, truncated [ 57.058690][ T4107] netlink: 100 bytes leftover after parsing attributes in process `syz.2.208'. [ 57.068867][ T4107] netlink: 32 bytes leftover after parsing attributes in process `syz.2.208'. [ 57.078607][ T4111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.095445][ T4111] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.115757][ T4111] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.210: corrupted xattr block 128: overlapping e_value [ 57.141138][ T4111] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 57.147417][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 57.150301][ T4111] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.210: corrupted xattr block 128: overlapping e_value [ 57.175765][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 57.191742][ T4119] loop4: detected capacity change from 0 to 1024 [ 57.205391][ T4111] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 57.229147][ T4111] EXT4-fs error (device loop3): ext4_xattr_block_find:1869: inode #15: comm syz.3.210: corrupted xattr block 128: overlapping e_value [ 57.247586][ T3545] udevd[3545]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 57.252861][ T4119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.259689][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 57.303203][ T4119] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.325533][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.339772][ T4124] netlink: 'syz.2.214': attribute type 13 has an invalid length. [ 57.363951][ T4119] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.213: corrupted xattr block 128: overlapping e_value [ 57.383716][ T4124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.412042][ T4119] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 57.425804][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 57.425821][ T29] audit: type=1326 audit(1744538235.299:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440827d169 code=0x7ffc0000 [ 57.457059][ T29] audit: type=1326 audit(1744538235.299:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440827d169 code=0x7ffc0000 [ 57.492993][ T4119] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.213: corrupted xattr block 128: overlapping e_value [ 57.530898][ T4125] loop0: detected capacity change from 0 to 8192 [ 57.539066][ T4119] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 57.549172][ T4119] EXT4-fs error (device loop4): ext4_xattr_block_find:1869: inode #15: comm syz.4.213: corrupted xattr block 128: overlapping e_value [ 57.574658][ T29] audit: type=1326 audit(1744538235.349:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f440827d169 code=0x7ffc0000 [ 57.601488][ T29] audit: type=1326 audit(1744538235.349:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440827d169 code=0x7ffc0000 [ 57.626707][ T29] audit: type=1326 audit(1744538235.349:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440827d169 code=0x7ffc0000 [ 57.651725][ T29] audit: type=1326 audit(1744538235.359:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f440827d169 code=0x7ffc0000 [ 57.676643][ T29] audit: type=1326 audit(1744538235.359:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440827d169 code=0x7ffc0000 [ 57.700566][ T29] audit: type=1326 audit(1744538235.359:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.3.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440827d169 code=0x7ffc0000 [ 57.727710][ T4125] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 57.736438][ T4125] FAT-fs (loop0): Filesystem has been set read-only [ 57.764887][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.777004][ T4125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.216'. [ 57.865310][ T29] audit: type=1326 audit(1744538235.729:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5980cd169 code=0x7ffc0000 [ 57.889505][ T29] audit: type=1326 audit(1744538235.729:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5980cd169 code=0x7ffc0000 [ 57.955499][ T4137] loop2: detected capacity change from 0 to 1024 [ 57.963155][ T4137] ext2: Bad value for 'journal_dev' [ 58.073969][ T4147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 58.098086][ T4144] loop0: detected capacity change from 0 to 2048 [ 58.139310][ T4144] loop0: p1 < > p4 [ 58.140754][ T4144] loop0: p4 size 8388608 extends beyond EOD, truncated [ 58.198922][ T3298] ================================================================== [ 58.198953][ T3298] BUG: KCSAN: data-race in touch_atime / touch_atime [ 58.198983][ T3298] [ 58.198989][ T3298] write to 0xffff888100219e00 of 4 bytes by task 3545 on cpu 0: [ 58.199007][ T3298] touch_atime+0x1f3/0x350 [ 58.199031][ T3298] filemap_read+0x827/0x8d0 [ 58.199065][ T3298] blkdev_read_iter+0x227/0x2d0 [ 58.199091][ T3298] vfs_read+0x5e6/0x710 [ 58.199120][ T3298] ksys_read+0xeb/0x1b0 [ 58.199150][ T3298] __x64_sys_read+0x42/0x50 [ 58.199180][ T3298] x64_sys_call+0x2a3b/0x2e10 [ 58.199203][ T3298] do_syscall_64+0xc9/0x1c0 [ 58.199237][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.199260][ T3298] [ 58.199266][ T3298] read to 0xffff888100219e00 of 4 bytes by task 3298 on cpu 1: [ 58.199283][ T3298] touch_atime+0x1a0/0x350 [ 58.199307][ T3298] filemap_read+0x827/0x8d0 [ 58.199336][ T3298] blkdev_read_iter+0x227/0x2d0 [ 58.199356][ T3298] vfs_read+0x5e6/0x710 [ 58.199379][ T3298] ksys_read+0xeb/0x1b0 [ 58.199407][ T3298] __x64_sys_read+0x42/0x50 [ 58.199438][ T3298] x64_sys_call+0x2a3b/0x2e10 [ 58.199471][ T3298] do_syscall_64+0xc9/0x1c0 [ 58.199503][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.199522][ T3298] [ 58.199525][ T3298] value changed: 0x025ebafd -> 0x041eb3bb [ 58.199535][ T3298] [ 58.199539][ T3298] Reported by Kernel Concurrency Sanitizer on: [ 58.199549][ T3298] CPU: 1 UID: 0 PID: 3298 Comm: udevd Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(voluntary) [ 58.199573][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 58.199585][ T3298] ================================================================== [ 58.581946][ T4150] loop3: detected capacity change from 0 to 512 [ 58.663730][ T4150] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.749129][ T4150] EXT4-fs (loop3): 1 truncate cleaned up [ 58.759922][ T4150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.966876][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.