last executing test programs: 10m10.060081257s ago: executing program 4 (id=1598): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@minixdf}, {@grpid}, {@mblk_io_submit}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 10m9.916852146s ago: executing program 4 (id=1602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffe, 0xc, 0x0, @buffer={0x0, 0x2f, &(0x7f0000000500)=""/47}, &(0x7f0000000400)="140000000000000000000d00", 0x0, 0x1, 0x3, 0x1, 0x0}) 10m9.876134936s ago: executing program 4 (id=1603): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 10m9.779762706s ago: executing program 4 (id=1605): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2200c3a, &(0x7f0000000140)={[{}, {@mode}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x4, 0x0}, 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1) renameat2(r4, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x80}, @IFLA_GRE_TOS={0x5, 0x9, 0xf}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r5) socket$phonet_pipe(0x23, 0x5, 0x2) getpeername$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000300)=0x4e8a7cec, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) 10m9.549615695s ago: executing program 4 (id=1607): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000001f85464d000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) (async, rerun: 64) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000f908008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f00000004c0)={[{@nodelalloc}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x4e3, &(0x7f0000001400)="$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") (rerun: 64) 10m9.122086685s ago: executing program 4 (id=1613): bind$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getrlimit(0x6, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f00000001c0)='system_u:object_r:fonts_t:s0\x00', 0x1d, 0x1) 10m9.085019534s ago: executing program 32 (id=1613): bind$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getrlimit(0x6, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f00000001c0)='system_u:object_r:fonts_t:s0\x00', 0x1d, 0x1) 6.825295714s ago: executing program 1 (id=6312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x2040, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x8, 0xe, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x8044) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r4 = semget$private(0x0, 0x1, 0x400) semtimedop(r4, &(0x7f0000000040)=[{0x2, 0x521, 0x1000}, {0x3, 0x186a, 0x1000}, {0x1, 0x4, 0x800}, {0x1, 0x5, 0x1800}, {0x1, 0x1000, 0x1000}], 0x5, &(0x7f0000000180)={0x0, 0x3938700}) socket(0x10, 0x803, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0xa, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4000}]}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @multicast1]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 6.697364493s ago: executing program 1 (id=6313): bind$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getrlimit(0x6, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) fsetxattr$security_selinux(r6, 0x0, &(0x7f00000001c0)='system_u:object_r:fonts_t:s0\x00', 0x1d, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.605516611s ago: executing program 1 (id=6318): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x60, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2, &(0x7f0000034780)=""/102391, &(0x7f0000000180)=0x18ff7) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) readv(r6, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/78, 0x4e}, {0x0}], 0x2) 5.02056168s ago: executing program 2 (id=6327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001a40)='!', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000007c0)="c1", 0x1}], 0x1}}], 0x2, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x81, 0x0, @mcast1, @private2, 0xac7520920b24d429, 0x7, 0x8001, 0x5}}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000880)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x40095505, &(0x7f00000000c0)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 4.723803179s ago: executing program 1 (id=6328): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x19, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001800000040000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000000840)=""/227}, 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0, 0xff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8000000a, 0x0) wait4(r4, 0x0, 0x8, &(0x7f0000000240)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000f00)='f2fs_lookup_start\x00', r5, 0x0, 0x1}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) 4.448620279s ago: executing program 1 (id=6329): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005e80)=@delchain={0x13fc, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x723b}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e24}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x1334, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x12ac, 0x6, [@m_skbmod={0xd4, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="fa5d4d1f9f70"}]}, {0x8e, 0x6, "d612fd8f436073176ab20431c465ac700c7e82db258f347363590696c096b124c9a8e2fe9c72c444f58cd8383ca65ceee4985bb75574c8ee9b340202ba45ccd23b5ff6a2411a52357e6323a54059976142a15acb3839b0b2069461592778cba8e506d7ebff0c95d223fb886420ece0c138d9a24c17a52cbd3ceb729504add4c7d6458e834c8b1f618f3c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0xc4, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '-.\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x7, 0x3, '[\xfd\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x11, 0x9, 0x0, 0x6000, 0x4}}, @TCA_DEF_DATA={0x11, 0x3, '}*@:(\'^&\'{.\\\x00'}]}, {0x51, 0x6, "2d462129a78cf10bed37b54bdbe4a3173e8b93ab39279d64102d5d8376b140d59147f036c5a33dbd8705c0959b8c9323aa89216336a26dfd4bab934ac6150e98106eddc34f3812a7a59bd6e11f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xd0, 0x1d, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffff01}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0x7a, 0x6, "f3dc19bfa944de4a5d2f794ba00fc558935c4fb26bb365e5c47310e6ab37926c9cc4e106e2bbd05eb61a8b01cf659ca235ace68f632b031707b40ebe202e13231dc1f281e99586ebc4537b8857efa3f6a67be7dd312e34337ba25b78e8bc7ef9927e012a59dcd8b36516e2c81796cb983320a67bd7ed"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x1040, 0x16, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xc}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_ROUTE4_ACT={0x74, 0x6, [@m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x19, 0x6, "ca8fd735f4c425bd44291fa86781920ab90ff95c64"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x13fc}, 0x1, 0x0, 0x0, 0x81}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x12, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000700000000000000fcffffff9500000000000000ed7c91822129a6668020a97885a72fa814bbac7724a07d21604e660be08c28d7b853eb440207d1dbe5e431d6cb6bf1c15dceba4e4acc19253091c193cf0cebb748b89fd2b2ca503f9d3811d67a38963214180d3cf50675504ac030ff54f48045bc3af4ff516f0a9e6b59d8e14711deae643dcc90a1b32e0214509c6aa670b73e976925aa76a0501eaf7537671fccaef0f6b595c17e59ebd1fbfb8154f5fe21"], 0x0, 0x800, 0x61, &(0x7f0000000740)=""/97, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000800), &(0x7f0000000840), 0x10, 0x32, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000040)={[{@auto_da_alloc}, {@min_batch_time}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") acct(&(0x7f0000000200)='./file1\x00') r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) utime(0x0, &(0x7f0000000100)={0x147, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x64000600) 3.367903777s ago: executing program 5 (id=6334): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="ddffffff140000000000000001000000", @ANYRES32=r3], 0x38, 0x44080}}], 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) init_module(&(0x7f0000001a00)={{0x7f, 0x45, 0x4c, 0x46, 0x10, 0x3, 0x6, 0x7, 0x401, 0x3, 0x3, 0xdd, 0xfffffffffffffffe, 0x40, 0x4, 0x6, 0x7, 0x38, 0x1, 0x6, 0x3, 0x80}, [{0x6474e551, 0xca0, 0x5, 0x9, 0x2, 0x8, 0x3, 0xffffffff}]}, 0x78, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x2, 0x0, 0x20001f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x46]}, 0x75) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00694ba7e2ae8959c3a1a1006a809454d1b9e49ca9bcfc4fc4988c654d24bf47f27cf5182a66907790f63da0382e7e8b6fa7bc01215b438ad0a0c54300383d371f98a51969e94000800000d1a09c066c83c90eb1659f642d9740b323fc7da8f03a2e547ee2dd62af8c0b51da0e3b75a1ccf23bb04d83fa977502819dcc5fbe622c4c35880cfe115f8743ddf5255ed6532d8ce9391e704bb6c64bf7bd3c353b218ccf99b00749bc4d22cdc096d92b7e3f7731bfbfc5af583df7f136a59dade8dafa14bcefad343a259d07d5b6e7152b1031acbba628c1f5310e53cd87b92c6be007f8aa026ce147dfd51281dba68af9b738f0a097f69b277ef9a9bd369a107367e5ed6f27bd9ef071148bc60b4845accf826763066baf9b092754602e7fe53fbd347a39262850be890a0300863518f5cd8e1d6d388c66123eac43a65f0b3a585c80576666c4ee5d579c349d415741bd3de7fd5af2fa9b50f63bbd192fa1ee4eb9d2eb2b4afffa5dd5a32f292bffcecbcc18071375b13aa12b581b2b23e80fb7a1eca9816df0137b589441fca8b569993caed53c6d9deae218"], 0x1, 0x253, &(0x7f00000004c0)="$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") r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x2, 0x0) write(r10, &(0x7f0000000180)="01", 0x1) close(r10) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.275540577s ago: executing program 2 (id=6335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b010000000000000000000000800000c82fc372", @ANYRES32, @ANYBLOB="9a5e63296aa70c2b000000000000001000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80f6}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x30) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f0000000580)=""/125, 0x7d}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000006c0)}], 0x6) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = syz_clone(0x4081000, &(0x7f0000000780)="a38b618a2d4a20ca17a888cc2f8a7601896d6e0efdefcb77d9d6158e6bc59371fbbe8ea547ee14dbd07fbf36233902f8275273c589ae6fcc5e4f40bb080748c2374c6014444a30e384f86d989105e53ebe08ff582eb709b0d5bf529ea0db5cd3fd6d8990252a16d8b58f1061717d7ea18ea4bfc5ea61352e80b6c4cbfdf744fbff3af69410f209b5d8881cf55954e13aeec55559f29bde587f", 0x99, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="cc6b778e5cd48f33ac010688996c6974d93f95fb3061a7142942576bbf8a7af20521d4bbd952dc6b1be5da5c914bdad0f7e3f7cb945b833e7bbb24c9db44ced5634819334726a5837b7e54ad0fc0b4b479ce2eaddbfaf0cd4e2760619a9b40c67d9687738b138e9c23a07a2c11f7d7afdc6ea578bcd507470ed00f544fb30f5a46b3fb2694bcdaa23d5f") fcntl$setlease(r7, 0x400, 0x1) perf_event_open(&(0x7f0000000980)={0x4, 0x80, 0x9f, 0x2, 0xc4, 0x6, 0x0, 0x3cec, 0xc00c0, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x259a9f0865b7bd53, @perf_config_ext={0x8, 0x100000001}, 0x4009, 0x5, 0xec39, 0x7, 0x2, 0x6, 0x8, 0x0, 0x3ff, 0x0, 0x3}, r8, 0xb, r7, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a00), r9) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000b40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000b80)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r9, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="100027bd7000ffdbdf250500000008000100", @ANYRES32=r11, @ANYBLOB="080004000100000008000100", @ANYRES32=r12, @ANYBLOB="0e0b0100", @ANYRES32=0x0, @ANYBLOB="0800040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x81) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0500510000", @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf250400000005000a000100000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4048841}, 0x1) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r14}, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r15 = syz_open_dev$usbfs(&(0x7f0000000380), 0x1ff, 0x8a401) ioctl$USBDEVFS_CONTROL(r15, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@bh}, {@noquota}, {@noblock_validity}, {@auto_da_alloc}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x525, &(0x7f00000007c0)="$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") 2.793257245s ago: executing program 1 (id=6338): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1], 0x30, 0x40400d1}}], 0x1, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e5, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000, 0x100000000000000) 2.387502864s ago: executing program 2 (id=6342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x2c, r3, 0xc4fc9e906872338b, 0x10000, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.377896895s ago: executing program 3 (id=6343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xa, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x44}}, 0x40808c4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000008000000f9ffffff0700000008100000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="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"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) 2.336463474s ago: executing program 2 (id=6344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r1, @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x4000001) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x190, 0x11, 0x148, 0x190, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x7fffffff, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@physdev={{0x68}, {'veth0_to_batadv\x00', {}, 'macsec0\x00', {0x1fe}, 0x10, 0x10}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x2, 0x2, 0x3, 0x1], 0x5}, {0x1, [0x0, 0x2, 0x0, 0x6, 0x3, 0x2], 0x4, 0x1}}}}, {{@ip={@multicast2, @remote, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x79, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f00000004c0)=@v3={0x3000000, [{0x536, 0x6}, {0x0, 0x200}]}, 0x18, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x7dc7, &(0x7f0000000040)={0x0, 0xbfe, 0x21004, 0x1, 0x2c0}, 0x0, 0x0) io_uring_setup(0x4896, &(0x7f0000000340)={0x0, 0xfcd3, 0x3, 0x1, 0xfffffffc}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0xfffffffffffffffd}, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) semget$private(0x0, 0xc, 0x0) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x10}}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000716f00000000000033"], 0xfc}}, 0x40000040) membarrier(0x4, 0x0) 2.278834575s ago: executing program 5 (id=6346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001a40)='!', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000007c0)="c1", 0x1}], 0x1}}], 0x2, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x81, 0x0, @mcast1, @private2, 0xac7520920b24d429, 0x7, 0x8001, 0x5}}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000880)=ANY=[], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.273413414s ago: executing program 3 (id=6348): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005e80)=@delchain={0x25b0, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x723b}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e24}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x24e8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x2460, 0x6, [@m_skbmod={0xd4, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="fa5d4d1f9f70"}]}, {0x8e, 0x6, "d612fd8f436073176ab20431c465ac700c7e82db258f347363590696c096b124c9a8e2fe9c72c444f58cd8383ca65ceee4985bb75574c8ee9b340202ba45ccd23b5ff6a2411a52357e6323a54059976142a15acb3839b0b2069461592778cba8e506d7ebff0c95d223fb886420ece0c138d9a24c17a52cbd3ceb729504add4c7d6458e834c8b1f618f3c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x11bc, 0xf, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x6, 0x2, 0x2, 0x4}, @dev={0xac, 0x14, 0x14, 0x7f}, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x8001, 0x0, 0xfff, 0x1}, @loopback, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x65, 0x7, 0x768, 0x2}, @loopback, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff0c, 0x1, 0x7, 0x2, 0xcf9}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8000, 0x0, 0x1, 0x3}, @dev={0xac, 0x14, 0x14, 0x12}, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8d, 0x5, 0x5, 0x5}, @multicast1, @rand_addr=0x64010102, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xb, 0x5, 0x3, 0x6}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x15}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x7, 0x7, 0x7}, @local, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x7, 0x1, 0x4}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x20000000, 0x6, 0x3}, @broadcast, @local, 0xff}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '-.\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x11, 0x9, 0x0, 0x6000, 0x4}}, @TCA_DEF_DATA={0x11, 0x3, '}*@:(\'^&\'{.\\\x00'}]}, {0x51, 0x6, "2d462129a78cf10bed37b54bdbe4a3173e8b93ab39279d64102d5d8376b140d59147f036c5a33dbd8705c0959b8c9323aa89216336a26dfd4bab934ac6150e98106eddc34f3812a7a59bd6e11f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xd0, 0x1d, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffff01}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0x7a, 0x6, "f3dc19bfa944de4a5d2f794ba00fc558935c4fb26bb365e5c47310e6ab37926c9cc4e106e2bbd05eb61a8b01cf659ca235ace68f632b031707b40ebe202e13231dc1f281e99586ebc4537b8857efa3f6a67be7dd312e34337ba25b78e8bc7ef9927e012a59dcd8b36516e2c81796cb983320a67bd7ed"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x1040, 0x16, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xc}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_ROUTE4_ACT={0x74, 0x6, [@m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x19, 0x6, "ca8fd735f4c425bd44291fa86781920ab90ff95c64"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x25b0}, 0x1, 0x0, 0x0, 0x81}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x12, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000700000000000000fcffffff9500000000000000ed7c91822129a6668020a97885a72fa814bbac7724a07d21604e660be08c28d7b853eb440207d1dbe5e431d6cb6bf1c15dceba4e4acc19253091c193cf0cebb748b89fd2b2ca503f9d3811d67a38963214180d3cf50675504ac030ff54f48045bc3af4ff516f0a9e6b59d8e14711deae643dcc90a1b32e0214509c6aa670b73e976925aa76a0501eaf7537671fccaef0f6b595c17e59ebd1fbfb8154f5fe21"], 0x0, 0x800, 0x61, &(0x7f0000000740)=""/97, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000800), &(0x7f0000000840), 0x10, 0x32, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000040)={[{@auto_da_alloc}, {@min_batch_time}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) utime(0x0, &(0x7f0000000100)={0x147, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x64000600) 2.181825304s ago: executing program 0 (id=6349): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32=r0], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x280) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x280) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='mem_disconnect\x00', r6}, 0x18) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r7, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4c", 0x1d}], 0x1}, 0x0) epoll_create1(0x80000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r8}, 0x10) timer_create(0x9, 0x0, &(0x7f0000000400)) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000008c40)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1.654583363s ago: executing program 0 (id=6350): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) utimes(0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0x1, @empty, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5}, 0x1, {0x10}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) (fail_nth: 2) 1.461213452s ago: executing program 2 (id=6351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000000000000000b75536be5e9e8cf8548119785b5699eb24701cfae6fb16830b5377ea27e3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000580)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x58881, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080), 0x64, 0x52a, &(0x7f0000000a40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) getsockopt(r3, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm, @window={0x3, 0x63d, 0x401}, @mss={0x2, 0x6}, @timestamp, @mss={0x2, 0x9}], 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000de4e6d070855b8000000000000000000020000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) syz_usbip_server_init(0x5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'netdevsim0\x00', 0x100}) socket$kcm(0x2, 0x3, 0x2) 1.296303492s ago: executing program 5 (id=6352): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x2c, r3, 0xc4fc9e906872338b, 0x10000, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.281699833s ago: executing program 3 (id=6353): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x1, 0x104) pwritev2(r2, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d0", 0x1}, {0x0}], 0x2, 0x0, 0x7, 0x5) 1.257402902s ago: executing program 5 (id=6354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x2c, r3, 0xc4fc9e906872338b, 0x10000, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.189673352s ago: executing program 3 (id=6355): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005e80)=@delchain={0x2590, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x723b}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e24}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x24c8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x2440, 0x6, [@m_skbmod={0xd4, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="fa5d4d1f9f70"}]}, {0x8e, 0x6, "d612fd8f436073176ab20431c465ac700c7e82db258f347363590696c096b124c9a8e2fe9c72c444f58cd8383ca65ceee4985bb75574c8ee9b340202ba45ccd23b5ff6a2411a52357e6323a54059976142a15acb3839b0b2069461592778cba8e506d7ebff0c95d223fb886420ece0c138d9a24c17a52cbd3ceb729504add4c7d6458e834c8b1f618f3c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x1194, 0xf, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x6, 0x2, 0x2, 0x4}, @dev={0xac, 0x14, 0x14, 0x7f}, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x8001, 0x0, 0xfff, 0x1}, @loopback, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x65, 0x7, 0x768, 0x2}, @loopback, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff0c, 0x1, 0x7, 0x2, 0xcf9}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8000, 0x0, 0x1, 0x3}, @dev={0xac, 0x14, 0x14, 0x12}, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x8d, 0x5, 0x5, 0x5}, @multicast1, @rand_addr=0x64010102, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xb, 0x5, 0x3, 0x6}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x15}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0x7, 0x7, 0x7}, @local, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x20000000, 0x6, 0x3}, @broadcast, @local, 0xff}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0xc4, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '-.\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x7, 0x3, '[\xfd\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x11, 0x9, 0x0, 0x6000, 0x4}}, @TCA_DEF_DATA={0x11, 0x3, '}*@:(\'^&\'{.\\\x00'}]}, {0x51, 0x6, "2d462129a78cf10bed37b54bdbe4a3173e8b93ab39279d64102d5d8376b140d59147f036c5a33dbd8705c0959b8c9323aa89216336a26dfd4bab934ac6150e98106eddc34f3812a7a59bd6e11f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xd0, 0x1d, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffff01}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0x7a, 0x6, "f3dc19bfa944de4a5d2f794ba00fc558935c4fb26bb365e5c47310e6ab37926c9cc4e106e2bbd05eb61a8b01cf659ca235ace68f632b031707b40ebe202e13231dc1f281e99586ebc4537b8857efa3f6a67be7dd312e34337ba25b78e8bc7ef9927e012a59dcd8b36516e2c81796cb983320a67bd7ed"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x1040, 0x16, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xc}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_ROUTE4_ACT={0x74, 0x6, [@m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x19, 0x6, "ca8fd735f4c425bd44291fa86781920ab90ff95c64"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x2590}, 0x1, 0x0, 0x0, 0x81}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x12, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000700000000000000fcffffff9500000000000000ed7c91822129a6668020a97885a72fa814bbac7724a07d21604e660be08c28d7b853eb440207d1dbe5e431d6cb6bf1c15dceba4e4acc19253091c193cf0cebb748b89fd2b2ca503f9d3811d67a38963214180d3cf50675504ac030ff54f48045bc3af4ff516f0a9e6b59d8e14711deae643dcc90a1b32e0214509c6aa670b73e976925aa76a0501eaf7537671fccaef0f6b595c17e59ebd1fbfb8154f5fe21"], 0x0, 0x800, 0x61, &(0x7f0000000740)=""/97, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000800), &(0x7f0000000840), 0x10, 0x32, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000040)={[{@auto_da_alloc}, {@min_batch_time}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") acct(&(0x7f0000000200)='./file1\x00') r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) utime(0x0, &(0x7f0000000100)={0x147, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x64000600) 1.161415172s ago: executing program 5 (id=6356): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="ddffffff140000000000000001000000", @ANYRES32=r3], 0x38, 0x44080}}], 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) init_module(&(0x7f0000001a00)={{0x7f, 0x45, 0x4c, 0x46, 0x10, 0x3, 0x6, 0x7, 0x401, 0x3, 0x3, 0xdd, 0xfffffffffffffffe, 0x40, 0x4, 0x6, 0x7, 0x38, 0x1, 0x6, 0x3, 0x80}, [{0x6474e551, 0xca0, 0x5, 0x9, 0x2, 0x8, 0x3, 0xffffffff}]}, 0x78, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x2, 0x0, 0x20001f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x46]}, 0x75) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = openat$binfmt(0xffffffffffffff9c, r9, 0x2, 0x0) write(r10, &(0x7f0000000180)="01", 0x1) close(r10) execveat$binfmt(0xffffffffffffff9c, r9, 0x0, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 1.058532942s ago: executing program 0 (id=6357): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3, 0x3, '\x00', 0x0, r2, 0x0, 0x80, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 911.882002ms ago: executing program 0 (id=6358): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000020000000000000000000000000000000000007e6bdf57"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) 303.42276ms ago: executing program 3 (id=6359): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_emit_ethernet(0xe2, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc948100000086dd6000000000a83a00fc000000000000000000000000000000ff02000000000000000000000000000102009078000000006018b08800000000fe8000000000000000000000000000bbfc01000000000000002c0d0000000000000032d7897ecdf7133b3e03ab65762dcf02a95b38f5f35b434e6b81725b3d3973928969b768c9410e"], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101881, 0x0) io_setup(0x2278, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_uring_setup(0x3331, &(0x7f0000000280)={0x0, 0x9d14, 0x3, 0x0, 0x245}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7472616e733d6664e4de91516e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 264.55006ms ago: executing program 5 (id=6360): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) clock_gettime(0xfffffffffffffffe, &(0x7f0000000400)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r4, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x400000000000006, 0x800040000000206b}) syz_clone3(&(0x7f00000011c0)={0x80, 0x0, &(0x7f00000005c0), &(0x7f0000001000), {}, 0x0, 0x0, &(0x7f0000001100)=""/107, 0x0, 0x0, {r4}}, 0x58) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf090000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000002c0)='./file0\x00', 0x600010c) write(0xffffffffffffffff, 0x0, 0x0) 236.03789ms ago: executing program 2 (id=6361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r1, @ANYRESOCT=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x4000001) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x190, 0x11, 0x148, 0x190, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x7fffffff, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@physdev={{0x68}, {'veth0_to_batadv\x00', {}, 'macsec0\x00', {0x1fe}, 0x10, 0x10}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x2, 0x2, 0x3, 0x1], 0x5}, {0x1, [0x0, 0x2, 0x0, 0x6, 0x3, 0x2], 0x4, 0x1}}}}, {{@ip={@multicast2, @remote, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x79, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f00000004c0)=@v3={0x3000000, [{0x536, 0x6}, {0x0, 0x200}]}, 0x18, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x7dc7, &(0x7f0000000040)={0x0, 0xbfe, 0x21004, 0x1, 0x2c0}, 0x0, 0x0) io_uring_setup(0x4896, &(0x7f0000000340)={0x0, 0xfcd3, 0x3, 0x1, 0xfffffffc}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0xfffffffffffffffd}, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) semget$private(0x0, 0xc, 0x0) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x10}}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000716f00000000000033"], 0xfc}}, 0x40000040) membarrier(0x4, 0x0) 94.31924ms ago: executing program 0 (id=6362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xd}, @initr0, @exit, @alu={0x5, 0x1, 0xc, 0xa, 0xa, 0xffff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 31.40676ms ago: executing program 0 (id=6363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001a40)='!', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000007c0)="c1", 0x1}], 0x1}}], 0x2, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x81, 0x0, @mcast1, @private2, 0xac7520920b24d429, 0x7, 0x8001, 0x5}}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 0s ago: executing program 3 (id=6364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001a40)='!', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000007c0)="c1", 0x1}], 0x1}}], 0x2, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x4, 0x81, 0x0, @mcast1, @private2, 0xac7520920b24d429, 0x7, 0x8001, 0x5}}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000880)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x40095505, &(0x7f00000000c0)=0x2) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f00000002c0)=""/234) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) kernel console output (not intermixed with test programs): sadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 709.204673][ T29] audit: type=1400 audit(709.206:54942): avc: denied { create } for pid=24149 comm="syz.3.5966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 709.223670][ T29] audit: type=1400 audit(709.206:54943): avc: denied { bind } for pid=24149 comm="syz.3.5966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 709.242581][ T29] audit: type=1400 audit(709.206:54944): avc: denied { write } for pid=24149 comm="syz.3.5966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 709.250749][T24150] loop3: detected capacity change from 0 to 512 [ 709.383302][T24157] loop5: detected capacity change from 0 to 512 [ 709.456446][ T29] audit: type=1326 audit(709.486:54945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.2.5959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 709.479633][ T29] audit: type=1326 audit(709.486:54946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.2.5959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 709.506151][T13454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.652264][T24157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.669509][T24157] Process accounting resumed [ 709.729421][T24157] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 709.749933][T24156] lo speed is unknown, defaulting to 1000 [ 709.756080][T24156] vcan0 speed is unknown, defaulting to 1000 [ 709.811906][T24150] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5966: bg 0: block 248: padding at end of block bitmap is not set [ 709.865848][T24150] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.5966: Failed to acquire dquot type 1 [ 709.898336][T24150] EXT4-fs (loop3): 1 truncate cleaned up [ 709.904619][T24150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.924616][T24165] ref_ctr_offset mismatch. inode: 0xc5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 710.014039][T24150] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 710.020749][T24150] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 710.028662][T24150] vhci_hcd vhci_hcd.0: Device attached [ 710.036940][T20745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.049254][T24167] vhci_hcd: connection closed [ 710.049513][T18851] vhci_hcd: stop threads [ 710.058558][T18851] vhci_hcd: release socket [ 710.062986][T18851] vhci_hcd: disconnect device [ 710.143122][T24174] Invalid ELF header type: 3 != 1 [ 710.155307][T24172] loop5: detected capacity change from 0 to 512 [ 710.172788][T24172] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 710.179460][T24174] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 710.205355][T24174] loop1: detected capacity change from 0 to 256 [ 710.220881][T24172] EXT4-fs (loop5): orphan cleanup on readonly fs [ 710.240211][T24172] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.5970: Failed to acquire dquot type 1 [ 710.255781][T24174] FAT-fs (loop1): Directory bread(block 64) failed [ 710.265501][T24174] FAT-fs (loop1): Directory bread(block 65) failed [ 710.272902][T24172] EXT4-fs (loop5): 1 truncate cleaned up [ 710.280150][T24174] FAT-fs (loop1): Directory bread(block 66) failed [ 710.287393][T24172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 710.301385][T24174] FAT-fs (loop1): Directory bread(block 67) failed [ 710.308029][T24174] FAT-fs (loop1): Directory bread(block 68) failed [ 710.318646][T24174] FAT-fs (loop1): Directory bread(block 69) failed [ 710.333055][T24174] FAT-fs (loop1): Directory bread(block 70) failed [ 710.340082][T20745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.340221][T24174] FAT-fs (loop1): Directory bread(block 71) failed [ 710.355683][T24174] FAT-fs (loop1): Directory bread(block 72) failed [ 710.362245][T24174] FAT-fs (loop1): Directory bread(block 73) failed [ 710.401195][T24174] syz.1.5971: attempt to access beyond end of device [ 710.401195][T24174] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 710.416282][T24174] syz.1.5971: attempt to access beyond end of device [ 710.416282][T24174] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 710.429601][T24174] Buffer I/O error on dev loop1, logical block 442, async page read [ 710.621439][T24184] 9pnet: Could not find request transport: fdäÞ‘Qno=0xffffffffffffffff [ 710.634553][T13795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.739435][T24210] loop1: detected capacity change from 0 to 512 [ 710.790394][T24210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 710.879681][T24214] lo speed is unknown, defaulting to 1000 [ 710.886073][T24214] vcan0 speed is unknown, defaulting to 1000 [ 711.077246][T24210] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 711.093080][T18849] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.134276][T24200] lo speed is unknown, defaulting to 1000 [ 711.143375][T18849] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.154783][T24200] vcan0 speed is unknown, defaulting to 1000 [ 711.192687][T18849] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.247892][T18849] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.405353][T13454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.468627][T24221] Invalid ELF header type: 3 != 1 [ 711.476083][T24221] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 711.488261][T24221] loop1: detected capacity change from 0 to 256 [ 711.504740][T24221] FAT-fs (loop1): Directory bread(block 64) failed [ 711.512270][T24221] FAT-fs (loop1): Directory bread(block 65) failed [ 711.520300][T24221] FAT-fs (loop1): Directory bread(block 66) failed [ 711.527268][T24221] FAT-fs (loop1): Directory bread(block 67) failed [ 711.534183][T24221] FAT-fs (loop1): Directory bread(block 68) failed [ 711.540881][T24221] FAT-fs (loop1): Directory bread(block 69) failed [ 711.547514][T24221] FAT-fs (loop1): Directory bread(block 70) failed [ 711.554466][T18849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.566707][T24224] loop3: detected capacity change from 0 to 128 [ 711.574839][T18849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.577176][T24221] FAT-fs (loop1): Directory bread(block 71) failed [ 711.595138][T24221] FAT-fs (loop1): Directory bread(block 72) failed [ 711.601830][T24221] FAT-fs (loop1): Directory bread(block 73) failed [ 711.609245][T18849] bond0 (unregistering): Released all slaves [ 711.620215][T24221] syz.1.5985: attempt to access beyond end of device [ 711.620215][T24221] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 711.620243][T18849] bond1 (unregistering): Released all slaves [ 711.623228][T18849] bond2 (unregistering): Released all slaves [ 711.651264][T18849] bond3 (unregistering): Released all slaves [ 711.657963][T24221] syz.1.5985: attempt to access beyond end of device [ 711.657963][T24221] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 711.671277][T24221] Buffer I/O error on dev loop1, logical block 442, async page read [ 711.682480][T24225] syz.3.5986: attempt to access beyond end of device [ 711.682480][T24225] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 711.684187][T18849] bond4 (unregistering): Released all slaves [ 711.707919][T18849] bond5 (unregistering): Released all slaves [ 711.718499][T18849] bond6 (unregistering): Released all slaves [ 711.728313][T18849] bond7 (unregistering): Released all slaves [ 711.737624][T18849] bond8 (unregistering): Released all slaves [ 711.748473][T18849] bond9 (unregistering): Released all slaves [ 711.766297][T18849] bond10 (unregistering): Released all slaves [ 711.887301][T18849] bond11 (unregistering): left promiscuous mode [ 711.894497][T18849] bond11 (unregistering): Released all slaves [ 711.903419][T18849] bond12 (unregistering): Released all slaves [ 712.011401][T24233] lo speed is unknown, defaulting to 1000 [ 712.018134][T24233] vcan0 speed is unknown, defaulting to 1000 [ 712.249754][T24200] chnl_net:caif_netlink_parms(): no params data found [ 712.393685][T18849] tipc: Disabling bearer [ 712.399002][T18849] tipc: Left network mode [ 712.642558][T24243] loop5: detected capacity change from 0 to 164 [ 712.650151][T24243] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 712.733248][T18849] batadv0: left promiscuous mode [ 712.733665][T24247] loop1: detected capacity change from 0 to 512 [ 712.746238][T18849] hsr_slave_0: left promiscuous mode [ 712.748805][T24247] EXT4-fs: Ignoring removed i_version option [ 712.758333][T24247] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 712.768370][T18849] hsr_slave_1: left promiscuous mode [ 712.773510][T24247] EXT4-fs (loop1): 1 truncate cleaned up [ 712.779680][T24247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.792797][T18849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.800390][T18849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.838164][T18849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.845797][T18849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.865873][T18849] veth1_vlan: left promiscuous mode [ 712.871303][T18849] veth0_vlan: left promiscuous mode [ 712.892097][T24257] 9pnet_fd: Insufficient options for proto=fd [ 712.927595][T24259] FAULT_INJECTION: forcing a failure. [ 712.927595][T24259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.940791][T24259] CPU: 1 UID: 0 PID: 24259 Comm: syz.5.5996 Not tainted 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0 [ 712.951594][T24259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 712.961744][T24259] Call Trace: [ 712.965037][T24259] [ 712.968029][T24259] dump_stack_lvl+0xf2/0x150 [ 712.972659][T24259] dump_stack+0x15/0x1a [ 712.976879][T24259] should_fail_ex+0x223/0x230 [ 712.981656][T24259] should_fail+0xb/0x10 [ 712.985943][T24259] should_fail_usercopy+0x1a/0x20 [ 712.990975][T24259] _copy_from_user+0x1e/0xb0 [ 712.995694][T24259] tls_setsockopt+0x80e/0xcb0 [ 713.000444][T24259] sock_common_setsockopt+0x64/0x80 [ 713.005718][T24259] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 713.011628][T24259] __sys_setsockopt+0x187/0x200 [ 713.016492][T24259] __x64_sys_setsockopt+0x66/0x80 [ 713.021626][T24259] x64_sys_call+0x282e/0x2dc0 [ 713.026437][T24259] do_syscall_64+0xc9/0x1c0 [ 713.030968][T24259] ? clear_bhb_loop+0x55/0xb0 [ 713.035647][T24259] ? clear_bhb_loop+0x55/0xb0 [ 713.040339][T24259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.046266][T24259] RIP: 0033:0x7fdcca415d29 [ 713.050686][T24259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.070327][T24259] RSP: 002b:00007fdcc8a81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 713.078811][T24259] RAX: ffffffffffffffda RBX: 00007fdcca605fa0 RCX: 00007fdcca415d29 [ 713.086793][T24259] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 713.094867][T24259] RBP: 00007fdcc8a81090 R08: 0000000000000038 R09: 0000000000000000 [ 713.102863][T24259] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 713.110863][T24259] R13: 0000000000000000 R14: 00007fdcca605fa0 R15: 00007ffc11ce8658 [ 713.118932][T24259] [ 713.127294][T13454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.261501][T24271] loop2: detected capacity change from 0 to 128 [ 713.284528][T24200] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.291971][T24200] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.304440][T24200] bridge_slave_0: entered allmulticast mode [ 713.311287][T24200] bridge_slave_0: entered promiscuous mode [ 713.348957][T24200] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.356094][T24200] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.365188][T24200] bridge_slave_1: entered allmulticast mode [ 713.372764][T24200] bridge_slave_1: entered promiscuous mode [ 713.397851][T24271] syz.2.6000: attempt to access beyond end of device [ 713.397851][T24271] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 713.452214][T24200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.483245][T24200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.494173][T24278] 9pnet: Could not find request transport: fdäÞ‘Qno=0xffffffffffffffff [ 713.549443][T24200] team0: Port device team_slave_0 added [ 713.580174][T24289] loop5: detected capacity change from 0 to 1024 [ 713.586912][T24289] EXT4-fs: Ignoring removed oldalloc option [ 713.600433][T24200] team0: Port device team_slave_1 added [ 713.660125][T24200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.667246][T24200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.693278][T24200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.714235][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 713.714253][ T29] audit: type=1326 audit(713.610:55275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.2.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a557c4690 code=0x7ffc0000 [ 713.758542][T24289] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 713.785112][T24287] loop2: detected capacity change from 0 to 512 [ 713.798102][T24287] EXT4-fs: Ignoring removed i_version option [ 713.830365][T24287] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 713.849752][T24200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.856767][T24200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.857249][T24289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.882696][T24200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.882835][ T29] audit: type=1326 audit(713.820:55276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.2.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a557c592b code=0x7ffc0000 [ 713.918223][T24289] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.928320][ T29] audit: type=1326 audit(713.840:55277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.2.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3a557c498a code=0x7ffc0000 [ 713.960251][ T29] audit: type=1326 audit(713.840:55278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.2.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3a557c498a code=0x7ffc0000 [ 713.983106][ T29] audit: type=1326 audit(713.840:55279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.2.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3a557c4597 code=0x7ffc0000 [ 714.006096][ T29] audit: type=1326 audit(713.840:55280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.2.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3a557c74ca code=0x7ffc0000 [ 714.055661][T24287] EXT4-fs (loop2): 1 truncate cleaned up [ 714.065964][T24200] hsr_slave_0: entered promiscuous mode [ 714.069233][T24287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.086928][T24200] hsr_slave_1: entered promiscuous mode [ 714.097788][ T29] audit: type=1326 audit(714.140:55281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.2.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a557c4690 code=0x7ffc0000 [ 714.120923][ T29] audit: type=1326 audit(714.140:55282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.2.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f3a557c4a77 code=0x7ffc0000 [ 714.143899][ T29] audit: type=1326 audit(714.140:55283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.2.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a557c4690 code=0x7ffc0000 [ 714.167094][ T29] audit: type=1326 audit(714.140:55284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24286 comm="syz.2.6006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 714.190297][T24200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 714.203584][T24200] Cannot create hsr debugfs directory [ 714.263278][T24301] 9pnet_fd: Insufficient options for proto=fd [ 714.466561][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.550342][T24307] loop5: detected capacity change from 0 to 512 [ 714.569784][T24307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.587090][T24307] Process accounting resumed [ 714.594866][T24307] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 714.621074][T24307] lo speed is unknown, defaulting to 1000 [ 714.627267][T24307] vcan0 speed is unknown, defaulting to 1000 [ 715.285811][T20745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.353467][T24331] FAULT_INJECTION: forcing a failure. [ 715.353467][T24331] name failslab, interval 1, probability 0, space 0, times 0 [ 715.366237][T24331] CPU: 0 UID: 0 PID: 24331 Comm: syz.3.6018 Not tainted 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0 [ 715.377038][T24331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 715.387176][T24331] Call Trace: [ 715.390455][T24331] [ 715.393383][T24331] dump_stack_lvl+0xf2/0x150 [ 715.398021][T24331] dump_stack+0x15/0x1a [ 715.402260][T24331] should_fail_ex+0x223/0x230 [ 715.406948][T24331] should_failslab+0x8f/0xb0 [ 715.411653][T24331] kmem_cache_alloc_node_noprof+0x59/0x320 [ 715.417484][T24331] ? __alloc_skb+0x10b/0x310 [ 715.422091][T24331] __alloc_skb+0x10b/0x310 [ 715.426523][T24331] netlink_alloc_large_skb+0xad/0xe0 [ 715.431854][T24331] netlink_sendmsg+0x3b4/0x6e0 [ 715.436682][T24331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.442052][T24331] __sock_sendmsg+0x140/0x180 [ 715.446757][T24331] ____sys_sendmsg+0x312/0x410 [ 715.451545][T24331] __sys_sendmsg+0x19d/0x230 [ 715.456218][T24331] __x64_sys_sendmsg+0x46/0x50 [ 715.460999][T24331] x64_sys_call+0x2734/0x2dc0 [ 715.465755][T24331] do_syscall_64+0xc9/0x1c0 [ 715.470269][T24331] ? clear_bhb_loop+0x55/0xb0 [ 715.475002][T24331] ? clear_bhb_loop+0x55/0xb0 [ 715.479693][T24331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.485629][T24331] RIP: 0033:0x7fb0f1415d29 [ 715.490059][T24331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.509683][T24331] RSP: 002b:00007fb0efa81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.518109][T24331] RAX: ffffffffffffffda RBX: 00007fb0f1605fa0 RCX: 00007fb0f1415d29 [ 715.526087][T24331] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 715.534063][T24331] RBP: 00007fb0efa81090 R08: 0000000000000000 R09: 0000000000000000 [ 715.542039][T24331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.550015][T24331] R13: 0000000000000000 R14: 00007fb0f1605fa0 R15: 00007ffc5a3f9068 [ 715.558011][T24331] [ 715.595378][T24200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 715.618444][T24200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 715.634072][T24200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 715.641279][T24340] loop3: detected capacity change from 0 to 512 [ 715.653059][T24340] EXT4-fs: Ignoring removed i_version option [ 715.660320][T24200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 715.672027][T24340] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 715.732541][T24340] EXT4-fs (loop3): 1 truncate cleaned up [ 715.753906][T24340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.760113][T24200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.779004][T24200] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.792913][T18849] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.800057][T18849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.844304][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.851478][ T7220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.974528][T24340] 9pnet_fd: Insufficient options for proto=fd [ 716.055278][T24200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.218060][T13795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.332582][T24370] lo speed is unknown, defaulting to 1000 [ 716.338894][T24370] vcan0 speed is unknown, defaulting to 1000 [ 716.437215][T24371] loop3: detected capacity change from 0 to 512 [ 716.461886][T24371] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 716.473652][T24371] EXT4-fs (loop3): orphan cleanup on readonly fs [ 716.486022][T24371] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6025: bg 0: block 248: padding at end of block bitmap is not set [ 716.505311][T24371] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.6025: Failed to acquire dquot type 1 [ 716.523116][T24371] EXT4-fs (loop3): 1 truncate cleaned up [ 716.531908][T24371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 716.679821][T24200] veth0_vlan: entered promiscuous mode [ 716.857168][T24200] veth1_vlan: entered promiscuous mode [ 717.247801][T24200] veth0_macvtap: entered promiscuous mode [ 717.271672][T24200] veth1_macvtap: entered promiscuous mode [ 717.302030][T24200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.312553][T24200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.322468][T24200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.333017][T24200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.342921][T24200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.353440][T24200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.363337][T24200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.373845][T24200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.383669][T24200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 717.394158][T24200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.509917][T24377] loop2: detected capacity change from 0 to 512 [ 717.617108][T24200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.664675][T24377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 717.712104][T24200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.722726][T24200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.732648][T24200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.743098][T24200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.753079][T24200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.763550][T24200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.773410][T24200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.783855][T24200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.793860][T24200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.804342][T24200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.818499][T24377] EXT4-fs (loop2): orphan cleanup on readonly fs [ 717.825437][T24377] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.6028: Failed to acquire dquot type 1 [ 717.860199][T24377] EXT4-fs (loop2): 1 truncate cleaned up [ 717.871944][T24200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.911149][T24200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.920045][T24200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.928828][T24200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.937663][T24200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.209011][T24377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 718.333854][T24393] loop1: detected capacity change from 0 to 512 [ 718.387978][T24393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 718.404421][T24393] EXT4-fs (loop1): orphan cleanup on readonly fs [ 718.411800][T24393] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6033: bg 0: block 248: padding at end of block bitmap is not set [ 718.429663][T24393] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6033: Failed to acquire dquot type 1 [ 718.445595][T24393] EXT4-fs (loop1): 1 truncate cleaned up [ 718.486246][T13795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.496099][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.545916][T24398] loop5: detected capacity change from 0 to 256 [ 718.681224][T24398] FAT-fs (loop5): Directory bread(block 64) failed [ 718.693321][T24398] FAT-fs (loop5): Directory bread(block 65) failed [ 718.702095][T24398] FAT-fs (loop5): Directory bread(block 66) failed [ 718.713987][T24398] FAT-fs (loop5): Directory bread(block 67) failed [ 718.721058][T24398] FAT-fs (loop5): Directory bread(block 68) failed [ 718.733575][T24398] FAT-fs (loop5): Directory bread(block 69) failed [ 718.806091][T24402] lo speed is unknown, defaulting to 1000 [ 718.813809][T24402] vcan0 speed is unknown, defaulting to 1000 [ 719.095945][T24393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 719.122926][T24398] FAT-fs (loop5): Directory bread(block 70) failed [ 719.134139][T24398] FAT-fs (loop5): Directory bread(block 71) failed [ 719.568741][T24406] loop2: detected capacity change from 0 to 512 [ 719.854211][T24398] FAT-fs (loop5): Directory bread(block 72) failed [ 719.860926][T24398] FAT-fs (loop5): Directory bread(block 73) failed [ 719.990233][T24406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.002854][T24406] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.073771][T24405] Process accounting resumed [ 720.084505][T24405] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 720.136086][T24405] lo speed is unknown, defaulting to 1000 [ 720.142323][T24405] vcan0 speed is unknown, defaulting to 1000 [ 720.276948][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 720.276967][ T29] audit: type=1400 audit(2000000002.700:55597): avc: denied { mount } for pid=24416 comm="syz.0.6040" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 720.417515][ T29] audit: type=1400 audit(2000000002.840:55598): avc: denied { unmount } for pid=24200 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 720.678295][T24430] loop5: detected capacity change from 0 to 512 [ 720.709300][T24430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.721998][T24430] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.739209][T24430] Process accounting resumed [ 720.974148][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.980447][T13454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.988361][T24430] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 721.000279][T24435] Invalid ELF header type: 3 != 1 [ 721.026954][T24433] lo speed is unknown, defaulting to 1000 [ 721.027270][T24435] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 721.033077][T24433] vcan0 speed is unknown, defaulting to 1000 [ 721.061490][ T29] audit: type=1326 audit(2000000003.480:55599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24436 comm="syz.2.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 721.085378][ T29] audit: type=1326 audit(2000000003.480:55600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24436 comm="syz.2.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 721.109169][ T29] audit: type=1326 audit(2000000003.480:55601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24436 comm="syz.2.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3a557c47df code=0x7ffc0000 [ 721.132667][ T29] audit: type=1326 audit(2000000003.480:55602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24436 comm="syz.2.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 721.156315][ T29] audit: type=1326 audit(2000000003.480:55603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24436 comm="syz.2.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 721.179959][ T29] audit: type=1326 audit(2000000003.480:55604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24436 comm="syz.2.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 721.200166][T24442] loop1: detected capacity change from 0 to 512 [ 721.203570][ T29] audit: type=1326 audit(2000000003.480:55605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24436 comm="syz.2.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 721.233479][ T29] audit: type=1326 audit(2000000003.480:55606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24436 comm="syz.2.6041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 721.267218][T24442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 721.335559][T24451] Invalid ELF header type: 3 != 1 [ 721.353534][T24442] EXT4-fs (loop1): orphan cleanup on readonly fs [ 721.362927][T24442] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6045: bg 0: block 248: padding at end of block bitmap is not set [ 721.363377][T20745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.424163][T24442] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6045: Failed to acquire dquot type 1 [ 721.462818][T24442] EXT4-fs (loop1): 1 truncate cleaned up [ 721.486898][T24442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 721.501712][T24421] lo speed is unknown, defaulting to 1000 [ 721.516200][T24421] vcan0 speed is unknown, defaulting to 1000 [ 721.663977][T24479] Invalid ELF header type: 3 != 1 [ 721.689853][T24479] loop5: detected capacity change from 0 to 256 [ 721.716321][T24479] FAT-fs (loop5): Directory bread(block 64) failed [ 721.723234][T24479] FAT-fs (loop5): Directory bread(block 65) failed [ 721.731460][T24479] FAT-fs (loop5): Directory bread(block 66) failed [ 721.740116][T24479] FAT-fs (loop5): Directory bread(block 67) failed [ 721.747196][T24479] FAT-fs (loop5): Directory bread(block 68) failed [ 721.753792][T24482] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6057'. [ 721.753782][T24479] FAT-fs (loop5): Directory bread(block 69) failed [ 721.771466][T24479] FAT-fs (loop5): Directory bread(block 70) failed [ 721.778117][T24479] FAT-fs (loop5): Directory bread(block 71) failed [ 721.784866][T24479] FAT-fs (loop5): Directory bread(block 72) failed [ 721.793548][T24479] FAT-fs (loop5): Directory bread(block 73) failed [ 721.867945][T24479] syz.5.6059: attempt to access beyond end of device [ 721.867945][T24479] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 721.927785][T24483] lo speed is unknown, defaulting to 1000 [ 721.934625][T24483] vcan0 speed is unknown, defaulting to 1000 [ 722.159796][T13454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.163809][T24488] loop2: detected capacity change from 0 to 512 [ 722.178173][T24421] chnl_net:caif_netlink_parms(): no params data found [ 722.186667][T24488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 722.207022][T24488] EXT4-fs (loop2): orphan cleanup on readonly fs [ 722.222542][T24488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6060: bg 0: block 248: padding at end of block bitmap is not set [ 722.246250][T24488] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.6060: Failed to acquire dquot type 1 [ 722.267480][T24421] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.274579][T24421] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.286684][T24488] EXT4-fs (loop2): 1 truncate cleaned up [ 722.295484][T24421] bridge_slave_0: entered allmulticast mode [ 722.296149][T24488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 722.302117][T24421] bridge_slave_0: entered promiscuous mode [ 722.322436][T24421] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.329564][T24421] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.335683][T24499] loop1: detected capacity change from 0 to 1764 [ 722.342035][T24421] bridge_slave_1: entered allmulticast mode [ 722.349731][T24421] bridge_slave_1: entered promiscuous mode [ 722.375370][T24421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.386096][T24421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.409612][T24421] team0: Port device team_slave_0 added [ 722.416358][T24421] team0: Port device team_slave_1 added [ 722.439071][T24421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.446076][T24421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.472364][T24421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.501391][T24421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.508468][T24421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.534698][T24421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.586835][T24504] lo speed is unknown, defaulting to 1000 [ 722.592926][T24504] vcan0 speed is unknown, defaulting to 1000 [ 722.636762][T24421] hsr_slave_0: entered promiscuous mode [ 722.643941][T24421] hsr_slave_1: entered promiscuous mode [ 722.651597][T24421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.669018][T24421] Cannot create hsr debugfs directory [ 722.796999][T24517] loop1: detected capacity change from 0 to 1024 [ 722.803678][T24517] EXT4-fs: Ignoring removed oldalloc option [ 722.810993][T24517] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 722.881360][T24517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.896595][T24517] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.938450][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.149318][T24524] loop2: detected capacity change from 0 to 1764 [ 723.325973][T24528] Invalid ELF header type: 3 != 1 [ 723.337146][T24528] loop2: detected capacity change from 0 to 256 [ 723.355301][T24528] FAT-fs (loop2): Directory bread(block 64) failed [ 723.371250][T24528] FAT-fs (loop2): Directory bread(block 65) failed [ 723.378914][T24528] FAT-fs (loop2): Directory bread(block 66) failed [ 723.386050][T24528] FAT-fs (loop2): Directory bread(block 67) failed [ 723.402791][T24528] FAT-fs (loop2): Directory bread(block 68) failed [ 723.413177][T24528] FAT-fs (loop2): Directory bread(block 69) failed [ 723.421865][T24528] FAT-fs (loop2): Directory bread(block 70) failed [ 723.428559][T24528] FAT-fs (loop2): Directory bread(block 71) failed [ 723.441133][T24421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 723.450224][T24528] FAT-fs (loop2): Directory bread(block 72) failed [ 723.457388][T24528] FAT-fs (loop2): Directory bread(block 73) failed [ 723.467029][T24421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 723.481990][T24532] loop5: detected capacity change from 0 to 512 [ 723.484586][T24421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 723.500512][T24528] syz.2.6073: attempt to access beyond end of device [ 723.500512][T24528] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 723.535527][T24421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 723.535867][T24532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 723.553876][T24528] syz.2.6073: attempt to access beyond end of device [ 723.553876][T24528] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 723.567350][T24528] Buffer I/O error on dev loop2, logical block 442, async page read [ 723.608558][T24532] EXT4-fs (loop5): orphan cleanup on readonly fs [ 723.626198][T24532] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.6075: Failed to acquire dquot type 1 [ 723.658339][T24532] EXT4-fs (loop5): 1 truncate cleaned up [ 723.664897][T24537] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 723.676027][T24539] loop1: detected capacity change from 0 to 1764 [ 723.685286][T24532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 723.688232][T24421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.724935][T24421] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.743974][T20745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.757341][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.764438][ T7350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.793586][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.800737][ T7350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.815931][T24549] loop1: detected capacity change from 0 to 128 [ 723.868959][T24421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 723.934519][T24559] loop2: detected capacity change from 0 to 512 [ 723.956176][T24558] syz.1.6083: attempt to access beyond end of device [ 723.956176][T24558] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 723.976947][T24559] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 724.059614][T24559] EXT4-fs (loop2): orphan cleanup on readonly fs [ 724.067876][T24559] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6084: bg 0: block 248: padding at end of block bitmap is not set [ 724.093970][T24559] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.6084: Failed to acquire dquot type 1 [ 724.108335][T24559] EXT4-fs (loop2): 1 truncate cleaned up [ 724.115220][T24559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 724.344071][T24570] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 724.371933][T24421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.450686][T24573] Invalid ELF header type: 3 != 1 [ 724.502119][T24573] loop5: detected capacity change from 0 to 256 [ 724.555809][T24573] FAT-fs (loop5): Directory bread(block 64) failed [ 724.589623][T24573] FAT-fs (loop5): Directory bread(block 65) failed [ 724.689040][T24573] FAT-fs (loop5): Directory bread(block 66) failed [ 724.719863][T24573] FAT-fs (loop5): Directory bread(block 67) failed [ 724.728389][T24421] veth0_vlan: entered promiscuous mode [ 724.734414][T24573] FAT-fs (loop5): Directory bread(block 68) failed [ 724.760995][T24421] veth1_vlan: entered promiscuous mode [ 724.767187][T24573] FAT-fs (loop5): Directory bread(block 69) failed [ 724.781947][T24573] FAT-fs (loop5): Directory bread(block 70) failed [ 724.800915][T24573] FAT-fs (loop5): Directory bread(block 71) failed [ 724.808484][T24421] veth0_macvtap: entered promiscuous mode [ 724.814739][T24573] FAT-fs (loop5): Directory bread(block 72) failed [ 724.825301][T24421] veth1_macvtap: entered promiscuous mode [ 724.832548][T24573] FAT-fs (loop5): Directory bread(block 73) failed [ 724.849476][T24421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.859996][T24421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.869855][T24421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.880317][T24421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.890150][T24421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.900600][T24421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.910450][T24421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.920914][T24421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.930866][T24421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.941362][T24421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.951308][T24421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.961789][T24421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.985431][T24573] syz.5.6090: attempt to access beyond end of device [ 724.985431][T24573] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 725.001546][T24573] syz.5.6090: attempt to access beyond end of device [ 725.001546][T24573] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 725.014982][T24573] Buffer I/O error on dev loop5, logical block 442, async page read [ 725.030053][T24421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.043780][T24421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.054354][T24421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.064274][T24421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.074780][T24421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.084632][T24421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.095250][T24421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.105192][T24421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.115720][T24421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.125619][T24421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.136092][T24421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.145927][T24421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.156412][T24421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.347597][T24421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.356556][T24421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.365349][T24421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.374113][T24421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.382894][T24421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.462320][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.503703][T24596] loop1: detected capacity change from 0 to 512 [ 725.526746][T24596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.539571][T24596] ext4 filesystem being mounted at /623/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.568052][T24596] Process accounting resumed [ 725.653694][T24602] lo speed is unknown, defaulting to 1000 [ 725.661571][T24602] vcan0 speed is unknown, defaulting to 1000 [ 725.877530][T24601] loop5: detected capacity change from 0 to 512 [ 725.926032][T24601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 725.956938][T24601] EXT4-fs (loop5): orphan cleanup on readonly fs [ 725.968172][T24601] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6096: bg 0: block 248: padding at end of block bitmap is not set [ 726.034840][T24601] __quota_error: 383 callbacks suppressed [ 726.034860][T24601] Quota error (device loop5): write_blk: dquota write failed [ 726.048095][T24601] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 726.058036][T24601] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.6096: Failed to acquire dquot type 1 [ 726.076448][T24601] EXT4-fs (loop5): 1 truncate cleaned up [ 726.489482][T24601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 726.581189][ T29] audit: type=1326 audit(2000000002.260:55982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="syz.3.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 726.604872][ T29] audit: type=1326 audit(2000000002.260:55983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="syz.3.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 726.628613][ T29] audit: type=1326 audit(2000000002.260:55984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="syz.3.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 726.652239][ T29] audit: type=1326 audit(2000000000.000:55985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="syz.3.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 726.675998][ T29] audit: type=1326 audit(2000000000.000:55986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="syz.3.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 726.699718][ T29] audit: type=1326 audit(2000000000.000:55987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="syz.3.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 726.723353][ T29] audit: type=1326 audit(2000000000.000:55988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 726.743468][T24619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6099'. [ 726.746419][ T29] audit: type=1326 audit(2000000000.000:55989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24612 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 726.769147][T24616] lo speed is unknown, defaulting to 1000 [ 726.784847][T24616] vcan0 speed is unknown, defaulting to 1000 [ 727.491731][T24627] loop3: detected capacity change from 0 to 512 [ 727.619948][T24627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.738886][T24421] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.758281][T24596] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 727.818981][T13454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.191078][T24640] loop3: detected capacity change from 0 to 512 [ 728.218739][T20745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.253071][T24640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 728.315161][T24640] EXT4-fs (loop3): orphan cleanup on readonly fs [ 728.323834][T24640] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6103: bg 0: block 248: padding at end of block bitmap is not set [ 728.338974][T24640] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.6103: Failed to acquire dquot type 1 [ 728.351927][T24640] EXT4-fs (loop3): 1 truncate cleaned up [ 728.439509][T18848] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.558273][T18848] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.674776][T24654] Invalid ELF header type: 3 != 1 [ 728.738753][T18848] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.775153][T24654] loop2: detected capacity change from 0 to 256 [ 728.894159][T24654] FAT-fs (loop2): Directory bread(block 64) failed [ 728.922064][T18848] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.088967][T24654] FAT-fs (loop2): Directory bread(block 65) failed [ 729.095606][T24654] FAT-fs (loop2): Directory bread(block 66) failed [ 729.102567][T24654] FAT-fs (loop2): Directory bread(block 67) failed [ 729.109178][T24654] FAT-fs (loop2): Directory bread(block 68) failed [ 729.115716][T24654] FAT-fs (loop2): Directory bread(block 69) failed [ 729.138600][T24640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 729.174443][T24654] FAT-fs (loop2): Directory bread(block 70) failed [ 729.192839][T24654] FAT-fs (loop2): Directory bread(block 71) failed [ 729.247164][T24664] lo speed is unknown, defaulting to 1000 [ 729.253605][T24664] vcan0 speed is unknown, defaulting to 1000 [ 729.890371][T24654] FAT-fs (loop2): Directory bread(block 72) failed [ 729.900408][T24654] FAT-fs (loop2): Directory bread(block 73) failed [ 729.920747][T24641] lo speed is unknown, defaulting to 1000 [ 729.981229][T24641] vcan0 speed is unknown, defaulting to 1000 [ 729.999053][T24654] syz.2.6108: attempt to access beyond end of device [ 729.999053][T24654] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 730.218178][T18848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.239580][T18848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.250254][T24675] FAULT_INJECTION: forcing a failure. [ 730.250254][T24675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.263414][T24675] CPU: 1 UID: 0 PID: 24675 Comm: syz.2.6113 Not tainted 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0 [ 730.274216][T24675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 730.284376][T24675] Call Trace: [ 730.287667][T24675] [ 730.290686][T24675] dump_stack_lvl+0xf2/0x150 [ 730.295320][T24675] dump_stack+0x15/0x1a [ 730.299604][T24675] should_fail_ex+0x223/0x230 [ 730.304329][T24675] should_fail+0xb/0x10 [ 730.308518][T24675] should_fail_usercopy+0x1a/0x20 [ 730.313604][T24675] _copy_from_user+0x1e/0xb0 [ 730.318265][T24675] copy_msghdr_from_user+0x54/0x2a0 [ 730.323631][T24675] ? __fget_files+0x17c/0x1c0 [ 730.328361][T24675] do_recvmmsg+0x256/0x6d0 [ 730.332828][T24675] __x64_sys_recvmmsg+0xf9/0x170 [ 730.337899][T24675] x64_sys_call+0x2a9a/0x2dc0 [ 730.342593][T24675] do_syscall_64+0xc9/0x1c0 [ 730.347130][T24675] ? clear_bhb_loop+0x55/0xb0 [ 730.351819][T24675] ? clear_bhb_loop+0x55/0xb0 [ 730.356512][T24675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.362481][T24675] RIP: 0033:0x7f3a557c5d29 [ 730.367026][T24675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.386647][T24675] RSP: 002b:00007f3a53e16038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 730.395158][T24675] RAX: ffffffffffffffda RBX: 00007f3a559b6080 RCX: 00007f3a557c5d29 [ 730.403141][T24675] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 730.411161][T24675] RBP: 00007f3a53e16090 R08: 0000000020003700 R09: 0000000000000000 [ 730.419139][T24675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.427161][T24675] R13: 0000000000000001 R14: 00007f3a559b6080 R15: 00007ffdf22c9768 [ 730.435292][T24675] [ 730.442381][T24421] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.452583][T18848] bond0 (unregistering): Released all slaves [ 730.463478][T18848] bond1 (unregistering): Released all slaves [ 730.483479][T18848] bond2 (unregistering): Released all slaves [ 730.501379][T18848] bond3 (unregistering): Released all slaves [ 730.519370][T18848] bond4 (unregistering): Released all slaves [ 730.529346][T18848] bond5 (unregistering): Released all slaves [ 730.541691][T24679] loop3: detected capacity change from 0 to 512 [ 730.548857][T18848] bond6 (unregistering): left promiscuous mode [ 730.552258][T24679] EXT4-fs: Ignoring removed nobh option [ 730.560704][T24679] EXT4-fs: Ignoring removed nobh option [ 730.566596][T24679] journal_path: Non-blockdev passed as './file0' [ 730.569644][T18848] bond6 (unregistering): Released all slaves [ 730.573014][T24679] EXT4-fs: error: could not find journal device path [ 730.599658][T18848] bond7 (unregistering): Released all slaves [ 730.609726][T18848] bond8 (unregistering): Released all slaves [ 730.618972][T18848] bond9 (unregistering): Released all slaves [ 730.628456][T18848] bond10 (unregistering): Released all slaves [ 730.689958][T18848] tipc: Disabling bearer [ 730.695218][T18848] tipc: Left network mode [ 730.727392][T24690] loop2: detected capacity change from 0 to 512 [ 730.744763][T24690] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 730.775539][T24690] EXT4-fs (loop2): orphan cleanup on readonly fs [ 730.791171][T24690] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.6120: Failed to acquire dquot type 1 [ 730.804779][T24690] EXT4-fs (loop2): 1 truncate cleaned up [ 730.810341][T24697] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6122'. [ 730.829241][T24690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 730.849353][T18848] batadv0: left promiscuous mode [ 730.857744][T24694] loop3: detected capacity change from 0 to 512 [ 730.881009][T18848] hsr_slave_0: left promiscuous mode [ 730.888445][T24697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6122'. [ 730.898811][T18848] hsr_slave_1: left promiscuous mode [ 730.899131][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.915226][T18848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.923200][T18848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.931253][T18848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.938735][T18848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.950571][T24694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.973997][T18848] veth1_vlan: left promiscuous mode [ 730.979432][T18848] veth0_vlan: left promiscuous mode [ 731.042520][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 731.042538][ T29] audit: type=1326 audit(731.086:56140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24707 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 731.072040][ T29] audit: type=1326 audit(731.086:56141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24707 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 731.104803][ T29] audit: type=1326 audit(731.086:56142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24707 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 731.128014][ T29] audit: type=1326 audit(731.086:56143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24707 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 731.151225][ T29] audit: type=1326 audit(731.086:56144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24707 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 731.174573][ T29] audit: type=1326 audit(731.106:56145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24707 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 731.197645][ T29] audit: type=1326 audit(731.106:56146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24707 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 731.220740][ T29] audit: type=1326 audit(731.106:56147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24707 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 731.243703][ T29] audit: type=1326 audit(731.106:56148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24707 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 731.266834][ T29] audit: type=1326 audit(731.106:56149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24707 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad9b05d29 code=0x7ffc0000 [ 731.294700][T24710] loop2: detected capacity change from 0 to 512 [ 731.320240][T24710] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 731.380670][T24710] EXT4-fs (loop2): orphan cleanup on readonly fs [ 731.388633][T24710] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6125: bg 0: block 248: padding at end of block bitmap is not set [ 731.444318][T24710] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.6125: Failed to acquire dquot type 1 [ 731.531275][T24715] loop3: detected capacity change from 0 to 1024 [ 731.537983][T24715] EXT4-fs: Ignoring removed oldalloc option [ 731.793537][T24715] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 731.923405][T24641] chnl_net:caif_netlink_parms(): no params data found [ 731.934365][T24710] EXT4-fs (loop2): 1 truncate cleaned up [ 732.530498][T24723] lo speed is unknown, defaulting to 1000 [ 732.536662][T24723] vcan0 speed is unknown, defaulting to 1000 [ 732.689067][T24641] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.696178][T24641] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.704995][T24641] bridge_slave_0: entered allmulticast mode [ 732.712179][T24641] bridge_slave_0: entered promiscuous mode [ 732.719628][T24641] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.726799][T24641] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.743734][T24641] bridge_slave_1: entered allmulticast mode [ 732.812823][T24641] bridge_slave_1: entered promiscuous mode [ 732.840146][T24641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.883349][T24736] loop5: detected capacity change from 0 to 512 [ 732.891193][T24641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.932593][T24736] EXT4-fs: Ignoring removed i_version option [ 732.951676][T24738] Invalid ELF header type: 3 != 1 [ 732.964023][T24736] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 732.976354][T24641] team0: Port device team_slave_0 added [ 732.985858][T24738] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 732.996283][T24736] EXT4-fs (loop5): 1 truncate cleaned up [ 733.005385][T24641] team0: Port device team_slave_1 added [ 733.115161][T24641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.122214][T24641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.148304][T24641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.208446][T24641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.215447][T24641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.241452][T24641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.374147][T24641] hsr_slave_0: entered promiscuous mode [ 733.486069][T24641] hsr_slave_1: entered promiscuous mode [ 733.586131][T24641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 733.596006][T24641] Cannot create hsr debugfs directory [ 733.952132][T24779] loop2: detected capacity change from 0 to 512 [ 733.978944][T24779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 734.040762][T24779] EXT4-fs (loop2): orphan cleanup on readonly fs [ 734.048837][T24779] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6143: bg 0: block 248: padding at end of block bitmap is not set [ 734.066856][T24779] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.6143: Failed to acquire dquot type 1 [ 734.079141][T24779] EXT4-fs (loop2): 1 truncate cleaned up [ 734.522864][T24787] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 734.601601][T24796] loop5: detected capacity change from 0 to 512 [ 734.608665][T24796] EXT4-fs: Ignoring removed i_version option [ 734.768148][T24796] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 734.789381][T24796] EXT4-fs (loop5): 1 truncate cleaned up [ 734.855426][T24801] loop3: detected capacity change from 0 to 512 [ 735.209322][T24796] EXT4-fs mount: 8 callbacks suppressed [ 735.209344][T24796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.229612][T24801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.289470][T24797] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 735.317472][T24805] Invalid ELF header type: 3 != 1 [ 735.346851][T24801] lo speed is unknown, defaulting to 1000 [ 735.352989][T24801] vcan0 speed is unknown, defaulting to 1000 [ 735.445606][T24641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 735.454182][T24805] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 735.479928][T24641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 735.584640][T24421] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.594273][T24641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 735.616262][T24641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 735.656547][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.706019][T24641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.719860][T24811] loop2: detected capacity change from 0 to 512 [ 735.741746][T24641] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.813485][T24641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 735.823988][T24641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 735.843840][T24811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 735.858200][T24811] EXT4-fs (loop2): orphan cleanup on readonly fs [ 735.869878][T24811] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.6154: Failed to acquire dquot type 1 [ 735.950208][T24818] loop3: detected capacity change from 0 to 512 [ 735.984176][ T7220] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.991361][ T7220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.056270][ T7220] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.063595][ T7220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.114153][T20745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.141552][T24811] EXT4-fs (loop2): 1 truncate cleaned up [ 736.151228][T24818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.169132][T24818] Process accounting resumed [ 736.175904][T24818] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 736.236946][T24811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 736.313648][T24822] lo speed is unknown, defaulting to 1000 [ 736.320083][T24822] vcan0 speed is unknown, defaulting to 1000 [ 736.361746][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.458902][T24641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.656962][T24421] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.784596][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 736.784613][ T29] audit: type=1326 audit(736.828:56388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.2.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 736.814224][ T29] audit: type=1326 audit(736.828:56389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.2.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 736.843314][T24641] veth0_vlan: entered promiscuous mode [ 736.852000][ T29] audit: type=1326 audit(736.828:56390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.2.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3a557c47df code=0x7ffc0000 [ 736.871689][T24641] veth1_vlan: entered promiscuous mode [ 736.875006][ T29] audit: type=1326 audit(736.828:56391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.2.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 736.889952][T24641] veth0_macvtap: entered promiscuous mode [ 736.903646][ T29] audit: type=1326 audit(736.828:56392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.2.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 736.911583][T24641] veth1_macvtap: entered promiscuous mode [ 736.932170][ T29] audit: type=1326 audit(736.828:56393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.2.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 736.960868][ T29] audit: type=1326 audit(736.828:56394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.2.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 736.984062][ T29] audit: type=1326 audit(736.828:56395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.2.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 737.007194][ T29] audit: type=1326 audit(736.828:56396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.2.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 737.030355][ T29] audit: type=1326 audit(736.828:56397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24846 comm="syz.2.6161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 737.050013][T24641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.063775][T24641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.073795][T24641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.084268][T24641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.094183][T24641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.104706][T24641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.110776][T24858] loop3: detected capacity change from 0 to 512 [ 737.114587][T24641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.131332][T24641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.141314][T24641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.151825][T24641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.161771][T24641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.172322][T24641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.274521][T24641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.277698][T24858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.316081][T24856] lo speed is unknown, defaulting to 1000 [ 737.322403][T24856] vcan0 speed is unknown, defaulting to 1000 [ 737.340105][T24862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6163'. [ 737.362797][T24866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6166'. [ 737.400769][T24641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.411477][T24641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.413495][T24870] loop5: detected capacity change from 0 to 164 [ 737.421384][T24641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.438159][T24641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.448026][T24641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.448047][T24641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.448061][T24641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.448074][T24641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.448090][T24641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.448103][T24641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.448117][T24641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.499256][T24641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.512289][T24641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.519677][T24870] ÿÿ [ 737.533942][T24641] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.536745][T24870] ÿP_1991ATHE R [ 737.539303][T24641] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.547987][T24870] [ 737.551486][T24641] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.571274][T24641] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.603948][T24870] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 737.619192][T24421] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.693352][T24879] Invalid ELF header type: 3 != 1 [ 737.719187][T24879] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 737.798703][T24889] loop5: detected capacity change from 0 to 512 [ 737.807965][T24889] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 737.853682][T24879] loop3: detected capacity change from 0 to 256 [ 737.924238][T24879] FAT-fs (loop3): Directory bread(block 64) failed [ 737.995966][T24879] FAT-fs (loop3): Directory bread(block 65) failed [ 738.010110][T24889] EXT4-fs (loop5): orphan cleanup on readonly fs [ 738.018228][T24889] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6172: bg 0: block 248: padding at end of block bitmap is not set [ 738.035722][T24889] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.6172: Failed to acquire dquot type 1 [ 738.050037][T24889] EXT4-fs (loop5): 1 truncate cleaned up [ 738.057770][T24889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 738.123146][T24879] FAT-fs (loop3): Directory bread(block 66) failed [ 738.142321][T24892] 9pnet: Could not find request transport: fdäÞ‘Qno=0xffffffffffffffff [ 738.177125][T24879] FAT-fs (loop3): Directory bread(block 67) failed [ 738.199044][T24879] FAT-fs (loop3): Directory bread(block 68) failed [ 738.211481][T24879] FAT-fs (loop3): Directory bread(block 69) failed [ 738.264193][T24879] FAT-fs (loop3): Directory bread(block 70) failed [ 738.271676][T24879] FAT-fs (loop3): Directory bread(block 71) failed [ 738.286413][T24879] FAT-fs (loop3): Directory bread(block 72) failed [ 738.296441][T24879] FAT-fs (loop3): Directory bread(block 73) failed [ 738.423472][T24879] syz.3.6170: attempt to access beyond end of device [ 738.423472][T24879] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 738.442174][T24879] syz.3.6170: attempt to access beyond end of device [ 738.442174][T24879] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 738.464587][T24900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6177'. [ 738.615008][ T7220] kworker/u8:9: attempt to access beyond end of device [ 738.615008][ T7220] loop3: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 738.948175][T24911] loop3: detected capacity change from 0 to 512 [ 739.347358][T24911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.367476][T24910] Process accounting resumed [ 739.374090][T24910] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 739.428253][T24910] lo speed is unknown, defaulting to 1000 [ 739.434308][T24910] vcan0 speed is unknown, defaulting to 1000 [ 739.512653][T20745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.630172][T24929] loop5: detected capacity change from 0 to 164 [ 739.675440][T24934] loop1: detected capacity change from 0 to 512 [ 739.691630][T24421] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.719719][T24929] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 739.734524][T24934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.751913][T24934] Process accounting resumed [ 739.820401][T24940] lo speed is unknown, defaulting to 1000 [ 739.826802][T24940] vcan0 speed is unknown, defaulting to 1000 [ 740.190854][T24934] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 740.286115][T24951] loop3: detected capacity change from 0 to 512 [ 740.384898][T24641] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.499190][T24951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.529804][T24951] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 740.552510][T24956] loop5: detected capacity change from 0 to 512 [ 740.594875][T24957] lo speed is unknown, defaulting to 1000 [ 740.601368][T24957] vcan0 speed is unknown, defaulting to 1000 [ 740.758031][T24956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 740.832497][T24956] EXT4-fs (loop5): orphan cleanup on readonly fs [ 740.840154][T24956] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6195: bg 0: block 248: padding at end of block bitmap is not set [ 740.941234][T24956] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.6195: Failed to acquire dquot type 1 [ 740.953832][T24956] EXT4-fs (loop5): 1 truncate cleaned up [ 740.961223][T24956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 740.979632][T24421] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.032277][T24960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6196'. [ 741.220290][T24962] 9pnet: Could not find request transport: fdäÞ‘Qno=0xffffffffffffffff [ 741.539621][T24972] 9pnet: Could not find request transport: fdäÞ‘Qno=0xffffffffffffffff [ 741.992101][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 741.992120][ T29] audit: type=1326 audit(742.038:56668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24987 comm="syz.0.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0442285d29 code=0x7ffc0000 [ 742.060135][ T29] audit: type=1326 audit(742.068:56669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24987 comm="syz.0.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0442285d29 code=0x7ffc0000 [ 742.083247][ T29] audit: type=1326 audit(742.068:56670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24987 comm="syz.0.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04422847df code=0x7ffc0000 [ 742.106173][ T29] audit: type=1326 audit(742.068:56671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24987 comm="syz.0.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0442285d29 code=0x7ffc0000 [ 742.129354][ T29] audit: type=1326 audit(742.068:56672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24987 comm="syz.0.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0442285d29 code=0x7ffc0000 [ 742.152474][ T29] audit: type=1326 audit(742.068:56673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24987 comm="syz.0.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0442285d29 code=0x7ffc0000 [ 742.175615][ T29] audit: type=1326 audit(742.068:56674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24987 comm="syz.0.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0442285d29 code=0x7ffc0000 [ 742.198588][ T29] audit: type=1326 audit(742.068:56675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24987 comm="syz.0.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0442285d29 code=0x7ffc0000 [ 742.221676][ T29] audit: type=1326 audit(742.068:56676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24987 comm="syz.0.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0442285d29 code=0x7ffc0000 [ 742.244781][ T29] audit: type=1326 audit(742.078:56677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24987 comm="syz.0.6206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0442285d29 code=0x7ffc0000 [ 742.357800][T20745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.394145][T24993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.450492][T24993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.533298][T25000] loop3: detected capacity change from 0 to 512 [ 742.543956][T25000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 742.564462][T25000] EXT4-fs (loop3): orphan cleanup on readonly fs [ 742.572054][T25000] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6209: bg 0: block 248: padding at end of block bitmap is not set [ 742.609532][T25000] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.6209: Failed to acquire dquot type 1 [ 742.622388][T25000] EXT4-fs (loop3): 1 truncate cleaned up [ 742.745001][T25000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 742.875027][T25003] lo speed is unknown, defaulting to 1000 [ 742.881208][T25003] vcan0 speed is unknown, defaulting to 1000 [ 743.029173][T24993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.135345][T24993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.350744][T24993] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.399869][T25014] loop2: detected capacity change from 0 to 256 [ 743.518485][T24993] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.518931][T25014] FAT-fs (loop2): Directory bread(block 64) failed [ 743.533716][T25014] FAT-fs (loop2): Directory bread(block 65) failed [ 743.543648][T24993] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.546560][T25014] FAT-fs (loop2): Directory bread(block 66) failed [ 743.556323][T24993] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.560469][T25014] FAT-fs (loop2): Directory bread(block 67) failed [ 743.633745][T25018] loop1: detected capacity change from 0 to 512 [ 743.962906][T25014] FAT-fs (loop2): Directory bread(block 68) failed [ 744.020129][T25018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.041591][T25017] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 744.067040][T25021] Invalid ELF header type: 3 != 1 [ 744.081420][T25014] FAT-fs (loop2): Directory bread(block 69) failed [ 744.090997][T25014] FAT-fs (loop2): Directory bread(block 70) failed [ 744.097968][T25014] FAT-fs (loop2): Directory bread(block 71) failed [ 744.107931][T25017] lo speed is unknown, defaulting to 1000 [ 744.114215][T25017] vcan0 speed is unknown, defaulting to 1000 [ 744.172817][T25014] FAT-fs (loop2): Directory bread(block 72) failed [ 744.179445][T25014] FAT-fs (loop2): Directory bread(block 73) failed [ 744.204009][T25021] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 744.214758][T25025] loop5: detected capacity change from 0 to 512 [ 744.311240][T24641] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.368021][T25025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.559931][T20745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.609510][T24421] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.724502][T25040] loop5: detected capacity change from 0 to 128 [ 744.808687][T25047] loop1: detected capacity change from 0 to 512 [ 744.816877][T25047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 744.935207][T25047] EXT4-fs (loop1): orphan cleanup on readonly fs [ 744.943617][T25047] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6218: bg 0: block 248: padding at end of block bitmap is not set [ 744.983933][T25040] syz.5.6221: attempt to access beyond end of device [ 744.983933][T25040] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 745.000834][T25047] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6218: Failed to acquire dquot type 1 [ 745.015528][T25047] EXT4-fs (loop1): 1 truncate cleaned up [ 745.438761][T25047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 745.534945][T25066] loop5: detected capacity change from 0 to 512 [ 746.048350][T25074] loop2: detected capacity change from 0 to 512 [ 746.060963][T25060] 9pnet: Could not find request transport: fdäÞ‘Qno=0xffffffffffffffff [ 746.075326][T25066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.118567][T25074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.146833][T25064] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 746.158170][T25066] lo speed is unknown, defaulting to 1000 [ 746.164170][T25066] vcan0 speed is unknown, defaulting to 1000 [ 746.251974][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.361296][T20745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.678746][T24641] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.788560][T25087] loop3: detected capacity change from 0 to 512 [ 746.869084][T25087] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6238: bg 0: block 248: padding at end of block bitmap is not set [ 746.884433][T25087] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.6238: Failed to acquire dquot type 1 [ 746.899965][T25087] EXT4-fs (loop3): 1 truncate cleaned up [ 746.906228][T25087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.941855][T25087] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 746.948505][T25087] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 746.956261][T25087] vhci_hcd vhci_hcd.0: Device attached [ 746.967980][T25090] vhci_hcd: connection closed [ 746.968216][T18851] vhci_hcd: stop threads [ 746.977256][T18851] vhci_hcd: release socket [ 746.981686][T18851] vhci_hcd: disconnect device [ 747.162011][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 747.162026][ T29] audit: type=1326 audit(747.208:56925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25093 comm="syz.2.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 747.391715][ T29] audit: type=1326 audit(747.248:56926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25093 comm="syz.2.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3a557c47df code=0x7ffc0000 [ 747.414721][ T29] audit: type=1326 audit(747.248:56927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25093 comm="syz.2.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 747.437761][ T29] audit: type=1326 audit(747.248:56928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25093 comm="syz.2.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 747.460740][ T29] audit: type=1326 audit(747.248:56929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25093 comm="syz.2.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 747.483803][ T29] audit: type=1326 audit(747.248:56930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25093 comm="syz.2.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 747.506809][ T29] audit: type=1326 audit(747.248:56931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25093 comm="syz.2.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 747.529841][ T29] audit: type=1326 audit(747.258:56932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25093 comm="syz.2.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 747.552877][ T29] audit: type=1326 audit(747.258:56933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25093 comm="syz.2.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 747.577661][ T29] audit: type=1326 audit(747.598:56934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25093 comm="syz.2.6233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 747.693034][T25101] lo speed is unknown, defaulting to 1000 [ 747.699803][T25101] vcan0 speed is unknown, defaulting to 1000 [ 748.145402][T24421] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.629871][T25115] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6242'. [ 748.688693][T25121] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 748.764966][T25128] loop2: detected capacity change from 0 to 512 [ 748.775464][T25128] EXT4-fs: Ignoring removed i_version option [ 748.785162][T25128] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 748.803284][T25128] EXT4-fs (loop2): 1 truncate cleaned up [ 748.813980][T25128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.250920][T25147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6254'. [ 749.263780][T25149] loop1: detected capacity change from 0 to 512 [ 749.378926][T25149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.413173][T25149] FAULT_INJECTION: forcing a failure. [ 749.413173][T25149] name failslab, interval 1, probability 0, space 0, times 0 [ 749.425877][T25149] CPU: 0 UID: 0 PID: 25149 Comm: syz.1.6253 Not tainted 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0 [ 749.436739][T25149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 749.446830][T25149] Call Trace: [ 749.450124][T25149] [ 749.453084][T25149] dump_stack_lvl+0xf2/0x150 [ 749.457719][T25149] dump_stack+0x15/0x1a [ 749.461905][T25149] should_fail_ex+0x223/0x230 [ 749.466634][T25149] should_failslab+0x8f/0xb0 [ 749.471272][T25149] kmem_cache_alloc_noprof+0x52/0x320 [ 749.476670][T25149] ? getname_flags+0x81/0x3b0 [ 749.481371][T25149] getname_flags+0x81/0x3b0 [ 749.485895][T25149] getname+0x17/0x20 [ 749.489829][T25149] do_sys_openat2+0x67/0x120 [ 749.494504][T25149] __x64_sys_openat+0xf3/0x120 [ 749.499325][T25149] x64_sys_call+0x2b30/0x2dc0 [ 749.504055][T25149] do_syscall_64+0xc9/0x1c0 [ 749.508631][T25149] ? clear_bhb_loop+0x55/0xb0 [ 749.513331][T25149] ? clear_bhb_loop+0x55/0xb0 [ 749.518085][T25149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.524040][T25149] RIP: 0033:0x7f7c12775d29 [ 749.528515][T25149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.548157][T25149] RSP: 002b:00007f7c10de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 749.557069][T25149] RAX: ffffffffffffffda RBX: 00007f7c12965fa0 RCX: 00007f7c12775d29 [ 749.565117][T25149] RDX: 0000000000000042 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 749.573193][T25149] RBP: 00007f7c10de7090 R08: 0000000000000000 R09: 0000000000000000 [ 749.581225][T25149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.589248][T25149] R13: 0000000000000000 R14: 00007f7c12965fa0 R15: 00007ffdcd19b178 [ 749.597311][T25149] [ 749.864567][T25157] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6256'. [ 749.900012][T25157] loop5: detected capacity change from 0 to 512 [ 749.928903][T24641] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.949310][T25157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.968487][T25160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6257'. [ 749.999390][T25157] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.079347][T25164] 9pnet: Could not find request transport: fdäÞ‘Qno=0xffffffffffffffff [ 750.125586][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.145910][T20745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.292924][T25176] Invalid ELF header type: 3 != 1 [ 750.302181][T25176] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 750.336182][T25176] loop5: detected capacity change from 0 to 256 [ 750.366030][T25176] FAT-fs (loop5): Directory bread(block 64) failed [ 750.392180][T25176] FAT-fs (loop5): Directory bread(block 65) failed [ 750.400809][T25176] FAT-fs (loop5): Directory bread(block 66) failed [ 750.408788][T25176] FAT-fs (loop5): Directory bread(block 67) failed [ 750.415480][T25176] FAT-fs (loop5): Directory bread(block 68) failed [ 750.423773][T25176] FAT-fs (loop5): Directory bread(block 69) failed [ 750.430716][T25176] FAT-fs (loop5): Directory bread(block 70) failed [ 750.438960][T25176] FAT-fs (loop5): Directory bread(block 71) failed [ 750.445620][T25176] FAT-fs (loop5): Directory bread(block 72) failed [ 750.452449][T25176] FAT-fs (loop5): Directory bread(block 73) failed [ 750.472041][T25176] syz.5.6263: attempt to access beyond end of device [ 750.472041][T25176] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 750.509767][T25176] syz.5.6263: attempt to access beyond end of device [ 750.509767][T25176] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 750.570111][T18854] kworker/u8:31: attempt to access beyond end of device [ 750.570111][T18854] loop5: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 750.608801][T25191] loop5: detected capacity change from 0 to 128 [ 750.650457][T25191] syz.5.6269: attempt to access beyond end of device [ 750.650457][T25191] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 750.709622][T25199] 9pnet: Could not find request transport: fdäÞ‘Qno=0xffffffffffffffff [ 750.839265][T25210] xt_hashlimit: max too large, truncated to 1048576 [ 750.855721][T25210] xt_limit: Overflow, try lower: 0/0 [ 750.937705][T25217] loop2: detected capacity change from 0 to 512 [ 750.946403][T25217] EXT4-fs: Invalid want_extra_isize 524392 [ 751.013412][T25219] loop3: detected capacity change from 0 to 512 [ 751.167152][T25219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.179768][T25219] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.196202][T25219] Process accounting resumed [ 751.244620][T25219] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 751.272952][T25224] lo speed is unknown, defaulting to 1000 [ 751.279492][T25224] vcan0 speed is unknown, defaulting to 1000 [ 751.397581][T25217] loop2: detected capacity change from 0 to 8192 [ 751.433521][T25226] Invalid ELF header type: 3 != 1 [ 751.441001][T25226] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 751.451784][T25226] loop1: detected capacity change from 0 to 256 [ 751.483404][T25226] FAT-fs (loop1): Directory bread(block 64) failed [ 751.494096][T25226] FAT-fs (loop1): Directory bread(block 65) failed [ 751.510979][T25226] FAT-fs (loop1): Directory bread(block 66) failed [ 751.525476][T25226] FAT-fs (loop1): Directory bread(block 67) failed [ 751.552065][T25226] FAT-fs (loop1): Directory bread(block 68) failed [ 751.574972][T25226] FAT-fs (loop1): Directory bread(block 69) failed [ 751.600735][T25226] FAT-fs (loop1): Directory bread(block 70) failed [ 751.628387][T25226] FAT-fs (loop1): Directory bread(block 71) failed [ 751.640875][T25226] FAT-fs (loop1): Directory bread(block 72) failed [ 751.666938][T24421] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.679059][T25226] FAT-fs (loop1): Directory bread(block 73) failed [ 751.719219][T25226] syz.1.6280: attempt to access beyond end of device [ 751.719219][T25226] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 751.749386][T25226] syz.1.6280: attempt to access beyond end of device [ 751.749386][T25226] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 751.799169][T25240] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 751.878133][T25253] loop2: detected capacity change from 0 to 128 [ 751.889497][T18851] kworker/u8:28: attempt to access beyond end of device [ 751.889497][T18851] loop1: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 751.948760][T25250] 9pnet: Could not find request transport: fdäÞ‘Qno=0xffffffffffffffff [ 751.973128][T25253] syz.2.6291: attempt to access beyond end of device [ 751.973128][T25253] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 752.861876][T25270] loop1: detected capacity change from 0 to 512 [ 752.874278][T25271] loop2: detected capacity change from 0 to 512 [ 752.947892][T25270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.960494][T25270] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.974062][T25271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.986687][T25271] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.000016][T25268] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 753.011423][T25269] Process accounting resumed [ 753.023880][T25268] lo speed is unknown, defaulting to 1000 [ 753.030166][T25268] vcan0 speed is unknown, defaulting to 1000 [ 753.063557][T25269] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 753.082526][T25271] lo speed is unknown, defaulting to 1000 [ 753.089509][T25271] vcan0 speed is unknown, defaulting to 1000 [ 753.153181][T25278] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.268055][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.277812][T24641] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.291331][T25278] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.353855][T25284] loop5: detected capacity change from 0 to 512 [ 753.377011][T25284] EXT4-fs: Invalid want_extra_isize 524392 [ 753.387101][T25278] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.400110][T25284] FAULT_INJECTION: forcing a failure. [ 753.400110][T25284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.413275][T25284] CPU: 0 UID: 0 PID: 25284 Comm: syz.5.6302 Not tainted 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0 [ 753.424161][T25284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 753.434242][T25284] Call Trace: [ 753.437543][T25284] [ 753.440479][T25284] dump_stack_lvl+0xf2/0x150 [ 753.445116][T25284] dump_stack+0x15/0x1a [ 753.449298][T25284] should_fail_ex+0x223/0x230 [ 753.453991][T25284] should_fail+0xb/0x10 [ 753.458200][T25284] should_fail_usercopy+0x1a/0x20 [ 753.463321][T25284] _copy_from_user+0x1e/0xb0 [ 753.467975][T25284] do_ip6t_set_ctl+0x42c/0x8c0 [ 753.472898][T25284] ? kstrtouint+0x77/0xc0 [ 753.477336][T25284] ? __rcu_read_unlock+0x4e/0x70 [ 753.482340][T25284] nf_setsockopt+0x195/0x1b0 [ 753.486948][T25284] ipv6_setsockopt+0x10f/0x130 [ 753.491751][T25284] udpv6_setsockopt+0x95/0xb0 [ 753.496537][T25284] sock_common_setsockopt+0x64/0x80 [ 753.501876][T25284] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 753.508007][T25284] __sys_setsockopt+0x187/0x200 [ 753.512912][T25284] __x64_sys_setsockopt+0x66/0x80 [ 753.517962][T25284] x64_sys_call+0x282e/0x2dc0 [ 753.522650][T25284] do_syscall_64+0xc9/0x1c0 [ 753.527254][T25284] ? clear_bhb_loop+0x55/0xb0 [ 753.531984][T25284] ? clear_bhb_loop+0x55/0xb0 [ 753.536762][T25284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.542815][T25284] RIP: 0033:0x7fdcca415d29 [ 753.547326][T25284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.566989][T25284] RSP: 002b:00007fdcc8a81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 753.575498][T25284] RAX: ffffffffffffffda RBX: 00007fdcca605fa0 RCX: 00007fdcca415d29 [ 753.583539][T25284] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 753.591588][T25284] RBP: 00007fdcc8a81090 R08: 0000000000000590 R09: 0000000000000000 [ 753.599683][T25284] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.607670][T25284] R13: 0000000000000000 R14: 00007fdcca605fa0 R15: 00007ffc11ce8658 [ 753.615654][T25284] [ 753.618751][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 753.618767][ T29] audit: type=1326 audit(2000000001.690:57488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25291 comm="syz.2.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 753.648965][ T29] audit: type=1326 audit(2000000001.690:57489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25291 comm="syz.2.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 753.672654][ T29] audit: type=1326 audit(2000000001.690:57490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25291 comm="syz.2.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 753.696345][ T29] audit: type=1326 audit(2000000000.000:57491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25291 comm="syz.2.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 753.719927][ T29] audit: type=1326 audit(2000000000.000:57492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25291 comm="syz.2.6303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 753.743651][ T29] audit: type=1326 audit(2000000000.000:57493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25291 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 753.743657][T25293] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 753.752640][T25293] netlink: 'syz.1.6301': attribute type 10 has an invalid length. [ 753.766719][ T29] audit: type=1326 audit(2000000000.000:57494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25291 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 753.804855][ T29] audit: type=1326 audit(2000000000.000:57495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25291 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 753.828038][ T29] audit: type=1326 audit(2000000000.000:57496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25291 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 753.834001][T25298] Invalid ELF header type: 3 != 1 [ 753.876523][T25293] geneve1: entered promiscuous mode [ 753.883698][T25300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6303'. [ 753.901549][T25293] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 753.920595][T25301] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 753.934501][T25298] loop5: detected capacity change from 0 to 256 [ 753.941035][T25296] capability: warning: `syz.1.6301' uses 32-bit capabilities (legacy support in use) [ 753.942143][ T29] audit: type=1326 audit(2000000000.240:57497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25291 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 753.987615][T25278] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.989477][T25298] FAT-fs (loop5): Directory bread(block 64) failed [ 754.006123][T25298] FAT-fs (loop5): Directory bread(block 65) failed [ 754.013032][T25298] FAT-fs (loop5): Directory bread(block 66) failed [ 754.029769][T25298] FAT-fs (loop5): Directory bread(block 67) failed [ 754.052914][T25298] FAT-fs (loop5): Directory bread(block 68) failed [ 754.059690][T25305] Invalid ELF header type: 3 != 1 [ 754.068246][T25278] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.088691][T25305] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 754.107825][T25298] FAT-fs (loop5): Directory bread(block 69) failed [ 754.109397][T25278] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.114427][T25298] FAT-fs (loop5): Directory bread(block 70) failed [ 754.114450][T25298] FAT-fs (loop5): Directory bread(block 71) failed [ 754.125039][T25305] loop2: detected capacity change from 0 to 256 [ 754.156039][T25278] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.173800][T25298] FAT-fs (loop5): Directory bread(block 72) failed [ 754.186063][T25298] FAT-fs (loop5): Directory bread(block 73) failed [ 754.217338][T25305] FAT-fs (loop2): Directory bread(block 64) failed [ 754.230841][T25305] FAT-fs (loop2): Directory bread(block 65) failed [ 754.240287][T25298] syz.5.6304: attempt to access beyond end of device [ 754.240287][T25298] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 754.255907][T25305] FAT-fs (loop2): Directory bread(block 66) failed [ 754.275719][T25278] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.284012][T25305] FAT-fs (loop2): Directory bread(block 67) failed [ 754.294117][T25298] syz.5.6304: attempt to access beyond end of device [ 754.294117][T25298] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 754.309197][T25305] FAT-fs (loop2): Directory bread(block 68) failed [ 754.315790][T25305] FAT-fs (loop2): Directory bread(block 69) failed [ 754.356731][T25305] FAT-fs (loop2): Directory bread(block 70) failed [ 754.375630][T25305] FAT-fs (loop2): Directory bread(block 71) failed [ 754.390869][T25305] FAT-fs (loop2): Directory bread(block 72) failed [ 754.538778][T25305] FAT-fs (loop2): Directory bread(block 73) failed [ 754.646776][T25318] lo speed is unknown, defaulting to 1000 [ 754.653126][T25318] vcan0 speed is unknown, defaulting to 1000 [ 754.916665][T25305] Buffer I/O error on dev loop2, logical block 442, async page read [ 755.752111][T25337] lo speed is unknown, defaulting to 1000 [ 755.758222][T25337] vcan0 speed is unknown, defaulting to 1000 [ 756.118686][T25334] loop2: detected capacity change from 0 to 512 [ 756.207635][T25334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.220291][T25334] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.273376][T25334] Process accounting resumed [ 756.334034][T25336] lo speed is unknown, defaulting to 1000 [ 756.340260][T25336] vcan0 speed is unknown, defaulting to 1000 [ 756.368340][T25334] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 756.465295][T25348] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 756.527156][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.578185][T25355] FAULT_INJECTION: forcing a failure. [ 756.578185][T25355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.584291][T25354] Invalid ELF header type: 3 != 1 [ 756.591399][T25355] CPU: 0 UID: 0 PID: 25355 Comm: syz.5.6320 Not tainted 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0 [ 756.607267][T25355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 756.617352][T25355] Call Trace: [ 756.620648][T25355] [ 756.623589][T25355] dump_stack_lvl+0xf2/0x150 [ 756.628211][T25355] dump_stack+0x15/0x1a [ 756.632413][T25355] should_fail_ex+0x223/0x230 [ 756.637183][T25355] should_fail+0xb/0x10 [ 756.641352][T25355] should_fail_usercopy+0x1a/0x20 [ 756.646476][T25355] _copy_from_user+0x1e/0xb0 [ 756.651099][T25355] __se_sys_memfd_create+0x26b/0x5c0 [ 756.656427][T25355] __x64_sys_memfd_create+0x31/0x40 [ 756.661674][T25355] x64_sys_call+0x2d4c/0x2dc0 [ 756.666363][T25355] do_syscall_64+0xc9/0x1c0 [ 756.670935][T25355] ? clear_bhb_loop+0x55/0xb0 [ 756.675657][T25355] ? clear_bhb_loop+0x55/0xb0 [ 756.680475][T25355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.686441][T25355] RIP: 0033:0x7fdcca415d29 [ 756.690899][T25355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.710523][T25355] RSP: 002b:00007fdcc8a80e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 756.719036][T25355] RAX: ffffffffffffffda RBX: 0000000000000525 RCX: 00007fdcca415d29 [ 756.727043][T25355] RDX: 00007fdcc8a80ef0 RSI: 0000000000000000 RDI: 00007fdcca492469 [ 756.735025][T25355] RBP: 00000000200007c0 R08: 00007fdcc8a80bb7 R09: 00007fdcc8a80e40 [ 756.743002][T25355] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200001c0 [ 756.750981][T25355] R13: 00007fdcc8a80ef0 R14: 00007fdcc8a80eb0 R15: 0000000020000080 [ 756.759023][T25355] [ 756.772249][T25358] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 756.797647][T25357] loop2: detected capacity change from 0 to 128 [ 756.902958][T25365] bio_check_eod: 3 callbacks suppressed [ 756.902980][T25365] syz.2.6319: attempt to access beyond end of device [ 756.902980][T25365] loop2: rw=2049, sector=145, nr_sectors = 456 limit=128 [ 757.008546][T25369] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 757.015204][T25369] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 757.023026][T25369] vhci_hcd vhci_hcd.0: Device attached [ 757.042661][T25373] vhci_hcd: connection closed [ 757.043405][T18854] vhci_hcd: stop threads [ 757.052426][T18854] vhci_hcd: release socket [ 757.056883][T18854] vhci_hcd: disconnect device [ 757.758931][T25395] loop1: detected capacity change from 0 to 512 [ 758.452854][T25396] lo speed is unknown, defaulting to 1000 [ 758.459193][T25396] vcan0 speed is unknown, defaulting to 1000 [ 758.558386][T25395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.570926][T25395] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 758.590670][T25393] Process accounting resumed [ 758.651605][T25395] lo speed is unknown, defaulting to 1000 [ 758.657849][T25395] vcan0 speed is unknown, defaulting to 1000 [ 758.784963][T25406] loop3: detected capacity change from 0 to 512 [ 758.792124][T25406] /dev/loop3: Can't open blockdev [ 758.870823][T25409] Invalid ELF header type: 3 != 1 [ 758.915041][T25406] lo speed is unknown, defaulting to 1000 [ 758.921431][T25406] vcan0 speed is unknown, defaulting to 1000 [ 759.059779][T25409] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 759.104969][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 759.105057][ T29] audit: type=1400 audit(2000000002.670:57643): avc: denied { append } for pid=25410 comm="syz.2.6335" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 759.135386][T25409] loop5: detected capacity change from 0 to 256 [ 759.138960][T25393] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 759.168476][T25411] usb usb1: usbfs: process 25411 (syz.2.6335) did not claim interface 0 before use [ 759.206755][T25409] FAT-fs (loop5): Directory bread(block 64) failed [ 759.210450][T24641] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.214724][T25411] loop2: detected capacity change from 0 to 512 [ 759.230885][T25409] FAT-fs (loop5): Directory bread(block 65) failed [ 759.244075][T25411] EXT4-fs: Ignoring removed bh option [ 759.249809][T25411] EXT4-fs: Ignoring removed mblk_io_submit option [ 759.258008][T25409] FAT-fs (loop5): Directory bread(block 66) failed [ 759.268800][T25411] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 759.269491][T25409] FAT-fs (loop5): Directory bread(block 67) failed [ 759.291762][T25411] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 759.303525][T25409] FAT-fs (loop5): Directory bread(block 68) failed [ 759.310346][T25409] FAT-fs (loop5): Directory bread(block 69) failed [ 759.316931][T25409] FAT-fs (loop5): Directory bread(block 70) failed [ 759.323607][T25409] FAT-fs (loop5): Directory bread(block 71) failed [ 759.328357][T25411] EXT4-fs (loop2): orphan cleanup on readonly fs [ 759.330824][T25409] FAT-fs (loop5): Directory bread(block 72) failed [ 759.337263][T25411] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 759.354187][T25411] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 759.371543][T25411] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 759.378534][T25411] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.6335: Invalid block bitmap block 0 in block_group 0 [ 759.393529][T25411] EXT4-fs (loop2): Remounting filesystem read-only [ 759.395446][T25409] FAT-fs (loop5): Directory bread(block 73) failed [ 759.400187][T25411] EXT4-fs (loop2): 1 orphan inode deleted [ 759.419713][T25411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 759.432331][T25411] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 759.440760][T25411] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.544907][T25409] syz.5.6334: attempt to access beyond end of device [ 759.544907][T25409] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 759.616928][T25409] syz.5.6334: attempt to access beyond end of device [ 759.616928][T25409] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 759.630314][T25409] Buffer I/O error on dev loop5, logical block 442, async page read [ 760.025558][T25445] lo speed is unknown, defaulting to 1000 [ 760.031769][T25445] vcan0 speed is unknown, defaulting to 1000 [ 760.387088][ T29] audit: type=1400 audit(2000000003.960:57644): avc: denied { ioctl } for pid=25446 comm="syz.0.6350" path="socket:[77510]" dev="sockfs" ino=77510 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 760.388576][T25447] FAULT_INJECTION: forcing a failure. [ 760.388576][T25447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.425366][T25447] CPU: 1 UID: 0 PID: 25447 Comm: syz.0.6350 Not tainted 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0 [ 760.436210][T25447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 760.446380][T25447] Call Trace: [ 760.449847][T25447] [ 760.452779][T25447] dump_stack_lvl+0xf2/0x150 [ 760.457412][T25447] dump_stack+0x15/0x1a [ 760.461587][T25447] should_fail_ex+0x223/0x230 [ 760.466273][T25447] should_fail+0xb/0x10 [ 760.470448][T25447] should_fail_usercopy+0x1a/0x20 [ 760.475500][T25447] _copy_from_iter+0xd5/0xd00 [ 760.480199][T25447] ? mntput_no_expire+0x70/0x3c0 [ 760.485162][T25447] ? mntput+0x49/0x70 [ 760.489197][T25447] tun_get_user+0x2b3/0x25c0 [ 760.493882][T25447] ? path_openat+0x1a5a/0x1fa0 [ 760.498684][T25447] ? _parse_integer+0x27/0x30 [ 760.503367][T25447] ? ref_tracker_alloc+0x1f5/0x2f0 [ 760.508637][T25447] tun_chr_write_iter+0x188/0x240 [ 760.513767][T25447] vfs_write+0x77f/0x920 [ 760.518121][T25447] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 760.523800][T25447] ksys_write+0xe8/0x1b0 [ 760.528069][T25447] __x64_sys_write+0x42/0x50 [ 760.532700][T25447] x64_sys_call+0x287e/0x2dc0 [ 760.537498][T25447] do_syscall_64+0xc9/0x1c0 [ 760.542025][T25447] ? clear_bhb_loop+0x55/0xb0 [ 760.546717][T25447] ? clear_bhb_loop+0x55/0xb0 [ 760.551551][T25447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.557562][T25447] RIP: 0033:0x7f0442285d29 [ 760.562042][T25447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.581825][T25447] RSP: 002b:00007f04408f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 760.590363][T25447] RAX: ffffffffffffffda RBX: 00007f0442475fa0 RCX: 00007f0442285d29 [ 760.598341][T25447] RDX: 000000000000007a RSI: 0000000020000400 RDI: 0000000000000003 [ 760.606322][T25447] RBP: 00007f04408f7090 R08: 0000000000000000 R09: 0000000000000000 [ 760.614391][T25447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.622384][T25447] R13: 0000000000000000 R14: 00007f0442475fa0 R15: 00007ffc4dd59298 [ 760.630532][T25447] [ 760.655798][T25449] loop2: detected capacity change from 0 to 512 [ 760.722907][T25449] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6351: bg 0: block 248: padding at end of block bitmap is not set [ 760.744041][T25449] Quota error (device loop2): write_blk: dquota write failed [ 760.751664][T25449] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 760.761710][T25449] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.6351: Failed to acquire dquot type 1 [ 760.778445][T25449] EXT4-fs (loop2): 1 truncate cleaned up [ 760.784491][T25449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.797240][T25449] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 760.839338][ T29] audit: type=1326 audit(2000000004.380:57645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25448 comm="syz.2.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 760.863052][ T29] audit: type=1326 audit(2000000004.380:57646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25448 comm="syz.2.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 760.886792][ T29] audit: type=1326 audit(2000000004.380:57647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25448 comm="syz.2.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 760.899477][T25461] Invalid ELF header type: 3 != 1 [ 760.910697][ T29] audit: type=1326 audit(2000000004.380:57648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25448 comm="syz.2.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 760.939363][ T29] audit: type=1326 audit(2000000004.380:57649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25448 comm="syz.2.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a557c5d29 code=0x7ffc0000 [ 760.948499][T25461] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 760.988305][T25461] loop5: detected capacity change from 0 to 256 [ 761.004046][T25461] FAT-fs (loop5): Directory bread(block 64) failed [ 761.013325][T25449] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 761.019951][T25449] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 761.023347][T25461] FAT-fs (loop5): Directory bread(block 65) failed [ 761.027661][T25449] vhci_hcd vhci_hcd.0: Device attached [ 761.040018][T25461] FAT-fs (loop5): Directory bread(block 66) failed [ 761.044030][T25465] vhci_hcd: connection closed [ 761.048117][T25461] FAT-fs (loop5): Directory bread(block 67) failed [ 761.048689][T18854] vhci_hcd: stop threads [ 761.053732][T25461] FAT-fs (loop5): Directory bread(block 68) failed [ 761.059401][T18854] vhci_hcd: release socket [ 761.063649][T25461] FAT-fs (loop5): Directory bread(block 69) failed [ 761.070158][T18854] vhci_hcd: disconnect device [ 761.140780][T25471] lo speed is unknown, defaulting to 1000 [ 761.147232][T25471] vcan0 speed is unknown, defaulting to 1000 [ 761.387834][T25461] FAT-fs (loop5): Directory bread(block 70) failed [ 761.428670][T25461] FAT-fs (loop5): Directory bread(block 71) failed [ 761.484595][T25461] FAT-fs (loop5): Directory bread(block 72) failed [ 761.506038][T25461] FAT-fs (loop5): Directory bread(block 73) failed [ 761.569437][T25461] syz.5.6356: attempt to access beyond end of device [ 761.569437][T25461] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 761.585104][T25461] syz.5.6356: attempt to access beyond end of device [ 761.585104][T25461] loop5: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 761.732077][T18854] kworker/u8:31: attempt to access beyond end of device [ 761.732077][T18854] loop5: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 761.763604][T22658] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.765205][T25473] 9pnet: Could not find request transport: fdäÞ‘Qno=0xffffffffffffffff [ 761.916041][T25482] loop5: detected capacity change from 0 to 1024 [ 761.922772][T25482] EXT4-fs: Ignoring removed oldalloc option [ 761.934348][T25482] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 762.012839][T25482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.025763][T25482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.213229][ T3292] ================================================================== [ 762.221353][ T3292] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 762.228032][ T3292] [ 762.230351][ T3292] write to 0xffff8881064f0910 of 8 bytes by task 3001 on cpu 0: [ 762.237973][ T3292] __dentry_kill+0x13e/0x4c0 [ 762.242564][ T3292] dput+0x5c/0xd0 [ 762.246193][ T3292] step_into+0x21a/0x840 [ 762.250433][ T3292] walk_component+0x169/0x230 [ 762.255107][ T3292] path_lookupat+0x10a/0x2b0 [ 762.259694][ T3292] filename_lookup+0x2e0/0x340 [ 762.264455][ T3292] do_readlinkat+0x89/0x210 [ 762.268970][ T3292] __x64_sys_readlink+0x47/0x60 [ 762.273819][ T3292] x64_sys_call+0x28ba/0x2dc0 [ 762.278493][ T3292] do_syscall_64+0xc9/0x1c0 [ 762.283006][ T3292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.288922][ T3292] [ 762.291260][ T3292] read to 0xffff8881064f0910 of 8 bytes by task 3292 on cpu 1: [ 762.298810][ T3292] fast_dput+0x65/0x2c0 [ 762.302960][ T3292] dput+0x24/0xd0 [ 762.306606][ T3292] do_unlinkat+0x258/0x4d0 [ 762.311025][ T3292] __x64_sys_unlink+0x2e/0x40 [ 762.315706][ T3292] x64_sys_call+0x2329/0x2dc0 [ 762.320398][ T3292] do_syscall_64+0xc9/0x1c0 [ 762.324899][ T3292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.330809][ T3292] [ 762.333130][ T3292] value changed: 0xffff8882379e68a0 -> 0x0000000000000000 [ 762.340230][ T3292] [ 762.342549][ T3292] Reported by Kernel Concurrency Sanitizer on: [ 762.348705][ T3292] CPU: 1 UID: 0 PID: 3292 Comm: udevd Not tainted 6.13.0-rc6-syzkaller-00059-g643e2e259c2b #0 [ 762.358954][ T3292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 762.369009][ T3292] ==================================================================