last executing test programs: 8m40.991768807s ago: executing program 0 (id=1951): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xfe, 0xffffffffffffffff, 0x9) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) epoll_pwait2(r0, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x6, 0x0, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000780)="4f7f61bfe7ec271202403a540b524a03bda1e44111dd69d3924090d27ac2f6", 0x1f}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32], 0x48) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) 8m39.700603979s ago: executing program 0 (id=1971): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000240)={[{@jqfmt_vfsv0}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ba, &(0x7f0000002ec0)="$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") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$eJzs3c9vG1kdAPCvnV9umm6ysIcFAVuWhYKq2om7G632wnJBQqvVIi2cEGqjxI2i2HEUO6UJkUjPXJGoxAn+BA5IHJB64s4NblzKAalABWqQEPJq7HGbOHFiNXHcxp+PNPJ7MxN/v8/SvBc/2/MCGFpXI2I3IsYj4nZETKf7M+kWH7a25LynT3YW957sLGai0fj0n6PpmTuL7fPbLqfPmYv4JKlPHBG3trW9ulAulzbSeqFeWS/UtrZvrFQWlkvLpbVicX5ufvb9m+8Vz6ytb1V++/i7Kx/98A+///KjP+1+66dJzt9OjyVtO7NA+7Rel7GY2rcveeU+6kewARhJ2zM+6ER4IdmI+FxEvJ2Wn8kNLicAoL8ajeloTO+vd5fp4RwA4OWXvOefikw2n77/n4psNp9vzuHl3ojJbLlaq1+/U91cW4rmHNZMjGXvrJRLs+lc4UyMZZL6XLP8vF7sqN+MiNcj4hcTl5r1/GK1vDSof3oAYMhd7hj//zPRGv974BMCAHiVGckBYPgcHv/HBpIHAHB+vP8HgOGzb/w/6re6AMAFlOv47T8AcPGdOP//Zvzsx+eTCgBwTnz+DwBD5fsff5xsjb30/tdLd7c2V6t3byyVaqv5yuZifrG6sZ5frlaXm/fsqZz0fOVqdX3u3di8V6iXavVCbWv7VqW6uVa/1byv962SHxYAwOC9/tbDv2QiYveDS80t2ms5+EIAXHgucxheI4NOABiY0UEnAAyM+Xggc8Lxrl8RetD9by6dIh+g/659ocv8//H/G/y/cT7pAX1k/h+G1+nm/80ewKvM/D8Mr0YjYz1/ABgyPbyD9xVBuOBe+PN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGGJTzS2TzadrgU9FNpvPR1yJiJkYy9xZKZdmI+K1iPjzxNhEUp8bdNIAwCll/55J1/+6Nv3OVOfR8cx/J5qPEfGTX336y3sL9frGXLL/X8/21x+k+4tHBpjofxsAgH1GO3e0x+n2ON5e3/fpk53F9naeCT7+Tmtx0STuXrq1U28ln4uxiJj8d+ZAYzJntDDx7v2IeLOz/dlnx2fSlU874yexr/QtfjRbOHUgfvZA/GzzWOsxeS0+fwa5wLB5mPQ/Hx51/WXjavMxvf4yBzvTXPz8cOf6Atr9316js/9rXe+fXMk1+5qj+r+rvcZ494/f63rs/kjji6MRe4f63/aK0Llm6aj47/QY/69f+srb3Y41fh1xLY6L3yoV6pX1Qm1r+8ZKZWG5tFxaKxbn5+Zn37/5XrHQnKMutGeqD/vHB9df697+iMku8XMntP/rPbb/N/+7/aOvHhP/m187Kn423jgmfjImfqPH+AuTv+u6fHcSf6lL+0cPxB8/8HfJvus9xn/0t+2lHk8FAM5BbWt7daFcLm0onLaQ69czX35JGqhwTGEkyu35qJcin1MXBtwxAX33/KIfdCYAAAAAAAAAAAAAAEA3tR+kt/zr44/hBt1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7PAgAA//+iDcmp") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) (fail_nth: 2) unlink(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ff, 0x5}, 0x2018, 0x9, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) 8m39.074321119s ago: executing program 0 (id=1977): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x7ec, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) syz_io_uring_setup(0x362a, &(0x7f0000000040)={0x0, 0xb0da, 0x2, 0x2, 0x2f7}, &(0x7f0000000140), &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x18) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3}, 0x8) r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x3ff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r9, 0x2402, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYRES16=r8, @ANYRESDEC=r4, @ANYRESDEC=r8, @ANYRES8=r5, @ANYRES8=r9, @ANYRES64=r3, @ANYRES16=r3, @ANYRES8=r4, @ANYRES64=r8, @ANYRESHEX=r9, @ANYRES32=r3, @ANYRESOCT=r9, @ANYBLOB="83df6c9c7f004dd7", @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x8}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt(r11, 0x5, 0xfffffff8, 0x0, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ed000000", @ANYRES16=r12, @ANYBLOB="0100ffff7fff00000000180000000e0001006e657464657673696d0000000f0002"], 0x100}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 8m38.043433476s ago: executing program 0 (id=1984): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r1, 0x0, 0x478) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xb4, &(0x7f0000000300)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0xa, 0x4, 0x2, 0x4, 0xa6, 0x66, 0x0, 0x0, 0x84, 0x0, @private=0xa010102, @broadcast, {[@timestamp_addr={0x44, 0x14, 0xf6, 0x1, 0x8, [{@multicast2, 0xfff}, {@loopback, 0x7}]}]}}, "e37f00de2f0255cb4de3cac7c8d6fdfee0915b3c4deea737b0a20fc8faaef9b6cafd9827a51d83b76b3794a0fa35ca5c057251df194c05d93328023566b532b985f71d41977962d515d43d4ea558d590ab18cb83627b9ca63d9e551aad7de26cb82e8d3771c7fee6ca343b7116f947bc1b876b58f5f995c1d00dcc919e9b"}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000200"/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pause() ptrace(0x10, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) ptrace(0x10, r3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000080) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000050000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b", 0xe, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8m36.713054468s ago: executing program 0 (id=1998): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x2, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 8m35.851596762s ago: executing program 0 (id=2007): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='workqueue_activate_work\x00', r0, 0x0, 0x20000009}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000005ffffffb702000008000000b70300000000008385000000710000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x23}}], 0x30}, 0x0) 8m35.761606264s ago: executing program 32 (id=2007): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='workqueue_activate_work\x00', r0, 0x0, 0x20000009}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000005ffffffb702000008000000b70300000000008385000000710000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x23}}], 0x30}, 0x0) 2m18.427662517s ago: executing program 5 (id=9117): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 2m18.408705487s ago: executing program 5 (id=9118): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x00') r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 2m18.392380847s ago: executing program 5 (id=9119): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) syz_emit_ethernet(0x72, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60"], 0x0) 2m18.374386477s ago: executing program 5 (id=9120): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0x0, 0xd}, 0x1, 0x4, 0x8, {0xf6, 0x2}, 0x2, 0x8bd7}) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r6], 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r7, 0x0, 0x8000000}, 0x27) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x43, r5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) 2m18.352302218s ago: executing program 5 (id=9121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000ac0)='kvm_unmap_hva_range\x00', r1, 0x0, 0x3}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone3(&(0x7f00000001c0)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x21, 0x0, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x2, 0x400, 0x8, @remote, @loopback, 0x40, 0x7800, 0x1f8, 0xb}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'gre0\x00', r8, 0x80, 0x1, 0x9, 0x1009, {{0x23, 0x4, 0x2, 0x20, 0x8c, 0x65, 0x0, 0x1, 0x2f, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x10, 0x3, 0x9, [{@loopback, 0x6b330df3}, {@private=0xa010100, 0x80000}, {@multicast1, 0x3}, {@remote, 0xf4f6}, {@private=0xa010102, 0x3}]}, @rr={0x7, 0x3, 0x24}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x33, [@private=0xa010102, @broadcast]}, @cipso={0x86, 0x2d, 0x3, [{0x0, 0x4, "f491"}, {0x5, 0xd, "28b4827ac266dd7e88c58b"}, {0x5, 0x5, '.\';'}, {0x6, 0x11, "57c03fbcfa33d7086f34d9683f90cd"}]}, @ssrr={0x89, 0xb, 0xdd, [@dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000010000008500000086"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) socket$netlink(0x10, 0x3, 0x0) r11 = memfd_secret(0x0) sendmsg$NL80211_CMD_ASSOCIATE(r11, &(0x7f0000000d40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b00)={0x1e0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="5aa2fd2f5582"}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88e7}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_PMK={0x15, 0xfe, "1712f6554174f817bd382e30575890c62a"}, @NL80211_ATTR_PMK={0x29, 0xfe, "6680b6a1687e44b6e3b57274e47f6e00f5ab0ccfc9f10ca60be97e943c63ffb277c4140947"}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0b}, @NL80211_ATTR_SAE_PASSWORD={0x62, 0x115, "7f917400eb74f7d41417620a7f62f1033cd16411a6a13e7892a30f42ea9d21289e961154a4b92532b7663b4c07d3f3dbe2e2680ad2eeb0f7f4c6dda419517f0e03ef2556b2d457c81518a12bdafea43ee47a32c014e3d9fb15d74b6e7405"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88b5}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_USE_RRM={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_SAE_PASSWORD={0x7e, 0x115, "26fce1aeb9b003d5b438ed5fe785924dab288838e2246289669215630bb136493667a96e55c9475963bdab3996bb6d39f704b82882940b70b75629eff439c2c1c51ebe979f754155f91d105c5b1a2114be96163376b9afae4a500f9f7d344fcd349ef58345deb09fbc6347f6ad1e12aeca30995dfbe3b6a358e5"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88ca}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5009}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0a, 0xf, 0xfac04, 0xfac04]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0a]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x10f418}]]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0xf3a, 0x0) 2m18.181784421s ago: executing program 5 (id=9124): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r3, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) r4 = eventfd(0x4) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000000)="cb3f1b646f78c699944f01079275736bc6234bdc8d53341e6a2f2c8c45c6bb809088b3750525564e3bcbe7305b9e87199159c2344fd70e83f6a586cf4eb780547fbe70a75b33ce849c9b4ab5165e9d454fe22fda354b5d8fb8420399b70926bc9e69fee1283671357b88b997d1c88fb535e2e2afbb3de91c0d894731272b72d59e21f77e2f92daf83d2498659dd696f4f097a4fd5d906455e1ec51292ab8c4de3dba418953ab5ca81b7367191e", 0xad, 0x0, 0x0, 0x2, r4}]) 2m3.168706237s ago: executing program 33 (id=9124): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r3, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) r4 = eventfd(0x4) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000000)="cb3f1b646f78c699944f01079275736bc6234bdc8d53341e6a2f2c8c45c6bb809088b3750525564e3bcbe7305b9e87199159c2344fd70e83f6a586cf4eb780547fbe70a75b33ce849c9b4ab5165e9d454fe22fda354b5d8fb8420399b70926bc9e69fee1283671357b88b997d1c88fb535e2e2afbb3de91c0d894731272b72d59e21f77e2f92daf83d2498659dd696f4f097a4fd5d906455e1ec51292ab8c4de3dba418953ab5ca81b7367191e", 0xad, 0x0, 0x0, 0x2, r4}]) 28.124061579s ago: executing program 2 (id=11642): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(r0, 0x80047456, &(0x7f0000000740)) r1 = io_uring_setup(0x3063, &(0x7f0000000a40)={0x0, 0xa407, 0x40, 0xfffffffe, 0x13a}) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = fcntl$getown(r1, 0x9) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000300)="0fb80d4fe39af6afd1900031cdf4c300743e6530c8db01f8b620ec689e67e0933354c8804c37ab9f89066faf0c9d5ce335e930d742464a0b89255293f2ae232ff60e520e96e886fa071236e55a4a0773834ee81962254f129cab97f9ca0319ee950bd1d73b5bc4b06bf836780c4f81bd0188b4a9237b5eb05a881890f935fb12fc8b424c0d04") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7fffffff}, 0x18) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000000000017f000001000000000000000000"], 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r12}, 0x18) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r13, &(0x7f0000000000)={0x2, @short={0x2, 0x0, 0xaaa1}}, 0x14) close_range(r1, r2, 0x0) 27.991956821s ago: executing program 2 (id=11648): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000000500), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001480)={0x1, 0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000dc0)=""/70, 0x46}], &(0x7f0000001440)=[0x2, 0x1]}, 0x20) 27.971219172s ago: executing program 2 (id=11650): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @remote}, 0x10) sendmsg$netlink(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)={0x90, 0x37, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x7f, 0xfe, 0x0, 0x1, [@typed={0x8, 0x11e, 0x0, 0x0, @u32=0xb}, @generic="cb4e89941fcde1092af4565d9673a784008d6706ac18ef0e4b537b17c7544bc5096ae02025a15ad288ad9dac967717f81f8129af0730c45b07881d0d87bb7beb13d21eb1de4baf4b1e72b475c5cf810cbcb327ed86aa108c8dcecce3138e2f0698dd7fc3afbba123fd6ea44072b462172895d9"]}]}, 0x90}, {0x0}], 0x2, 0x0, 0x0, 0x1}, 0x820) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_uring_setup(0x77ae, &(0x7f00000004c0)={0x0, 0x3723, 0x800, 0x0, 0x204}) set_tid_address(&(0x7f0000000080)) socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1049}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 27.872225524s ago: executing program 2 (id=11658): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x49b, &(0x7f0000000a40)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x800000000000000}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x20000100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000f21000/0x1000)=nil, 0x1000, 0x2000000, 0x10011, r0, 0xd745e000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 27.711523366s ago: executing program 2 (id=11665): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) clock_gettime(0x0, &(0x7f0000001140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) 27.437485651s ago: executing program 2 (id=11672): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x205) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) (fail_nth: 5) 27.403488211s ago: executing program 34 (id=11672): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x205) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) (fail_nth: 5) 1.931648469s ago: executing program 3 (id=12331): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) fcntl$dupfd(r1, 0x0, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 1.90736708s ago: executing program 3 (id=12333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000200), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) (fail_nth: 6) 1.555502566s ago: executing program 3 (id=12338): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x1, 0x10, "0062ba7d8200000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x121500) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6gre0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") r0 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) fallocate(r0, 0x10, 0x2, 0x7000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) write$P9_RSTAT(r0, &(0x7f0000000040)=ANY=[], 0x47) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r1, 0x18, 0x0, 0x2}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, 0x0, 0x2000, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) 1.555050826s ago: executing program 4 (id=12339): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a3cfc0000120a0900000000000000000002310000000008000440000000000900010073797a3000000000080003400000fee414000000110001d9983c924519039502d809f719afb76653cf97ef308a615142a4a9eaf9efe83da7f33f6ffd66e76f69"], 0x64}}, 0x40804) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0) 1.544797586s ago: executing program 7 (id=12340): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000000209010200000000000000007c00000024000200140001800800010064010101080002aa0c000280050001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) syz_open_dev$usbfs(&(0x7f0000000240), 0x7bffffff, 0x58501) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) 1.535593526s ago: executing program 3 (id=12341): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) open(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_gettime(0x0, &(0x7f0000000300)) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.503449696s ago: executing program 4 (id=12342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48c8}, 0x20004804) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @broadcast}}}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x6, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 1.2869587s ago: executing program 1 (id=12344): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1.203857761s ago: executing program 7 (id=12345): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 970.070475ms ago: executing program 7 (id=12346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='ext4_mballoc_prealloc\x00', r1}, 0x18) socket(0x10, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4004, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x108000, 0x0, 0xfffffffb, 0x2, 0x9, 0x2, 0x0, 0x0, 0x400000, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f00001d3000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00009ad000/0x2000)=nil) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 968.604224ms ago: executing program 4 (id=12347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) r1 = io_uring_setup(0x76a3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x80}) close(r1) clock_nanosleep(0x2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 967.714854ms ago: executing program 3 (id=12348): r0 = memfd_create(&(0x7f0000000140)='v\xa6\xf5l/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\x85\xb9\nR\xf5@\x99\xb9\x8a\x0fZ\t\x90\x8b\xab\xf8\x87\x10ti\xba\xc6\xfb\xd2)\x95\x88k\x82\x04s\xb3b\x01\xf4\xach\v\x91\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc]\x11\x95\xf8\xe6\xa7\xc3\xfc\x18+\x92\xa5N\a\xa7\x7fN\x9bM\n\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9dA\x00\x00\x00\x1bC\xd8\x1c\xc5u\x00S\x00'/126, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setreuid(0xee01, 0xee01) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4, 0x0, 0x6}, 0x18) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) 966.304725ms ago: executing program 1 (id=12349): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x10000000000ac6}, 0x18) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r12, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x16, 0x86f, @l2={'eth', 0x3a, 'vcan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x40) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0135014010ff"}) 965.607795ms ago: executing program 3 (id=12350): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x19, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000010000000000000700000000030000000000000e0100000000000000002e61ae"], 0x0, 0x39, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) getpgid(r3) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r4 = gettid() tkill(r4, 0x7) sched_setaffinity(r4, 0x8, &(0x7f0000000280)=0x6) preadv(r1, &(0x7f0000000980)=[{&(0x7f0000000580)=""/109, 0x6d}], 0x1, 0x8a, 0xfffffff9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) chroot(&(0x7f00000002c0)='./file0\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x6, 0x2, {{0x29, 0x4, 0x2, 0x4, 0xa4, 0x68, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0xe7, 0x3, 0x2, [{@broadcast, 0x2}, {@loopback, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @cipso={0x86, 0x45, 0x1, [{0x6, 0x12, "2ca955c6f1d139181d8f744f97b83a0b"}, {0x5, 0x5, "ecefbf"}, {0x5, 0x12, "ed19186de7431d85a620423b634ae539"}, {0x2, 0xb, "b69830a13dcec7d085"}, {0x1, 0xb, "7ff572b7d92f80a1dc"}]}, @lsrr={0x83, 0x7, 0x5, [@initdev={0xac, 0x1e, 0x2, 0x0}]}, @noop, @generic={0x7, 0xb, "7596b6425a6d83f313"}, @timestamp_addr={0x44, 0x1c, 0xa1, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010100, 0x1}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', r6, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xcf) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000806d308c2023ac8f421e3f9b76000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r9}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/60}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 838.622207ms ago: executing program 1 (id=12352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000005afed044cc775a713e0d", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x2ae, &(0x7f0000000800)="$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") open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x13, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) 838.115557ms ago: executing program 7 (id=12353): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) fcntl$dupfd(r2, 0x0, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 775.915658ms ago: executing program 7 (id=12355): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000005afed044cc775a713e0d", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x2ae, &(0x7f0000000800)="$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") open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="012817b8e2fe31d6da000200000014000200626f6e643000000000000000000000000900010073797a3000000000a0d4741dac17a00a3978aa4673eda515e638c7ec98ccf888094fd4c303f41331b3ad7211df5760e31a19a2c7c4"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0xfffffffc, 0xffffffff, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000, 0x0, 0x20004800}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@orlov}, {@nodelalloc}, {@jqfmt_vfsold}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}]}, 0xff, 0x493, &(0x7f0000000640)="$eJzs3M1vFGUYAPBnth9804qIgqCraCR+tLSgcvCgRhMPmpjoAY+1LYgs1NCaCGm0GINHQ+LdeDTxL/DmxagHY+JVE4+GhGhjQvFUM1+w3W5LW9oudH+/ZDvvO5/vMzPv7jvzdiaAtlVN/yQR2yPi94joybNzZ6jmg5npyeHr05PDSczOvvV3ks13bXpyuJy1XG5bkTlUiah8lsSLyfztjp+/cHqoVhs9V+T7J8580D9+/sIzp84MnRw9OXp28Nixo0cGnn9u8NlViTON69q+j8f2733tnctvDB+//O5P36bF2nMgn14fxy1dbxJQE9V0r/0zm2mc9vgyyn432FGXTjpbWBCWpSMi0sPVldX/nuiImwevJ179tKWFA9ZU+tu0aeHJU7PABpZEq0sAtEb5Q59e/5afdWp63BGuvhTRXaRnpieHZ27E3xmVYnzXGm6/GhHHp/77Kv3Ecu9DAACsQNa2ebpZ+68Se7Jh3texs+hD6Y2IeyJiV0TcGxG7I+K+iGze+yPigXzh2Z4lbr/akJ/f/qlcaVrmVZK2/16oa/vN1MVfDHo7ityOLP6u5MSp2ujhYp8ciq5NaX5gkW18/8pvXyw0rb79l37S7ZdtwaIAVzobbtCNDE0MrdZOuHoxYl9ns/iTGz0B6RmwNyL2LW/VO8vEqSe/2b/QTLeOfxGr0M80+3XEE/nxn4qG+EvJ4v2T/ZujNnq4vzwr5vv510tvFsnuxmm3Ff8qSI//1rnnfzHlYjHs+TfJ+2u7olYbPTe+/G1c+uPzBa9pVnr+dydvZ33Wv7yXj/toaGLi3EBEd/J6li93dDZ+8OayZb6cP43/0MHm9X9XsUwa/4MRkZ7EByLioYh4uCj7IxHxaEQcXCT+H19+7P1F4k8iiZYe/5Gm3383zv/epL6/fgWJjtM/fLdQj/nSjv/RmMq+a3PZ998tLLWAt7n7AAAA4K5QiYjtkVT68nR1e1QqfX35//Dvjq2V2tj4xFMnxj48O5I/I9AbXZXyTldP3f3QgWSqWGOeHyzuFZfTjxT3jb/s2JLl+4bHaiMtjh3a3ba59T/K+p/6q6PVpQPWnOe1oH011v9Ki8oBrL+l/P67FoCNqUn939KKcgDrz/U/tK9m9f+Thrz2P2xM8+v/n01eWQdsRNr/0L7Uf2hf6j+0paU+xV++T2HFLwGYkygfFlj5ejYv+Qn/Oy9RXZM1l0doLQu/JW6OicodsTPbJJHWmPXdaJOX1QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyF/g8AAP//Z0bjpw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000680), 0x24, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [], {}, [{0x8, 0x2}, {0x8, 0x1}, {0x8, 0x2}], {0x10, 0x7}}, 0x3c, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x13, r7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r7, 0x6e2, 0x600, 0x1, 0x0, 0x0) 771.001038ms ago: executing program 1 (id=12356): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000005afed044cc775a713e0d", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x2ae, &(0x7f0000000800)="$eJzs3M9r02AYwPFn3bq1HVt7EEFBfNCLXsJW/4IiG4gFZa6iHoTMpVoa29HESkXcbl69+T8Mj94E5z+wizfv4mUIgpcdZJEljc1m90vWpa7fD4y8y/s+ed/8aHkSmnfj3pun1bJjlE1XEimVhKRWZFMkJwkJDbWXCb88KlErcnX855cLd+4/uFkoFmfmVGcL89fyqjp58ePzl+8ufXLH776f/DAm67mHGz/yX9fPrp/b2JoPt1531dSFet01F2xLFytO1VC9bVumY2ml5liNHfVlu7601FKztjiRWWpYjqNmraVVq6VuXd1GS83HZqWmhmHoREYGzfCRI0qrc3NmoSeDQRzS3VY2GgVzuGtlafUkBgUAAPrL3/m/nEj+/6TiaMXR2kH5f0LI/3vHz/+3uiaNOB2S2zcABTPT/vzuRP4PAAAAAAAAAAAAAAAAAAAAAMD/YNPzsp7nZcNl+DcmIinZSgWtvGzc40Rv7H/+RcL/IyFDMQ4Xxyzy4l5KxH7dLDVLwTKoL5SlIrZYMpUU+eVfD21BefZGcWZKfTlZs5fb8f5LgmNhfCjXPX46iNdI/HKzlJRMtP+8ZOVM9/j8rvikiDRLo3LlciTekKx8fiR1sWXRv6478a+mVa/fKu7qP+23AwAAAADgNDD0j9zO+99gNknD0HDakF31wcrO8wHJHvB8QGVtVDrxI3J+JL79BgAAAABgkDitF1XTtq3GIBfScvSoQTx0RvvnYPs29jxvebvRIbf8Ni2yR1VC9qzqdeG7iPTBAT/uwrdnwQk8TOM4v5UAAAAA9EIn6Y97JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADK7DTh4Wtv+Xucci3Q3Hs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAf/gdAAD//9maFWk=") open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="012817b8e2fe31d6da000200000014000200626f6e643000000000000000000000000900010073797a3000000000a0d4741dac17a00a3978aa4673eda515e638c7ec98ccf888094fd4c303f41331b3ad7211df5760e31a19a2c7c4"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0xfffffffc, 0xffffffff, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000, 0x0, 0x20004800}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@orlov}, {@nodelalloc}, {@jqfmt_vfsold}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}]}, 0xff, 0x493, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000680), 0x24, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [], {}, [{0x8, 0x2}, {0x8, 0x1}, {0x8, 0x2}], {0x10, 0x7}}, 0x3c, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x13, r7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r7, 0x6e2, 0x600, 0x1, 0x0, 0x0) 609.310621ms ago: executing program 1 (id=12357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000005afed044cc775a713e0d", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x2ae, &(0x7f0000000800)="$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") open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="012817b8e2fe31d6da000200000014000200626f6e643000000000000000000000000900010073797a3000000000a0d4741dac17a00a3978aa4673eda515e638c7ec98ccf888094fd4c303f41331b3ad7211df5760e31a19a2c7c4"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0xfffffffc, 0xffffffff, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000, 0x0, 0x20004800}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@orlov}, {@nodelalloc}, {@jqfmt_vfsold}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}]}, 0xff, 0x493, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000680), 0x24, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0/file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [], {}, [{0x8, 0x2}, {0x8, 0x1}, {0x8, 0x2}], {0x10, 0x7}}, 0x3c, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x13, r7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r7, 0x6e2, 0x600, 0x1, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000023c0)='./file0\x00', 0x80800) 523.053701ms ago: executing program 7 (id=12358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000180)={0x1, 0x5, 0x1, 0x7, 0x3, 0xa, 0x3, "16b36def20fbf53d35f65aebecfb0f700da92341", "a06a65ac2ca59aabf879a485a983644e136b39bc"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x9a8b000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) clock_settime(0x0, &(0x7f0000009ac0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x9b, 0x1, 0x0, 0x7ffc3ffe}]}) listxattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)) fsmount(r5, 0x0, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0xa, 0xfa00, {0x4, &(0x7f00000002c0), 0x111, 0x2}}, 0x20) gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 517.757842ms ago: executing program 1 (id=12359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x26, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="258d191b4d162f331bbfd14bf873"], &(0x7f0000000480)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x5, 0x6, 0x0, 0x20}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='cpu<\t0||\t') r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) close_range(r6, r7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r12}, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x4010) 299.781116ms ago: executing program 4 (id=12360): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x10) 247.519066ms ago: executing program 6 (id=12361): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000005afed044cc775a713e0d", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c757365667265652c646973636172642c73686f72746e616d653d77696e6e742c6572726f72733d636f6e74696e75652c636865636b3d6e6f726d616c2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c0075fd0f66e1fbbd34adc2c85b20fe31e143d77cfa81b25d55da5a420be8a22a83e81efee5f8650c3a6ab5921db3ad08c62c69af5867c65f4d15bc9ae43474550ab3218e4335c82dbb9b531ea1419c1eb9c5bdc1dbfda4493b2b3440ac4b27c0fe35239d9dc2eabc697b61459ddcd388a41538526706975e5c737e48de944c114461063da691df56dce7e20ca2da4e044d78473d0e7296b43c9eb2ec69af52b88510008c405044c99e05bd6488f5767e2efa4390efa7d9250c2c6ab87a10786d"], 0xfd, 0x2ae, &(0x7f0000000800)="$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") open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x13, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) 247.147096ms ago: executing program 4 (id=12362): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000010000000000000000100000000000000000000000000000000000003f7300feffffff0000000000000000000000000000000000000000000000000000000000000000000104000000000000000000fcffffff0000000000000000000000000000000000400000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 245.475906ms ago: executing program 4 (id=12363): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001400)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_int(r1, 0x0, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0xfffffffffffffd9c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x403, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PBURST={0x8, 0x7, 0x1e1e}]}}]}, 0x68}}, 0x44080) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) pipe2(&(0x7f0000000300), 0x800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001580)='thermal_power_allocator_pid\x00', r11}, 0x18) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_int(r12, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_io_uring_setup(0x794, &(0x7f0000001440)={0x0, 0x1, 0x2, 0x8}, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0x9, 0xca7], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="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"]}, 0x107a) 149.704108ms ago: executing program 6 (id=12364): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x1, 0x10, "0062ba7d8200000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x121500) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6gre0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r0 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) fallocate(r0, 0x10, 0x2, 0x7000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) write$P9_RSTAT(r0, &(0x7f0000000040)=ANY=[], 0x47) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r1, 0x18, 0x0, 0x2}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, 0x0, 0x2000, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) 103.943828ms ago: executing program 6 (id=12365): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x4, 0xfffffffc}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) capset(&(0x7f0000000700)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x200001, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0xffffff7f, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="0201000905000000000000000000000001"], 0x28}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) r8 = socket$packet(0x11, 0x2, 0x300) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0xee00, 0xee00}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000441, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@noextend}], [{@uid_lt={'uid<', r9}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffa43f}}, {@fowner_gt={'fowner>', r10}}, {@fsname={'fsname', 0x3d, 'kmem_cache_free\x00'}}]}}) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) close_range(r7, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r11, 0x891b, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000060000000010", @ANYRES8=r4, @ANYRES32=r4, @ANYRES16=r3], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r13}, 0x10) 24.13603ms ago: executing program 6 (id=12366): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) fcntl$dupfd(r2, 0x0, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 23.43025ms ago: executing program 6 (id=12367): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0x0, 0xd}, 0x1, 0x4, 0x8, {0xf6, 0x2}, 0x2, 0x8bd7}) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r6], 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r7, 0x0, 0x8000000}, 0x27) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x43, r5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) 0s ago: executing program 6 (id=12368): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a3cfc0000120a0900000000000000000002310000000008000440000000000900010073797a3000000000080003400000fee414000000110001d9983c924519039502d809f719afb76653cf97ef308a615142a4a9eaf9efe83da7f33f6ffd66e76f69"], 0x64}}, 0x40804) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0) 0s ago: executing program 6 (id=12369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) utimensat(r1, 0x0, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fgetxattr(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="7573a40c"], 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000000)=""/36, &(0x7f0000000040)=0x24) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='huge=never,nr_inodes=T']) kernel console output (not intermixed with test programs): 9][ T3317] FAT-fs (loop6): Directory bread(block 162) failed [ 674.111325][T22560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.116545][ T3329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11700'. [ 674.124213][ T3317] FAT-fs (loop6): Directory bread(block 163) failed [ 674.127809][ T3329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11700'. [ 674.143805][T22560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.194817][ T3335] nfs4: Bad value for 'source' [ 674.215513][ T3335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11702'. [ 674.268239][T22560] team_slave_1 (unregistering): left promiscuous mode [ 674.282332][T22560] team0 (unregistering): Port device team_slave_1 removed [ 674.293974][T22560] team_slave_0 (unregistering): left promiscuous mode [ 674.304283][T22560] team0 (unregistering): Port device team_slave_0 removed [ 674.304654][ T3346] SET target dimension over the limit! [ 674.369306][ T3242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.376569][ T3242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.402953][ T3242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.435518][ T3353] openvswitch: netlink: Message has 6 unknown bytes. [ 674.436490][ T3242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.449640][ T3242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.476140][ T3242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.522103][ T3242] hsr_slave_0: entered promiscuous mode [ 674.531100][ T3242] hsr_slave_1: entered promiscuous mode [ 674.537583][ T3242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.546672][ T3242] Cannot create hsr debugfs directory [ 674.553881][ T3355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11710'. [ 674.562908][ T3355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11710'. [ 674.610060][ T3360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11711'. [ 674.619196][ T3360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11711'. [ 674.701703][ T3242] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 674.713142][ T3242] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 674.726976][ T3368] loop4: detected capacity change from 0 to 128 [ 674.735086][ T3368] FAT-fs (loop4): Directory bread(block 162) failed [ 674.741852][ T3368] FAT-fs (loop4): Directory bread(block 163) failed [ 674.749905][ T3368] FAT-fs (loop4): Directory bread(block 164) failed [ 674.750968][ T3242] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 674.760066][ T3368] FAT-fs (loop4): Directory bread(block 165) failed [ 674.771178][ T3368] FAT-fs (loop4): Directory bread(block 166) failed [ 674.777938][ T3368] FAT-fs (loop4): Directory bread(block 167) failed [ 674.791506][ T3368] FAT-fs (loop4): Directory bread(block 168) failed [ 674.803138][ T3368] FAT-fs (loop4): Directory bread(block 169) failed [ 674.813515][ T3242] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 674.813621][ T3368] FAT-fs (loop4): Directory bread(block 162) failed [ 674.827016][ T3368] FAT-fs (loop4): Directory bread(block 163) failed [ 674.865350][ T3242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.883179][ T3242] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.895614][T22571] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.902934][T22571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.934528][T22557] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.941800][T22557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.967165][ T3380] loop4: detected capacity change from 0 to 128 [ 674.973576][ T3377] nfs4: Bad value for 'source' [ 674.984551][ T3380] FAT-fs (loop4): Directory bread(block 162) failed [ 674.991466][ T3380] FAT-fs (loop4): Directory bread(block 163) failed [ 674.998164][ T3380] FAT-fs (loop4): Directory bread(block 164) failed [ 675.004954][ T3380] FAT-fs (loop4): Directory bread(block 165) failed [ 675.011595][ T3380] FAT-fs (loop4): Directory bread(block 166) failed [ 675.018721][ T3380] FAT-fs (loop4): Directory bread(block 167) failed [ 675.025586][ T3380] FAT-fs (loop4): Directory bread(block 168) failed [ 675.034807][ T3380] FAT-fs (loop4): Directory bread(block 169) failed [ 675.044614][ T3380] FAT-fs (loop4): Directory bread(block 162) failed [ 675.045327][ T3242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.051401][ T3380] FAT-fs (loop4): Directory bread(block 163) failed [ 675.070011][ T3380] smc: net device bond0 applied user defined pnetid SYZ0 [ 675.192894][ T3412] openvswitch: netlink: Message has 6 unknown bytes. [ 675.260004][ T3424] loop6: detected capacity change from 0 to 128 [ 675.265782][ T3423] loop4: detected capacity change from 0 to 128 [ 675.276249][ T3423] FAT-fs (loop4): Directory bread(block 162) failed [ 675.282930][ T3423] FAT-fs (loop4): Directory bread(block 163) failed [ 675.285434][ T3424] FAT-fs (loop6): Directory bread(block 162) failed [ 675.301347][ T3423] FAT-fs (loop4): Directory bread(block 164) failed [ 675.306208][ T3424] FAT-fs (loop6): Directory bread(block 163) failed [ 675.320439][ T3242] veth0_vlan: entered promiscuous mode [ 675.334457][ T3424] FAT-fs (loop6): Directory bread(block 164) failed [ 675.335613][ T3423] FAT-fs (loop4): Directory bread(block 165) failed [ 675.342512][ T3424] FAT-fs (loop6): Directory bread(block 165) failed [ 675.356714][ T3424] FAT-fs (loop6): Directory bread(block 166) failed [ 675.361309][ T3242] veth1_vlan: entered promiscuous mode [ 675.369973][ T3424] FAT-fs (loop6): Directory bread(block 167) failed [ 675.385697][ T3423] FAT-fs (loop4): Directory bread(block 166) failed [ 675.391494][ T3424] FAT-fs (loop6): Directory bread(block 168) failed [ 675.396441][ T3423] FAT-fs (loop4): Directory bread(block 167) failed [ 675.404594][ T3424] FAT-fs (loop6): Directory bread(block 169) failed [ 675.419359][ T3424] FAT-fs (loop6): Directory bread(block 162) failed [ 675.427054][ T3423] FAT-fs (loop4): Directory bread(block 168) failed [ 675.427226][ T3242] veth0_macvtap: entered promiscuous mode [ 675.433902][ T3423] FAT-fs (loop4): Directory bread(block 169) failed [ 675.449504][ T3242] veth1_macvtap: entered promiscuous mode [ 675.455770][ T3424] FAT-fs (loop6): Directory bread(block 163) failed [ 675.462942][ T3242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.474261][ T3242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.484430][ T3242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.495139][ T3242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.509995][ T3423] FAT-fs (loop4): Directory bread(block 162) failed [ 675.516964][ T3423] FAT-fs (loop4): Directory bread(block 163) failed [ 675.522298][ T3242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.535736][ T3437] smc: net device bond0 erased user defined pnetid SYZ0 [ 675.542759][ T3423] smc: net device bond0 applied user defined pnetid SYZ0 [ 675.551206][ T3242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.562341][ T3242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.584123][ T3441] openvswitch: netlink: Message has 6 unknown bytes. [ 675.605143][ T3242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.615730][ T3424] smc: net device bond0 erased user defined pnetid SYZ0 [ 675.626474][ T3242] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.635272][ T3242] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.644043][ T3242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.652819][ T3242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.694996][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 675.695012][ T29] audit: type=1400 audit(2000000004.230:51033): avc: denied { mounton } for pid=3242 comm="syz-executor" path="/root/syzkaller.6KbpsI/syz-tmp" dev="sda1" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 675.743426][ T29] audit: type=1400 audit(2000000004.230:51034): avc: denied { mount } for pid=3242 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 675.769113][ T29] audit: type=1400 audit(2000000004.230:51035): avc: denied { mount } for pid=3242 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 675.791597][ T29] audit: type=1400 audit(2000000004.230:51036): avc: denied { mounton } for pid=3242 comm="syz-executor" path="/root/syzkaller.6KbpsI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 675.818892][ T29] audit: type=1400 audit(2000000004.230:51037): avc: denied { mounton } for pid=3242 comm="syz-executor" path="/root/syzkaller.6KbpsI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=117343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 675.848116][ T29] audit: type=1400 audit(2000000004.260:51038): avc: denied { mounton } for pid=3242 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 675.873248][ T29] audit: type=1400 audit(2000000004.260:51039): avc: denied { mount } for pid=3242 comm="syz-executor" name="/" dev="gadgetfs" ino=3588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 675.918206][ T3459] loop6: detected capacity change from 0 to 512 [ 675.933605][ T3459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.948372][ T3459] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 675.981018][T29539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.016705][ T3467] loop4: detected capacity change from 0 to 512 [ 676.032952][ T3467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.052935][ T3467] ext4 filesystem being mounted at /546/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 676.086260][T27956] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.110060][ T3481] loop7: detected capacity change from 0 to 512 [ 676.126961][ T3481] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.145367][ T3481] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 676.156212][ T29] audit: type=1400 audit(2000000004.680:51040): avc: denied { write } for pid=3484 comm="syz.1.11756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 676.182813][ T3242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.199694][ T3489] openvswitch: netlink: Message has 6 unknown bytes. [ 676.211795][ T3491] $Hÿ: renamed from bond0 (while UP) [ 676.219966][ T3491] $Hÿ: entered promiscuous mode [ 676.225473][ T3491] bond_slave_0: entered promiscuous mode [ 676.231588][ T3491] bond_slave_1: entered promiscuous mode [ 676.261195][ T3493] loop7: detected capacity change from 0 to 512 [ 676.271543][ T3493] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.285215][ T3493] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 676.310466][ T3498] loop6: detected capacity change from 0 to 128 [ 676.325002][ T3498] FAT-fs (loop6): Directory bread(block 162) failed [ 676.328121][ T3242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.331694][ T3498] FAT-fs (loop6): Directory bread(block 163) failed [ 676.331718][ T3498] FAT-fs (loop6): Directory bread(block 164) failed [ 676.331740][ T3498] FAT-fs (loop6): Directory bread(block 165) failed [ 676.331763][ T3498] FAT-fs (loop6): Directory bread(block 166) failed [ 676.369129][ T3498] FAT-fs (loop6): Directory bread(block 167) failed [ 676.376293][ T3498] FAT-fs (loop6): Directory bread(block 168) failed [ 676.383259][ T3498] FAT-fs (loop6): Directory bread(block 169) failed [ 676.392714][ T3498] FAT-fs (loop6): Directory bread(block 162) failed [ 676.399662][ T3498] FAT-fs (loop6): Directory bread(block 163) failed [ 676.421180][ T3498] smc: net device bond0 applied user defined pnetid SYZ0 [ 676.485440][ T29] audit: type=1400 audit(2000000005.020:51041): avc: denied { nlmsg_write } for pid=3509 comm="syz.3.11765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 676.510850][ T29] audit: type=1400 audit(2000000005.020:51042): avc: denied { ioctl } for pid=3509 comm="syz.3.11765" path="socket:[117479]" dev="sockfs" ino=117479 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 676.520372][ T3520] loop6: detected capacity change from 0 to 512 [ 676.546569][ T3520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.559737][ T3520] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 676.590538][T29539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.745667][ T3549] loop7: detected capacity change from 0 to 128 [ 676.757223][ T3549] FAT-fs (loop7): Directory bread(block 162) failed [ 676.762088][ T3551] pim6reg1: entered promiscuous mode [ 676.769384][ T3551] pim6reg1: entered allmulticast mode [ 676.775434][ T3549] FAT-fs (loop7): Directory bread(block 163) failed [ 676.782135][ T3549] FAT-fs (loop7): Directory bread(block 164) failed [ 676.790616][ T3549] FAT-fs (loop7): Directory bread(block 165) failed [ 676.797572][ T3549] FAT-fs (loop7): Directory bread(block 166) failed [ 676.805176][ T3549] FAT-fs (loop7): Directory bread(block 167) failed [ 676.811962][ T3549] FAT-fs (loop7): Directory bread(block 168) failed [ 676.819476][ T3549] FAT-fs (loop7): Directory bread(block 169) failed [ 676.827619][ T3549] FAT-fs (loop7): Directory bread(block 162) failed [ 676.834672][ T3549] FAT-fs (loop7): Directory bread(block 163) failed [ 676.842054][ T3549] bio_check_eod: 28 callbacks suppressed [ 676.842069][ T3549] syz.7.11781: attempt to access beyond end of device [ 676.842069][ T3549] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 676.861694][ T3549] syz.7.11781: attempt to access beyond end of device [ 676.861694][ T3549] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 676.877953][ T3549] smc: net device bond0 erased user defined pnetid SYZ0 [ 676.889847][ T3549] syz.7.11781: attempt to access beyond end of device [ 676.889847][ T3549] loop7: rw=3, sector=234, nr_sectors = 6 limit=128 [ 676.903415][ T3549] syz.7.11781: attempt to access beyond end of device [ 676.903415][ T3549] loop7: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 677.047640][ T3582] pim6reg1: entered promiscuous mode [ 677.053002][ T3582] pim6reg1: entered allmulticast mode [ 677.065230][ T3584] loop7: detected capacity change from 0 to 128 [ 677.089456][ T3584] FAT-fs (loop7): Directory bread(block 162) failed [ 677.101163][ T3584] FAT-fs (loop7): Directory bread(block 163) failed [ 677.117921][ T3584] FAT-fs (loop7): Directory bread(block 164) failed [ 677.124814][ T3584] FAT-fs (loop7): Directory bread(block 165) failed [ 677.135791][ T3584] FAT-fs (loop7): Directory bread(block 166) failed [ 677.142587][ T3584] FAT-fs (loop7): Directory bread(block 167) failed [ 677.149645][ T3584] FAT-fs (loop7): Directory bread(block 168) failed [ 677.156671][ T3584] FAT-fs (loop7): Directory bread(block 169) failed [ 677.166494][ T3584] FAT-fs (loop7): Directory bread(block 162) failed [ 677.173324][ T3584] FAT-fs (loop7): Directory bread(block 163) failed [ 677.180869][ T3584] syz.7.11794: attempt to access beyond end of device [ 677.180869][ T3584] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 677.197566][ T3598] loop6: detected capacity change from 0 to 128 [ 677.206173][ T3598] FAT-fs (loop6): Directory bread(block 162) failed [ 677.206619][ T3584] syz.7.11794: attempt to access beyond end of device [ 677.206619][ T3584] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 677.213019][ T3598] FAT-fs (loop6): Directory bread(block 163) failed [ 677.242109][ T3598] FAT-fs (loop6): Directory bread(block 164) failed [ 677.249842][ T3598] FAT-fs (loop6): Directory bread(block 165) failed [ 677.250298][ T3602] openvswitch: netlink: Message has 6 unknown bytes. [ 677.257461][ T3598] FAT-fs (loop6): Directory bread(block 166) failed [ 677.277726][ T3598] FAT-fs (loop6): Directory bread(block 167) failed [ 677.284918][ T3598] FAT-fs (loop6): Directory bread(block 168) failed [ 677.291864][ T3598] FAT-fs (loop6): Directory bread(block 169) failed [ 677.324137][ T3598] FAT-fs (loop6): Directory bread(block 162) failed [ 677.331985][ T3598] FAT-fs (loop6): Directory bread(block 163) failed [ 677.340393][ T3598] syz.6.11802: attempt to access beyond end of device [ 677.340393][ T3598] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 677.354355][ T3598] syz.6.11802: attempt to access beyond end of device [ 677.354355][ T3598] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 677.383732][ T3614] smc: net device bond0 applied user defined pnetid SYZ0 [ 677.396072][ T3598] smc: net device bond0 erased user defined pnetid SYZ0 [ 677.411384][ T3598] syz.6.11802: attempt to access beyond end of device [ 677.411384][ T3598] loop6: rw=3, sector=234, nr_sectors = 6 limit=128 [ 677.425710][ T3598] syz.6.11802: attempt to access beyond end of device [ 677.425710][ T3598] loop6: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 677.447928][ T3621] pim6reg1: entered promiscuous mode [ 677.453417][ T3621] pim6reg1: entered allmulticast mode [ 677.498395][ T3626] openvswitch: netlink: Message has 6 unknown bytes. [ 677.555506][ T3631] SELinux: ebitmap: truncated map [ 677.562182][ T3637] openvswitch: netlink: Message has 6 unknown bytes. [ 677.572134][ T3631] SELinux: failed to load policy [ 677.608249][ T3642] loop6: detected capacity change from 0 to 128 [ 677.615446][ T3638] smc: net device bond0 applied user defined pnetid SYZ2 [ 677.623920][ T3642] FAT-fs (loop6): Directory bread(block 162) failed [ 677.632762][ T3638] smc: net device bond0 erased user defined pnetid SYZ2 [ 677.640536][ T3642] FAT-fs (loop6): Directory bread(block 163) failed [ 677.649748][ T3642] FAT-fs (loop6): Directory bread(block 164) failed [ 677.653789][ T3640] loop4: detected capacity change from 0 to 512 [ 677.657309][ T3642] FAT-fs (loop6): Directory bread(block 165) failed [ 677.670838][ T3642] FAT-fs (loop6): Directory bread(block 166) failed [ 677.675543][ T3640] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 677.677802][ T3642] FAT-fs (loop6): Directory bread(block 167) failed [ 677.694660][ T3642] FAT-fs (loop6): Directory bread(block 168) failed [ 677.701387][ T3642] FAT-fs (loop6): Directory bread(block 169) failed [ 677.711145][ T3640] EXT4-fs (loop4): 1 truncate cleaned up [ 677.713858][ T3642] FAT-fs (loop6): Directory bread(block 162) failed [ 677.726353][ T3642] FAT-fs (loop6): Directory bread(block 163) failed [ 677.730796][ T3640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.736390][ T3642] smc: net device bond0 applied user defined pnetid SYZ0 [ 677.755390][ T3642] smc: net device bond0 erased user defined pnetid SYZ0 [ 677.918451][T27956] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.918619][ T3656] loop6: detected capacity change from 0 to 128 [ 677.935098][ T3656] FAT-fs (loop6): Directory bread(block 162) failed [ 677.942126][ T3656] FAT-fs (loop6): Directory bread(block 163) failed [ 677.949092][ T3656] FAT-fs (loop6): Directory bread(block 164) failed [ 677.949234][ T3658] loop4: detected capacity change from 0 to 512 [ 677.957184][ T3656] FAT-fs (loop6): Directory bread(block 165) failed [ 677.969317][ T3656] FAT-fs (loop6): Directory bread(block 166) failed [ 677.971618][ T3658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.978183][ T3656] FAT-fs (loop6): Directory bread(block 167) failed [ 677.989821][ T3658] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 677.997273][ T3656] FAT-fs (loop6): Directory bread(block 168) failed [ 678.013470][ T3656] FAT-fs (loop6): Directory bread(block 169) failed [ 678.027428][T27956] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.039017][ T3656] FAT-fs (loop6): Directory bread(block 162) failed [ 678.045902][ T3656] FAT-fs (loop6): Directory bread(block 163) failed [ 678.146787][ T3671] openvswitch: netlink: Message has 6 unknown bytes. [ 678.256518][ T3679] loop6: detected capacity change from 0 to 512 [ 678.281704][ T3679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.294649][ T3679] ext4 filesystem being mounted at /462/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 678.337776][ T3686] loop7: detected capacity change from 0 to 128 [ 678.364588][ T3686] FAT-fs (loop7): Directory bread(block 162) failed [ 678.383589][ T3686] FAT-fs (loop7): Directory bread(block 163) failed [ 678.386280][T29539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.390507][ T3686] FAT-fs (loop7): Directory bread(block 164) failed [ 678.406456][ T3686] FAT-fs (loop7): Directory bread(block 165) failed [ 678.413112][ T3686] FAT-fs (loop7): Directory bread(block 166) failed [ 678.421520][ T3686] FAT-fs (loop7): Directory bread(block 167) failed [ 678.428670][ T3686] FAT-fs (loop7): Directory bread(block 168) failed [ 678.435963][ T3686] FAT-fs (loop7): Directory bread(block 169) failed [ 678.445541][ T3686] FAT-fs (loop7): Directory bread(block 162) failed [ 678.452616][ T3686] FAT-fs (loop7): Directory bread(block 163) failed [ 678.464260][ T3686] smc: net device bond0 applied user defined pnetid SYZ0 [ 678.571653][ T3718] openvswitch: netlink: Message has 6 unknown bytes. [ 678.592574][ T3721] loop6: detected capacity change from 0 to 512 [ 678.617744][ T3721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.649043][ T3721] ext4 filesystem being mounted at /468/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 678.680992][T29539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.384681][ T3785] Cannot find del_set index 0 as target [ 679.407375][ T3789] loop4: detected capacity change from 0 to 512 [ 679.445788][ T3789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.474107][ T3789] ext4 filesystem being mounted at /568/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 679.610528][ T3802] SELinux: ebitmap: truncated map [ 679.619411][T27956] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.621505][ T3802] SELinux: failed to load policy [ 679.671665][ T3807] loop4: detected capacity change from 0 to 512 [ 679.681127][ T3807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.697574][ T3807] ext4 filesystem being mounted at /569/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 679.727403][ T3815] pim6reg1: entered promiscuous mode [ 679.732812][ T3815] pim6reg1: entered allmulticast mode [ 679.754487][T27956] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.780907][ T3817] loop4: detected capacity change from 0 to 512 [ 679.792158][ T3817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.815539][ T3820] loop6: detected capacity change from 0 to 512 [ 679.821950][ T3817] ext4 filesystem being mounted at /570/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 679.846140][ T3820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.861825][T27956] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.872670][ T3820] ext4 filesystem being mounted at /473/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 679.895754][ T3829] __nla_validate_parse: 10 callbacks suppressed [ 679.895819][ T3829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11894'. [ 679.911216][ T3829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11894'. [ 679.974213][T29539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.995603][ T3841] loop6: detected capacity change from 0 to 128 [ 680.003227][ T3841] FAT-fs (loop6): Directory bread(block 162) failed [ 680.008633][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11901'. [ 680.010127][ T3841] FAT-fs (loop6): Directory bread(block 163) failed [ 680.018858][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11901'. [ 680.035127][ T3841] FAT-fs (loop6): Directory bread(block 164) failed [ 680.041762][ T3841] FAT-fs (loop6): Directory bread(block 165) failed [ 680.049066][ T3841] FAT-fs (loop6): Directory bread(block 166) failed [ 680.055799][ T3841] FAT-fs (loop6): Directory bread(block 167) failed [ 680.062651][ T3841] FAT-fs (loop6): Directory bread(block 168) failed [ 680.067168][ T3845] loop4: detected capacity change from 0 to 512 [ 680.071578][ T3841] FAT-fs (loop6): Directory bread(block 169) failed [ 680.085963][ T3841] FAT-fs (loop6): Directory bread(block 162) failed [ 680.092880][ T3841] FAT-fs (loop6): Directory bread(block 163) failed [ 680.095545][ T3845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.124320][ T3845] ext4 filesystem being mounted at /576/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 680.156577][T27956] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.255826][ T3867] loop6: detected capacity change from 0 to 512 [ 680.276769][ T3867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.289784][ T3867] ext4 filesystem being mounted at /479/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 680.310792][ T3869] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11908'. [ 680.319869][ T3869] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11908'. [ 680.387984][ T3877] loop7: detected capacity change from 0 to 512 [ 680.397972][T29539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.407340][ T3877] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.420199][ T3877] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 680.437040][ T3881] FAULT_INJECTION: forcing a failure. [ 680.437040][ T3881] name failslab, interval 1, probability 0, space 0, times 0 [ 680.449969][ T3881] CPU: 0 UID: 0 PID: 3881 Comm: syz.3.11916 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 680.450050][ T3881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 680.450066][ T3881] Call Trace: [ 680.450073][ T3881] [ 680.450124][ T3881] dump_stack_lvl+0xf6/0x150 [ 680.450149][ T3881] dump_stack+0x15/0x1a [ 680.450165][ T3881] should_fail_ex+0x261/0x270 [ 680.450191][ T3881] should_failslab+0x8f/0xb0 [ 680.450217][ T3881] kmem_cache_alloc_noprof+0x59/0x340 [ 680.450326][ T3881] ? skb_clone+0x154/0x1f0 [ 680.450390][ T3881] skb_clone+0x154/0x1f0 [ 680.450420][ T3881] pfkey_sendmsg+0x2e9/0x950 [ 680.450464][ T3881] ? selinux_socket_sendmsg+0x18a/0x1c0 [ 680.450509][ T3881] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 680.450593][ T3881] __sock_sendmsg+0x140/0x180 [ 680.450629][ T3881] ____sys_sendmsg+0x350/0x4e0 [ 680.450657][ T3881] __sys_sendmsg+0x1a0/0x240 [ 680.450776][ T3881] __x64_sys_sendmsg+0x46/0x50 [ 680.450807][ T3881] x64_sys_call+0x26f3/0x2e10 [ 680.450835][ T3881] do_syscall_64+0xc9/0x1a0 [ 680.450943][ T3881] ? clear_bhb_loop+0x25/0x80 [ 680.450966][ T3881] ? clear_bhb_loop+0x25/0x80 [ 680.450988][ T3881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.451044][ T3881] RIP: 0033:0x7fd855fde169 [ 680.451060][ T3881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.451078][ T3881] RSP: 002b:00007fd854647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.451098][ T3881] RAX: ffffffffffffffda RBX: 00007fd856205fa0 RCX: 00007fd855fde169 [ 680.451110][ T3881] RDX: 0000000000040080 RSI: 0000200000000640 RDI: 0000000000000005 [ 680.451122][ T3881] RBP: 00007fd854647090 R08: 0000000000000000 R09: 0000000000000000 [ 680.451134][ T3881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.451145][ T3881] R13: 0000000000000000 R14: 00007fd856205fa0 R15: 00007ffe844dcd38 [ 680.451190][ T3881] [ 680.662795][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11915'. [ 680.690811][ T3883] 8021q: adding VLAN 0 to HW filter on device team1 [ 680.706727][ T3242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.795128][ T3898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11923'. [ 680.804180][ T3898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11923'. [ 680.841873][ T3904] loop6: detected capacity change from 0 to 512 [ 680.851839][ T3907] FAULT_INJECTION: forcing a failure. [ 680.851839][ T3907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.865587][ T3907] CPU: 0 UID: 0 PID: 3907 Comm: syz.4.11927 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 680.865620][ T3907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 680.865635][ T3907] Call Trace: [ 680.865641][ T3907] [ 680.865647][ T3907] dump_stack_lvl+0xf6/0x150 [ 680.865673][ T3907] dump_stack+0x15/0x1a [ 680.865694][ T3907] should_fail_ex+0x261/0x270 [ 680.865734][ T3907] should_fail+0xb/0x10 [ 680.865759][ T3907] should_fail_usercopy+0x1a/0x20 [ 680.865789][ T3907] _copy_to_user+0x20/0xa0 [ 680.865824][ T3907] simple_read_from_buffer+0xb2/0x130 [ 680.865883][ T3907] proc_fail_nth_read+0x103/0x140 [ 680.865924][ T3907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 680.865960][ T3907] vfs_read+0x1b2/0x710 [ 680.866015][ T3907] ? __rcu_read_unlock+0x4e/0x70 [ 680.866041][ T3907] ? __fget_files+0x186/0x1c0 [ 680.866069][ T3907] ksys_read+0xeb/0x1b0 [ 680.866092][ T3907] __x64_sys_read+0x42/0x50 [ 680.866110][ T3907] x64_sys_call+0x2a3b/0x2e10 [ 680.866168][ T3907] do_syscall_64+0xc9/0x1a0 [ 680.866193][ T3907] ? clear_bhb_loop+0x25/0x80 [ 680.866220][ T3907] ? clear_bhb_loop+0x25/0x80 [ 680.866241][ T3907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.866332][ T3907] RIP: 0033:0x7fa92d01cb7c [ 680.866349][ T3907] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 680.866432][ T3907] RSP: 002b:00007fa92b687030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 680.866453][ T3907] RAX: ffffffffffffffda RBX: 00007fa92d245fa0 RCX: 00007fa92d01cb7c [ 680.866467][ T3907] RDX: 000000000000000f RSI: 00007fa92b6870a0 RDI: 0000000000000004 [ 680.866480][ T3907] RBP: 00007fa92b687090 R08: 0000000000000000 R09: 0000000000000000 [ 680.866571][ T3907] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 680.866587][ T3907] R13: 0000000000000000 R14: 00007fa92d245fa0 R15: 00007fff5412fbb8 [ 680.866610][ T3907] [ 680.868131][ T3904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.010213][ T3917] loop4: detected capacity change from 0 to 128 [ 681.018918][ T3904] ext4 filesystem being mounted at /482/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 681.041286][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 681.041341][ T29] audit: type=1400 audit(2000000009.570:51060): avc: denied { ioctl } for pid=3913 comm="syz.3.11930" path="socket:[118146]" dev="sockfs" ino=118146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 681.069380][ T3917] FAT-fs (loop4): Directory bread(block 162) failed [ 681.072813][ T29] audit: type=1326 audit(2000000009.590:51061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.6.11926" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc77ce5e169 code=0x0 [ 681.084205][ T3917] FAT-fs (loop4): Directory bread(block 163) failed [ 681.133356][ T3917] FAT-fs (loop4): Directory bread(block 164) failed [ 681.139822][ T29] audit: type=1326 audit(2000000009.670:51062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3903 comm="syz.6.11926" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fc77ce5e169 code=0x0 [ 681.165710][ T3917] FAT-fs (loop4): Directory bread(block 165) failed [ 681.207204][ T3917] FAT-fs (loop4): Directory bread(block 166) failed [ 681.214712][ T3917] FAT-fs (loop4): Directory bread(block 167) failed [ 681.221600][ T3917] FAT-fs (loop4): Directory bread(block 168) failed [ 681.229098][ T3917] FAT-fs (loop4): Directory bread(block 169) failed [ 681.237479][T29539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.264427][ T3917] FAT-fs (loop4): Directory bread(block 162) failed [ 681.279922][ T3917] FAT-fs (loop4): Directory bread(block 163) failed [ 681.356279][ T3940] netlink: 64 bytes leftover after parsing attributes in process `syz.7.11940'. [ 681.392088][ T3944] openvswitch: netlink: Message has 6 unknown bytes. [ 681.454861][ T29] audit: type=1400 audit(2000000009.980:51063): avc: denied { create } for pid=3945 comm="syz.4.11943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 681.480591][ T3954] openvswitch: netlink: Message has 6 unknown bytes. [ 681.674804][ T3972] pim6reg1: entered promiscuous mode [ 681.680309][ T3972] pim6reg1: entered allmulticast mode [ 681.744498][ T3978] binfmt_misc: register: failed to install interpreter file ./file2 [ 681.918262][ T4003] smc: net device bond0 erased user defined pnetid SYZ0 [ 681.954346][ T4007] loop7: detected capacity change from 0 to 128 [ 681.961901][ T4007] FAT-fs (loop7): Directory bread(block 162) failed [ 681.969777][ T4007] FAT-fs (loop7): Directory bread(block 163) failed [ 681.976822][ T4007] FAT-fs (loop7): Directory bread(block 164) failed [ 681.983580][ T4007] FAT-fs (loop7): Directory bread(block 165) failed [ 681.991311][ T4007] FAT-fs (loop7): Directory bread(block 166) failed [ 681.998185][ T4007] FAT-fs (loop7): Directory bread(block 167) failed [ 682.006405][ T4007] FAT-fs (loop7): Directory bread(block 168) failed [ 682.013351][ T4007] FAT-fs (loop7): Directory bread(block 169) failed [ 682.023746][ T4007] FAT-fs (loop7): Directory bread(block 162) failed [ 682.028010][ T4009] pim6reg1: entered promiscuous mode [ 682.032628][ T4007] FAT-fs (loop7): Directory bread(block 163) failed [ 682.036006][ T4009] pim6reg1: entered allmulticast mode [ 682.043394][ T4007] bio_check_eod: 16 callbacks suppressed [ 682.043412][ T4007] syz.7.11966: attempt to access beyond end of device [ 682.043412][ T4007] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 682.068089][ T4007] syz.7.11966: attempt to access beyond end of device [ 682.068089][ T4007] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 682.089556][ T4007] smc: net device bond0 applied user defined pnetid SYZ0 [ 682.097215][ T4007] smc: net device bond0 erased user defined pnetid SYZ0 [ 682.110594][ T4007] syz.7.11966: attempt to access beyond end of device [ 682.110594][ T4007] loop7: rw=3, sector=234, nr_sectors = 6 limit=128 [ 682.124249][ T4007] syz.7.11966: attempt to access beyond end of device [ 682.124249][ T4007] loop7: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 682.290033][ T4034] smc: net device bond0 applied user defined pnetid SYZ0 [ 682.316217][ T4034] smc: net device bond0 erased user defined pnetid SYZ0 [ 682.340676][ T4043] netlink: 'syz.6.11978': attribute type 1 has an invalid length. [ 682.348750][ T4043] netlink: 'syz.6.11978': attribute type 1 has an invalid length. [ 682.384945][ T29] audit: type=1400 audit(2000000010.920:51064): avc: denied { create } for pid=4048 comm="syz.1.11981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 682.437797][ T29] audit: type=1400 audit(2000000010.920:51065): avc: denied { connect } for pid=4048 comm="syz.1.11981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 682.457928][ T29] audit: type=1400 audit(2000000010.920:51066): avc: denied { write } for pid=4048 comm="syz.1.11981" path="socket:[119430]" dev="sockfs" ino=119430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 682.481966][ T29] audit: type=1400 audit(2000000010.960:51067): avc: denied { watch watch_reads } for pid=4033 comm="syz.6.11978" path="/486" dev="tmpfs" ino=2589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 682.556746][ T4065] FAULT_INJECTION: forcing a failure. [ 682.556746][ T4065] name failslab, interval 1, probability 0, space 0, times 0 [ 682.569711][ T4065] CPU: 1 UID: 0 PID: 4065 Comm: syz.6.11987 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 682.569797][ T4065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 682.569810][ T4065] Call Trace: [ 682.569815][ T4065] [ 682.569823][ T4065] dump_stack_lvl+0xf6/0x150 [ 682.569848][ T4065] dump_stack+0x15/0x1a [ 682.569864][ T4065] should_fail_ex+0x261/0x270 [ 682.569918][ T4065] should_failslab+0x8f/0xb0 [ 682.569940][ T4065] kmem_cache_alloc_noprof+0x59/0x340 [ 682.569969][ T4065] ? skb_clone+0x154/0x1f0 [ 682.569994][ T4065] skb_clone+0x154/0x1f0 [ 682.570061][ T4065] pfkey_sendmsg+0x2e9/0x950 [ 682.570098][ T4065] ? selinux_socket_sendmsg+0x18a/0x1c0 [ 682.570132][ T4065] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 682.570187][ T4065] __sock_sendmsg+0x140/0x180 [ 682.570218][ T4065] ____sys_sendmsg+0x350/0x4e0 [ 682.570324][ T4065] __sys_sendmsg+0x1a0/0x240 [ 682.570362][ T4065] __x64_sys_sendmsg+0x46/0x50 [ 682.570386][ T4065] x64_sys_call+0x26f3/0x2e10 [ 682.570433][ T4065] do_syscall_64+0xc9/0x1a0 [ 682.570459][ T4065] ? clear_bhb_loop+0x25/0x80 [ 682.570548][ T4065] ? clear_bhb_loop+0x25/0x80 [ 682.570569][ T4065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.570590][ T4065] RIP: 0033:0x7fc77ce5e169 [ 682.570605][ T4065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.570672][ T4065] RSP: 002b:00007fc77b4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.570691][ T4065] RAX: ffffffffffffffda RBX: 00007fc77d085fa0 RCX: 00007fc77ce5e169 [ 682.570703][ T4065] RDX: 0000000000040080 RSI: 0000200000000640 RDI: 0000000000000005 [ 682.570715][ T4065] RBP: 00007fc77b4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 682.570727][ T4065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.570777][ T4065] R13: 0000000000000000 R14: 00007fc77d085fa0 R15: 00007fff91d2f2e8 [ 682.570796][ T4065] [ 682.746421][ T4077] openvswitch: netlink: Message has 6 unknown bytes. [ 682.815126][ T29] audit: type=1326 audit(2000000011.330:51068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.7.11993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181fafe169 code=0x7ffc0000 [ 682.839342][ T29] audit: type=1326 audit(2000000011.330:51069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4079 comm="syz.7.11993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181fafe169 code=0x7ffc0000 [ 682.879626][ T4085] 8021q: adding VLAN 0 to HW filter on device team1 [ 682.887202][ T4080] loop7: detected capacity change from 0 to 4096 [ 682.911995][ T4080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.009025][ T3242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.021322][ T4102] netlink: 'syz.3.11998': attribute type 1 has an invalid length. [ 683.029247][ T4102] netlink: 'syz.3.11998': attribute type 1 has an invalid length. [ 683.081122][ T4112] loop6: detected capacity change from 0 to 512 [ 683.096331][ T4112] EXT4-fs (loop6): too many log groups per flexible block group [ 683.104970][ T4112] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 683.116052][ T4112] EXT4-fs (loop6): mount failed [ 683.239055][ T4132] loop4: detected capacity change from 0 to 512 [ 683.248393][ T4132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.261109][ T4132] ext4 filesystem being mounted at /597/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 683.292557][T27956] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.366332][ T4151] loop4: detected capacity change from 0 to 512 [ 683.386541][ T4151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.401698][ T4151] ext4 filesystem being mounted at /599/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 683.413630][ T4156] loop7: detected capacity change from 0 to 128 [ 683.427221][ T4156] FAT-fs (loop7): Directory bread(block 162) failed [ 683.435325][ T4156] FAT-fs (loop7): Directory bread(block 163) failed [ 683.442095][ T4156] FAT-fs (loop7): Directory bread(block 164) failed [ 683.443170][T27956] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.449548][ T4156] FAT-fs (loop7): Directory bread(block 165) failed [ 683.466487][ T4156] FAT-fs (loop7): Directory bread(block 166) failed [ 683.473690][ T4156] FAT-fs (loop7): Directory bread(block 167) failed [ 683.480472][ T4156] FAT-fs (loop7): Directory bread(block 168) failed [ 683.490882][ T4156] FAT-fs (loop7): Directory bread(block 169) failed [ 683.501674][ T4156] FAT-fs (loop7): Directory bread(block 162) failed [ 683.508954][ T4156] FAT-fs (loop7): Directory bread(block 163) failed [ 683.517420][ T4156] syz.7.12020: attempt to access beyond end of device [ 683.517420][ T4156] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 683.567936][ T4156] syz.7.12020: attempt to access beyond end of device [ 683.567936][ T4156] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 683.657993][ T4175] netlink: 'syz.6.12024': attribute type 1 has an invalid length. [ 683.666005][ T4175] netlink: 'syz.6.12024': attribute type 1 has an invalid length. [ 683.737878][ T2255] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.816823][ T2255] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.869819][ T2255] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.911603][ T4204] loop6: detected capacity change from 0 to 128 [ 683.926870][ T4204] FAT-fs (loop6): Directory bread(block 162) failed [ 683.939318][ T4204] FAT-fs (loop6): Directory bread(block 163) failed [ 683.955354][ T4204] FAT-fs (loop6): Directory bread(block 164) failed [ 683.965725][ T4204] FAT-fs (loop6): Directory bread(block 165) failed [ 683.972433][ T4204] FAT-fs (loop6): Directory bread(block 166) failed [ 683.973360][ T2255] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.979352][ T4204] FAT-fs (loop6): Directory bread(block 167) failed [ 683.996765][ T4204] FAT-fs (loop6): Directory bread(block 168) failed [ 684.007284][ T4204] FAT-fs (loop6): Directory bread(block 169) failed [ 684.023866][ T4204] FAT-fs (loop6): Directory bread(block 162) failed [ 684.047783][ T4210] loop7: detected capacity change from 0 to 512 [ 684.058484][ T4204] FAT-fs (loop6): Directory bread(block 163) failed [ 684.067634][ T4204] syz.6.12036: attempt to access beyond end of device [ 684.067634][ T4204] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 684.081181][ T4204] syz.6.12036: attempt to access beyond end of device [ 684.081181][ T4204] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 684.122410][ T4210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.175314][ T4210] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 684.193558][ T4223] netlink: 'syz.3.12040': attribute type 1 has an invalid length. [ 684.201530][ T4223] netlink: 'syz.3.12040': attribute type 1 has an invalid length. [ 684.249494][ T4224] openvswitch: netlink: Message has 6 unknown bytes. [ 684.288012][ T2255] $Hÿ (unregistering): Released all slaves [ 684.299787][ T3242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.325355][ T4162] chnl_net:caif_netlink_parms(): no params data found [ 684.356287][ T4235] SET target dimension over the limit! [ 684.362535][ T2255] tipc: Disabling bearer [ 684.367983][ T2255] tipc: Left network mode [ 684.372873][ T4236] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 684.442308][ T4162] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.449747][ T4162] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.465418][ T4162] bridge_slave_0: entered allmulticast mode [ 684.472433][ T4162] bridge_slave_0: entered promiscuous mode [ 684.487361][ T2255] hsr_slave_0: left promiscuous mode [ 684.493629][ T2255] hsr_slave_1: left promiscuous mode [ 684.502740][ T2255] veth1_macvtap: left promiscuous mode [ 684.508973][ T2255] veth0_macvtap: left promiscuous mode [ 684.515019][ T2255] veth1_vlan: left promiscuous mode [ 684.520295][ T2255] veth0_vlan: left promiscuous mode [ 684.585934][T22557] smc: removing ib device syz! [ 684.592071][T22555] smc: removing ib device syz2 [ 684.618243][ T4162] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.625501][ T4162] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.633523][ T4162] bridge_slave_1: entered allmulticast mode [ 684.640545][ T4162] bridge_slave_1: entered promiscuous mode [ 684.673347][ T4162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.685331][ T4162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.725540][ T4253] sg_write: data in/out 205824/1 bytes for SCSI command 0xf2-- guessing data in; [ 684.725540][ T4253] program syz.6.12061 not setting count and/or reply_len properly [ 684.768657][ T4162] team0: Port device team_slave_0 added [ 684.779310][ T4162] team0: Port device team_slave_1 added [ 684.788251][ T4255] syz.7.12053: attempt to access beyond end of device [ 684.788251][ T4255] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 684.830521][ T4257] loop6: detected capacity change from 0 to 512 [ 684.844596][ T4257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.877209][ T4162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.884424][ T4162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.910650][ T4162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.910727][ T4257] ext4 filesystem being mounted at /512/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 684.933111][ T4162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.940294][ T4162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.967025][ T4162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.027487][ T4261] loop7: detected capacity change from 0 to 128 [ 685.056702][ T4261] FAT-fs (loop7): Directory bread(block 162) failed [ 685.069223][ T4162] hsr_slave_0: entered promiscuous mode [ 685.079637][ T4261] FAT-fs (loop7): Directory bread(block 163) failed [ 685.092998][ T4261] FAT-fs (loop7): Directory bread(block 164) failed [ 685.105040][ T4261] FAT-fs (loop7): Directory bread(block 165) failed [ 685.108790][ T4162] hsr_slave_1: entered promiscuous mode [ 685.119951][ T4261] FAT-fs (loop7): Directory bread(block 166) failed [ 685.127101][ T4261] FAT-fs (loop7): Directory bread(block 167) failed [ 685.135103][ T4261] FAT-fs (loop7): Directory bread(block 168) failed [ 685.139224][T29539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.141818][ T4261] FAT-fs (loop7): Directory bread(block 169) failed [ 685.158415][ T4162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.168716][ T4261] FAT-fs (loop7): Directory bread(block 162) failed [ 685.175698][ T4162] Cannot create hsr debugfs directory [ 685.182284][ T4261] FAT-fs (loop7): Directory bread(block 163) failed [ 685.191034][ T4261] syz.7.12055: attempt to access beyond end of device [ 685.191034][ T4261] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 685.229264][ T4261] smc: net device bond0 applied user defined pnetid SYZ0 [ 685.336285][ T4270] loop6: detected capacity change from 0 to 512 [ 685.395364][ T4283] __nla_validate_parse: 8 callbacks suppressed [ 685.395380][ T4283] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12066'. [ 685.468917][ T4283] 8021q: adding VLAN 0 to HW filter on device team1 [ 685.556453][ T4288] netlink: 'syz.3.12062': attribute type 1 has an invalid length. [ 685.577194][ T4288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12062'. [ 685.877807][ T4300] loop7: detected capacity change from 0 to 512 [ 685.909016][ T4162] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 685.919082][ T4300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.933115][ T4162] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 685.942827][ T4300] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 685.956411][ T4304] loop6: detected capacity change from 0 to 128 [ 685.964825][ T4304] FAT-fs (loop6): Directory bread(block 162) failed [ 685.968912][ T4162] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 685.971610][ T4304] FAT-fs (loop6): Directory bread(block 163) failed [ 685.986935][ T4304] FAT-fs (loop6): Directory bread(block 164) failed [ 685.993585][ T4304] FAT-fs (loop6): Directory bread(block 165) failed [ 686.001791][ T4304] FAT-fs (loop6): Directory bread(block 166) failed [ 686.006512][ T4162] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 686.012793][ T4304] FAT-fs (loop6): Directory bread(block 167) failed [ 686.022174][ T4304] FAT-fs (loop6): Directory bread(block 168) failed [ 686.030394][ T4304] FAT-fs (loop6): Directory bread(block 169) failed [ 686.041733][ T3242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.051487][ T4304] FAT-fs (loop6): Directory bread(block 162) failed [ 686.059423][ T4304] FAT-fs (loop6): Directory bread(block 163) failed [ 686.071290][ T4309] openvswitch: netlink: Message has 6 unknown bytes. [ 686.093797][ T4162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.118595][ T4162] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.131406][ T2255] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.138522][ T2255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.149847][ T2255] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.157100][ T2255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.168131][ T4317] loop7: detected capacity change from 0 to 128 [ 686.176092][ T4317] FAT-fs (loop7): Directory bread(block 162) failed [ 686.182846][ T4317] FAT-fs (loop7): Directory bread(block 163) failed [ 686.191040][ T4317] FAT-fs (loop7): Directory bread(block 164) failed [ 686.198143][ T4317] FAT-fs (loop7): Directory bread(block 165) failed [ 686.206788][ T4317] FAT-fs (loop7): Directory bread(block 166) failed [ 686.213479][ T4317] FAT-fs (loop7): Directory bread(block 167) failed [ 686.220781][ T4317] FAT-fs (loop7): Directory bread(block 168) failed [ 686.245342][ T4162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.256708][ T4317] FAT-fs (loop7): Directory bread(block 169) failed [ 686.275554][ T4317] FAT-fs (loop7): Directory bread(block 162) failed [ 686.282362][ T4317] FAT-fs (loop7): Directory bread(block 163) failed [ 686.296829][ T4317] smc: net device bond0 erased user defined pnetid SYZ0 [ 686.317288][ T4162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.341822][ T4331] netlink: 'syz.6.12081': attribute type 1 has an invalid length. [ 686.491095][ T4350] loop6: detected capacity change from 0 to 128 [ 686.507143][ T4350] FAT-fs (loop6): Directory bread(block 162) failed [ 686.516784][ T4350] FAT-fs (loop6): Directory bread(block 163) failed [ 686.525686][ T4350] FAT-fs (loop6): Directory bread(block 164) failed [ 686.534115][ T4350] FAT-fs (loop6): Directory bread(block 165) failed [ 686.546962][ T4350] FAT-fs (loop6): Directory bread(block 166) failed [ 686.553507][ T4162] veth0_vlan: entered promiscuous mode [ 686.559312][ T4350] FAT-fs (loop6): Directory bread(block 167) failed [ 686.576145][ T4350] FAT-fs (loop6): Directory bread(block 168) failed [ 686.587892][ T4350] FAT-fs (loop6): Directory bread(block 169) failed [ 686.605812][ T4162] veth1_vlan: entered promiscuous mode [ 686.609202][ T4350] FAT-fs (loop6): Directory bread(block 162) failed [ 686.638684][ T4350] FAT-fs (loop6): Directory bread(block 163) failed [ 686.639020][ T4162] veth0_macvtap: entered promiscuous mode [ 686.666553][ T4350] smc: net device bond0 applied user defined pnetid SYZ0 [ 686.667053][ T4162] veth1_macvtap: entered promiscuous mode [ 686.710162][ T4162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.720942][ T4162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.730902][ T4162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.741468][ T4162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.751503][ T4162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.762084][ T4162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.773375][ T4162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.784584][ T4365] netlink: 188 bytes leftover after parsing attributes in process `syz.6.12090'. [ 686.797879][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 686.797969][ T29] audit: type=1400 audit(2000000015.330:51143): avc: denied { read } for pid=4364 comm="syz.6.12090" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 686.804902][ T4162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.828146][ T29] audit: type=1400 audit(2000000015.360:51144): avc: denied { ioctl } for pid=4364 comm="syz.6.12090" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 686.837927][ T4162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.837949][ T4162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.837993][ T4162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.886255][ T4162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.913127][ T4162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.922076][ T4162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.930917][ T4162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.939862][ T4162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.966009][ T4371] smc: net device bond0 erased user defined pnetid SYZ0 [ 687.014776][ T4378] loop7: detected capacity change from 0 to 512 [ 687.053670][ T4378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.094337][ T4378] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 687.207961][ T4408] loop4: detected capacity change from 0 to 128 [ 687.216321][ T3242] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.216881][ T4408] FAT-fs (loop4): Directory bread(block 162) failed [ 687.233086][ T4408] FAT-fs (loop4): Directory bread(block 163) failed [ 687.240267][ T4408] FAT-fs (loop4): Directory bread(block 164) failed [ 687.247877][ T4408] FAT-fs (loop4): Directory bread(block 165) failed [ 687.256589][ T4408] FAT-fs (loop4): Directory bread(block 166) failed [ 687.263412][ T4408] FAT-fs (loop4): Directory bread(block 167) failed [ 687.270324][ T4408] FAT-fs (loop4): Directory bread(block 168) failed [ 687.284589][ T4408] FAT-fs (loop4): Directory bread(block 169) failed [ 687.305975][ T4408] FAT-fs (loop4): Directory bread(block 162) failed [ 687.312727][ T4408] FAT-fs (loop4): Directory bread(block 163) failed [ 687.328215][ T4408] bio_check_eod: 15 callbacks suppressed [ 687.328235][ T4408] syz.4.12099: attempt to access beyond end of device [ 687.328235][ T4408] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 687.349915][ T4418] loop7: detected capacity change from 0 to 128 [ 687.356616][ T4408] syz.4.12099: attempt to access beyond end of device [ 687.356616][ T4408] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 687.373819][ T4418] FAT-fs (loop7): Directory bread(block 162) failed [ 687.381307][ T4418] FAT-fs (loop7): Directory bread(block 163) failed [ 687.390251][ T4408] smc: net device bond0 applied user defined pnetid SYZ0 [ 687.399779][ T4408] syz.4.12099: attempt to access beyond end of device [ 687.399779][ T4408] loop4: rw=3, sector=234, nr_sectors = 6 limit=128 [ 687.404086][ T4418] FAT-fs (loop7): Directory bread(block 164) failed [ 687.415994][ T4408] syz.4.12099: attempt to access beyond end of device [ 687.415994][ T4408] loop4: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 687.421435][ T4418] FAT-fs (loop7): Directory bread(block 165) failed [ 687.442308][ T4418] FAT-fs (loop7): Directory bread(block 166) failed [ 687.450987][ T4418] FAT-fs (loop7): Directory bread(block 167) failed [ 687.458922][ T4418] FAT-fs (loop7): Directory bread(block 168) failed [ 687.481474][ T4425] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 687.499666][ T4418] FAT-fs (loop7): Directory bread(block 169) failed [ 687.505660][ T4427] pim6reg1: entered promiscuous mode [ 687.512154][ T4427] pim6reg1: entered allmulticast mode [ 687.523383][ T4418] FAT-fs (loop7): Directory bread(block 162) failed [ 687.532088][ T4418] FAT-fs (loop7): Directory bread(block 163) failed [ 687.539413][ T4418] syz.7.12103: attempt to access beyond end of device [ 687.539413][ T4418] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 687.552837][ T4418] syz.7.12103: attempt to access beyond end of device [ 687.552837][ T4418] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 687.570018][ T29] audit: type=1326 audit(2000000016.100:51145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4428 comm="syz.4.12108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd2fe169 code=0x0 [ 687.660431][ T4440] loop4: detected capacity change from 0 to 512 [ 687.675532][ T4440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.689257][ T4440] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 687.718238][ T4448] vxcan1 speed is unknown, defaulting to 1000 [ 687.725306][ T4448] vxcan1 speed is unknown, defaulting to 1000 [ 687.731892][ T4448] vxcan1 speed is unknown, defaulting to 1000 [ 687.736015][ T4162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.767356][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12114'. [ 687.778266][ T4448] infiniband syz2: set active [ 687.783109][ T4448] infiniband syz2: added vxcan1 [ 687.788666][ T3382] vxcan1 speed is unknown, defaulting to 1000 [ 687.808506][ T4448] RDS/IB: syz2: added [ 687.813635][ T4446] 8021q: adding VLAN 0 to HW filter on device team1 [ 687.820874][ T4448] smc: adding ib device syz2 with port count 1 [ 687.828909][ T4448] smc: ib device syz2 port 1 has pnetid [ 687.835444][ T3382] vxcan1 speed is unknown, defaulting to 1000 [ 687.842233][ T4448] vxcan1 speed is unknown, defaulting to 1000 [ 687.877260][ T4448] vxcan1 speed is unknown, defaulting to 1000 [ 687.912487][ T4448] vxcan1 speed is unknown, defaulting to 1000 [ 687.917286][ T4461] openvswitch: netlink: Message has 6 unknown bytes. [ 687.948157][ T4448] vxcan1 speed is unknown, defaulting to 1000 [ 688.001946][ T4448] vxcan1 speed is unknown, defaulting to 1000 [ 688.045035][ T4448] vxcan1 speed is unknown, defaulting to 1000 [ 688.089532][ T4448] vxcan1 speed is unknown, defaulting to 1000 [ 688.118664][ T4477] validate_nla: 5 callbacks suppressed [ 688.118684][ T4477] netlink: 'syz.1.12124': attribute type 13 has an invalid length. [ 688.180006][ T4482] netlink: 976 bytes leftover after parsing attributes in process `syz.1.12124'. [ 688.205817][ T4477] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 688.228518][ T4477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 688.441330][ T4505] pim6reg1: entered promiscuous mode [ 688.447150][ T4505] pim6reg1: entered allmulticast mode [ 688.500400][ T4511] loop6: detected capacity change from 0 to 128 [ 688.509306][ T4511] FAT-fs (loop6): Directory bread(block 162) failed [ 688.516279][ T4511] FAT-fs (loop6): Directory bread(block 163) failed [ 688.523260][ T4511] FAT-fs (loop6): Directory bread(block 164) failed [ 688.530670][ T4511] FAT-fs (loop6): Directory bread(block 165) failed [ 688.538299][ T4511] FAT-fs (loop6): Directory bread(block 166) failed [ 688.545413][ T4511] FAT-fs (loop6): Directory bread(block 167) failed [ 688.552619][ T4511] FAT-fs (loop6): Directory bread(block 168) failed [ 688.559628][ T4511] FAT-fs (loop6): Directory bread(block 169) failed [ 688.573157][ T4511] FAT-fs (loop6): Directory bread(block 162) failed [ 688.581097][ T4511] FAT-fs (loop6): Directory bread(block 163) failed [ 688.595236][ T4511] syz.6.12138: attempt to access beyond end of device [ 688.595236][ T4511] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 688.610064][ T4511] syz.6.12138: attempt to access beyond end of device [ 688.610064][ T4511] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 688.637311][ T4516] syz.6.12138: attempt to access beyond end of device [ 688.637311][ T4516] loop6: rw=3, sector=234, nr_sectors = 6 limit=128 [ 688.651602][ T4516] syz.6.12138: attempt to access beyond end of device [ 688.651602][ T4516] loop6: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 688.674744][ T4518] SET target dimension over the limit! [ 688.701370][ T4522] loop4: detected capacity change from 0 to 512 [ 688.714700][ T4522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.715662][ T4524] loop6: detected capacity change from 0 to 128 [ 688.733718][ T4522] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 688.738105][ T4524] FAT-fs (loop6): Directory bread(block 162) failed [ 688.751125][ T4524] FAT-fs (loop6): Directory bread(block 163) failed [ 688.758503][ T4524] FAT-fs (loop6): Directory bread(block 164) failed [ 688.765412][ T4524] FAT-fs (loop6): Directory bread(block 165) failed [ 688.773096][ T4524] FAT-fs (loop6): Directory bread(block 166) failed [ 688.779982][ T4524] FAT-fs (loop6): Directory bread(block 167) failed [ 688.787066][ T4524] FAT-fs (loop6): Directory bread(block 168) failed [ 688.795276][ T4524] FAT-fs (loop6): Directory bread(block 169) failed [ 688.804482][ T4162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.820350][ T4524] FAT-fs (loop6): Directory bread(block 162) failed [ 688.827249][ T4524] FAT-fs (loop6): Directory bread(block 163) failed [ 688.828204][ T4534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12148'. [ 688.845690][ T4534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12148'. [ 688.988992][ T4552] loop4: detected capacity change from 0 to 128 [ 688.989421][ T4553] netlink: 'syz.3.12151': attribute type 1 has an invalid length. [ 689.003523][ T4553] netlink: 'syz.3.12151': attribute type 1 has an invalid length. [ 689.012513][ T4552] FAT-fs (loop4): Directory bread(block 162) failed [ 689.029225][ T4552] FAT-fs (loop4): Directory bread(block 163) failed [ 689.034550][ T4554] netlink: 'syz.6.12153': attribute type 1 has an invalid length. [ 689.043844][ T4554] netlink: 'syz.6.12153': attribute type 1 has an invalid length. [ 689.054684][ T4552] FAT-fs (loop4): Directory bread(block 164) failed [ 689.061713][ T4552] FAT-fs (loop4): Directory bread(block 165) failed [ 689.084755][ T4552] FAT-fs (loop4): Directory bread(block 166) failed [ 689.091531][ T4552] FAT-fs (loop4): Directory bread(block 167) failed [ 689.102805][ T4552] FAT-fs (loop4): Directory bread(block 168) failed [ 689.112133][ T4552] FAT-fs (loop4): Directory bread(block 169) failed [ 689.120875][ T4552] FAT-fs (loop4): Directory bread(block 162) failed [ 689.128730][ T4552] FAT-fs (loop4): Directory bread(block 163) failed [ 689.277509][ T4575] loop7: detected capacity change from 0 to 128 [ 689.285848][ T4575] FAT-fs (loop7): Directory bread(block 162) failed [ 689.292658][ T4575] FAT-fs (loop7): Directory bread(block 163) failed [ 689.300241][ T4575] FAT-fs (loop7): Directory bread(block 164) failed [ 689.307356][ T4575] FAT-fs (loop7): Directory bread(block 165) failed [ 689.315500][ T4575] FAT-fs (loop7): Directory bread(block 166) failed [ 689.322471][ T4575] FAT-fs (loop7): Directory bread(block 167) failed [ 689.329766][ T4575] FAT-fs (loop7): Directory bread(block 168) failed [ 689.346573][ T4579] pim6reg1: entered promiscuous mode [ 689.351958][ T4579] pim6reg1: entered allmulticast mode [ 689.369876][ T4575] FAT-fs (loop7): Directory bread(block 169) failed [ 689.380886][ T4584] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12166'. [ 689.397533][ T4575] FAT-fs (loop7): Directory bread(block 162) failed [ 689.416995][ T4575] FAT-fs (loop7): Directory bread(block 163) failed [ 689.427081][ T4575] smc: net device bond0 erased user defined pnetid SYZ0 [ 689.494128][T22557] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.528794][ T4580] vxcan1 speed is unknown, defaulting to 1000 [ 689.557601][T22557] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.640025][T22557] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.710114][T22557] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.747560][ T4632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12175'. [ 689.762808][ T4634] loop6: detected capacity change from 0 to 512 [ 689.772031][ T4632] 8021q: adding VLAN 0 to HW filter on device team2 [ 689.773316][ T4634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.793278][ T4634] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 689.796824][ T4580] chnl_net:caif_netlink_parms(): no params data found [ 689.844974][ T29] audit: type=1326 audit(2000000018.370:51146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.12177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 689.869429][ T29] audit: type=1326 audit(2000000018.370:51147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.12177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 689.879337][ T4639] loop7: detected capacity change from 0 to 128 [ 689.893530][ T29] audit: type=1326 audit(2000000018.370:51148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.12177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 689.923747][ T29] audit: type=1326 audit(2000000018.370:51149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.12177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 689.947516][ T29] audit: type=1326 audit(2000000018.370:51150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.12177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 689.971836][ T29] audit: type=1326 audit(2000000018.370:51151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.12177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 689.982550][ T4639] FAT-fs (loop7): Directory bread(block 162) failed [ 689.995624][ T29] audit: type=1326 audit(2000000018.370:51152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4636 comm="syz.4.12177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 690.030760][ T4639] FAT-fs (loop7): Directory bread(block 163) failed [ 690.038058][ T4639] FAT-fs (loop7): Directory bread(block 164) failed [ 690.046368][ T4639] FAT-fs (loop7): Directory bread(block 165) failed [ 690.054076][ T4639] FAT-fs (loop7): Directory bread(block 166) failed [ 690.061121][ T4639] FAT-fs (loop7): Directory bread(block 167) failed [ 690.070701][T22557] veth0_to_bond: left allmulticast mode [ 690.076610][T22557] veth0_to_bond: left promiscuous mode [ 690.082408][T22557] bridge0: port 4(veth0_to_bond) entered disabled state [ 690.092149][ T4639] FAT-fs (loop7): Directory bread(block 168) failed [ 690.099281][ T4639] FAT-fs (loop7): Directory bread(block 169) failed [ 690.099843][T29539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.112023][ T4639] FAT-fs (loop7): Directory bread(block 162) failed [ 690.122235][ T4639] FAT-fs (loop7): Directory bread(block 163) failed [ 690.130405][T22557] team0: left allmulticast mode [ 690.135336][T22557] team_slave_0: left allmulticast mode [ 690.140833][T22557] team_slave_1: left allmulticast mode [ 690.147079][T22557] bridge0: port 3(team0) entered disabled state [ 690.160145][T22557] bridge_slave_1: left allmulticast mode [ 690.165898][T22557] bridge_slave_1: left promiscuous mode [ 690.171721][T22557] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.172210][ T4647] loop4: detected capacity change from 0 to 512 [ 690.187590][T22557] bridge_slave_0: left allmulticast mode [ 690.188033][ T4647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.193893][T22557] bridge_slave_0: left promiscuous mode [ 690.209452][ T4647] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 690.212210][T22557] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.241771][ T4162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.294245][ T4661] loop4: detected capacity change from 0 to 512 [ 690.317819][ T4661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.331152][ T4661] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 690.369492][T22557] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.381273][T22557] bond_slave_0: left promiscuous mode [ 690.386781][T22557] bond_slave_0: left allmulticast mode [ 690.395362][T22557] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.406023][T22557] bond_slave_1: left promiscuous mode [ 690.411686][T22557] bond_slave_1: left allmulticast mode [ 690.418037][ T4162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.418266][T22557] $Hÿ (unregistering): Released all slaves [ 690.438443][T22557] bond0 (unregistering): Released all slaves [ 690.448641][T22557] bond1 (unregistering): Released all slaves [ 690.449450][ T4665] loop4: detected capacity change from 0 to 128 [ 690.462188][ T4665] FAT-fs (loop4): Directory bread(block 162) failed [ 690.470185][ T4665] FAT-fs (loop4): Directory bread(block 163) failed [ 690.477023][ T4665] FAT-fs (loop4): Directory bread(block 164) failed [ 690.483673][ T4665] FAT-fs (loop4): Directory bread(block 165) failed [ 690.491009][ T4665] FAT-fs (loop4): Directory bread(block 166) failed [ 690.497935][ T4665] FAT-fs (loop4): Directory bread(block 167) failed [ 690.499371][ T4639] smc: net device bond0 applied user defined pnetid SYZ0 [ 690.504836][ T4665] FAT-fs (loop4): Directory bread(block 168) failed [ 690.512078][ T4651] smc: net device bond0 erased user defined pnetid SYZ0 [ 690.519001][ T4665] FAT-fs (loop4): Directory bread(block 169) failed [ 690.539434][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.544771][ T4665] FAT-fs (loop4): Directory bread(block 162) failed [ 690.546879][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.553521][ T4665] FAT-fs (loop4): Directory bread(block 163) failed [ 690.617132][ T4580] bridge_slave_0: entered allmulticast mode [ 690.626675][ T4580] bridge_slave_0: entered promiscuous mode [ 690.633753][T22557] tipc: Disabling bearer [ 690.639584][T22557] tipc: Left network mode [ 690.640664][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.651334][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.659258][ T4580] bridge_slave_1: entered allmulticast mode [ 690.667030][ T4580] bridge_slave_1: entered promiscuous mode [ 690.678301][T22557] IPVS: stopping backup sync thread 2109 ... [ 690.732885][ T4580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.742313][ T4677] pim6reg1: entered promiscuous mode [ 690.747841][ T4677] pim6reg1: entered allmulticast mode [ 690.763229][ T4681] FAULT_INJECTION: forcing a failure. [ 690.763229][ T4681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.776950][ T4681] CPU: 0 UID: 0 PID: 4681 Comm: syz.4.12192 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 690.777120][ T4681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 690.777136][ T4681] Call Trace: [ 690.777144][ T4681] [ 690.777153][ T4681] dump_stack_lvl+0xf6/0x150 [ 690.777183][ T4681] dump_stack+0x15/0x1a [ 690.777204][ T4681] should_fail_ex+0x261/0x270 [ 690.777231][ T4681] should_fail+0xb/0x10 [ 690.777251][ T4681] should_fail_usercopy+0x1a/0x20 [ 690.777315][ T4681] strncpy_from_user+0x25/0x230 [ 690.777355][ T4681] ? __list_add_valid_or_report+0x38/0xe0 [ 690.777439][ T4681] strncpy_from_user_nofault+0x66/0xe0 [ 690.777489][ T4681] bpf_probe_read_compat_str+0xb3/0x130 [ 690.777524][ T4681] bpf_prog_e42f6260c1b72fb3+0x3e/0x40 [ 690.777541][ T4681] bpf_trace_run3+0x10e/0x1d0 [ 690.777593][ T4681] ? __kfree_skb+0x102/0x150 [ 690.777620][ T4681] ? __kfree_skb+0x102/0x150 [ 690.777646][ T4681] __traceiter_kmem_cache_free+0x33/0x50 [ 690.777717][ T4681] ? nlmon_xmit+0x51/0x60 [ 690.777745][ T4681] kmem_cache_free+0x243/0x2e0 [ 690.777786][ T4681] ? __kfree_skb+0x102/0x150 [ 690.777812][ T4681] ? nlmon_xmit+0x51/0x60 [ 690.777916][ T4681] __kfree_skb+0x102/0x150 [ 690.777942][ T4681] consume_skb+0x49/0x160 [ 690.778039][ T4681] nlmon_xmit+0x51/0x60 [ 690.778067][ T4681] dev_hard_start_xmit+0x12e/0x400 [ 690.778096][ T4681] __dev_queue_xmit+0x101a/0x20b0 [ 690.778122][ T4681] ? should_fail_ex+0xd7/0x270 [ 690.778198][ T4681] ? __dev_queue_xmit+0x18b/0x20b0 [ 690.778229][ T4681] ? __skb_clone+0x2d0/0x2f0 [ 690.778259][ T4681] __netlink_deliver_tap+0x3be/0x4f0 [ 690.778285][ T4681] netlink_unicast+0x69e/0x6c0 [ 690.778403][ T4681] netlink_sendmsg+0x609/0x720 [ 690.778475][ T4681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.778500][ T4681] __sock_sendmsg+0x140/0x180 [ 690.778609][ T4681] ____sys_sendmsg+0x350/0x4e0 [ 690.778641][ T4681] __sys_sendmsg+0x1a0/0x240 [ 690.778686][ T4681] __x64_sys_sendmsg+0x46/0x50 [ 690.778715][ T4681] x64_sys_call+0x26f3/0x2e10 [ 690.778846][ T4681] do_syscall_64+0xc9/0x1a0 [ 690.778882][ T4681] ? clear_bhb_loop+0x25/0x80 [ 690.778911][ T4681] ? clear_bhb_loop+0x25/0x80 [ 690.778951][ T4681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.778984][ T4681] RIP: 0033:0x7fbbdd2fe169 [ 690.779008][ T4681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.779100][ T4681] RSP: 002b:00007fbbdb967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.779119][ T4681] RAX: ffffffffffffffda RBX: 00007fbbdd525fa0 RCX: 00007fbbdd2fe169 [ 690.779131][ T4681] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 690.779143][ T4681] RBP: 00007fbbdb967090 R08: 0000000000000000 R09: 0000000000000000 [ 690.779158][ T4681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.779173][ T4681] R13: 0000000000000000 R14: 00007fbbdd525fa0 R15: 00007ffc91b10d28 [ 690.779196][ T4681] [ 691.102752][ T4580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.118941][T22557] veth1_macvtap: left promiscuous mode [ 691.124548][T22557] veth0_macvtap: left promiscuous mode [ 691.130279][T22557] veth1_vlan: left promiscuous mode [ 691.135871][T22557] veth0_vlan: left promiscuous mode [ 691.241235][ T4691] loop6: detected capacity change from 0 to 8192 [ 691.258519][ T4691] FAULT_INJECTION: forcing a failure. [ 691.258519][ T4691] name failslab, interval 1, probability 0, space 0, times 0 [ 691.262336][T22557] team_slave_1 (unregistering): left promiscuous mode [ 691.271520][ T4691] CPU: 1 UID: 0 PID: 4691 Comm: syz.6.12196 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 691.271596][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 691.271612][ T4691] Call Trace: [ 691.271621][ T4691] [ 691.271632][ T4691] dump_stack_lvl+0xf6/0x150 [ 691.271663][ T4691] dump_stack+0x15/0x1a [ 691.271737][ T4691] should_fail_ex+0x261/0x270 [ 691.271835][ T4691] should_failslab+0x8f/0xb0 [ 691.271865][ T4691] kmem_cache_alloc_noprof+0x59/0x340 [ 691.271918][ T4691] ? security_inode_alloc+0x37/0x100 [ 691.271956][ T4691] security_inode_alloc+0x37/0x100 [ 691.272051][ T4691] inode_init_always_gfp+0x4a2/0x4f0 [ 691.272074][ T4691] ? __pfx_fat_alloc_inode+0x10/0x10 [ 691.272110][ T4691] alloc_inode+0x86/0x170 [ 691.272208][ T4691] new_inode+0x1e/0xe0 [ 691.272245][ T4691] fat_build_inode+0x159/0x280 [ 691.272308][ T4691] vfat_lookup+0x195/0x2e0 [ 691.272350][ T4691] lookup_one_qstr_excl+0xca/0x250 [ 691.272385][ T4691] do_renameat2+0x383/0x9f0 [ 691.272508][ T4691] __x64_sys_rename+0x58/0x70 [ 691.272533][ T4691] x64_sys_call+0x2cd9/0x2e10 [ 691.272559][ T4691] do_syscall_64+0xc9/0x1a0 [ 691.272593][ T4691] ? clear_bhb_loop+0x25/0x80 [ 691.272642][ T4691] ? clear_bhb_loop+0x25/0x80 [ 691.272665][ T4691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.272806][ T4691] RIP: 0033:0x7fc77ce5e169 [ 691.272826][ T4691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.272864][ T4691] RSP: 002b:00007fc77b4c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 691.272888][ T4691] RAX: ffffffffffffffda RBX: 00007fc77d085fa0 RCX: 00007fc77ce5e169 [ 691.272904][ T4691] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180 [ 691.272921][ T4691] RBP: 00007fc77b4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 691.272936][ T4691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.272951][ T4691] R13: 0000000000000000 R14: 00007fc77d085fa0 R15: 00007fff91d2f2e8 [ 691.272973][ T4691] [ 691.305880][ T4700] loop7: detected capacity change from 0 to 2048 [ 691.497282][T22557] team0 (unregistering): Port device team_slave_1 removed [ 691.507468][T22557] team_slave_0 (unregistering): left promiscuous mode [ 691.515229][T22557] team0 (unregistering): Port device team_slave_0 removed [ 691.528203][ T4700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.541910][ T2261] smc: removing ib device syz2 [ 691.551624][ T4700] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.569375][T12696] vxcan1 speed is unknown, defaulting to 1000 [ 691.576015][T12696] syz2: Port: 1 Link DOWN [ 691.627286][ T4580] team0: Port device team_slave_0 added [ 691.638172][ T4695] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #16: comm +}[@: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 691.679168][ T4580] team0: Port device team_slave_1 added [ 691.736853][ T4580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.744057][ T4580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.770395][ T4580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.838033][ T4580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.845371][ T4580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.873611][ T4580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.937696][ T4580] hsr_slave_0: entered promiscuous mode [ 691.947173][ T4580] hsr_slave_1: entered promiscuous mode [ 691.954253][ T4580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 691.962694][ T4580] Cannot create hsr debugfs directory [ 691.991290][ T4720] openvswitch: netlink: Message has 6 unknown bytes. [ 692.012879][T22557] IPVS: stop unused estimator thread 0... [ 692.082700][ T2261] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:55: bg 0: block 345: padding at end of block bitmap is not set [ 692.098989][ T2261] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 692.113359][ T2261] EXT4-fs (loop7): This should not happen!! Data will be lost [ 692.113359][ T2261] [ 692.156867][ T4725] smc: net device bond0 applied user defined pnetid SYZ0 [ 692.165799][ T4725] smc: net device bond0 erased user defined pnetid SYZ0 [ 692.178533][ T2255] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 1702 with error 28 [ 692.195453][ T2255] EXT4-fs (loop7): This should not happen!! Data will be lost [ 692.195453][ T2255] [ 692.207583][ T2255] EXT4-fs (loop7): Total free blocks count 0 [ 692.215009][ T2255] EXT4-fs (loop7): Free/Dirty block details [ 692.223223][ T2255] EXT4-fs (loop7): free_blocks=0 [ 692.229165][ T2255] EXT4-fs (loop7): dirty_blocks=1712 [ 692.234713][ T2255] EXT4-fs (loop7): Block reservation details [ 692.290402][ T4731] smc: net device bond0 applied user defined pnetid SYZ0 [ 692.298643][ T4731] smc: net device bond0 erased user defined pnetid SYZ0 [ 692.310523][ T4733] loop6: detected capacity change from 0 to 512 [ 692.322706][ T4733] EXT4-fs: Ignoring removed oldalloc option [ 692.333563][ T4733] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.12210: Parent and EA inode have the same ino 15 [ 692.352032][ T4733] EXT4-fs (loop6): 1 orphan inode deleted [ 692.373407][ T4733] loop6: detected capacity change from 0 to 512 [ 692.389357][ T4733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 692.401728][ T4580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 692.412112][ T4580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 692.423558][ T4580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 692.432762][ T4733] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.445919][ T4580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 692.477753][ T4746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12213'. [ 692.498522][ T4746] 8021q: adding VLAN 0 to HW filter on device team3 [ 692.538024][ T4750] FAULT_INJECTION: forcing a failure. [ 692.538024][ T4750] name failslab, interval 1, probability 0, space 0, times 0 [ 692.549817][ T4580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.551320][ T4750] CPU: 1 UID: 0 PID: 4750 Comm: syz.6.12215 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 692.551364][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 692.551382][ T4750] Call Trace: [ 692.551389][ T4750] [ 692.551399][ T4750] dump_stack_lvl+0xf6/0x150 [ 692.551480][ T4750] dump_stack+0x15/0x1a [ 692.551503][ T4750] should_fail_ex+0x261/0x270 [ 692.551535][ T4750] should_failslab+0x8f/0xb0 [ 692.551564][ T4750] kmem_cache_alloc_noprof+0x59/0x340 [ 692.551655][ T4750] ? skb_clone+0x154/0x1f0 [ 692.551689][ T4750] skb_clone+0x154/0x1f0 [ 692.551720][ T4750] __netlink_deliver_tap+0x2bd/0x4f0 [ 692.551784][ T4750] netlink_unicast+0x69e/0x6c0 [ 692.551829][ T4750] netlink_sendmsg+0x609/0x720 [ 692.551880][ T4750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.551908][ T4750] __sock_sendmsg+0x140/0x180 [ 692.551946][ T4750] ____sys_sendmsg+0x350/0x4e0 [ 692.551995][ T4750] __sys_sendmsg+0x1a0/0x240 [ 692.552053][ T4750] __x64_sys_sendmsg+0x46/0x50 [ 692.552115][ T4750] x64_sys_call+0x26f3/0x2e10 [ 692.552144][ T4750] do_syscall_64+0xc9/0x1a0 [ 692.552219][ T4750] ? clear_bhb_loop+0x25/0x80 [ 692.552247][ T4750] ? clear_bhb_loop+0x25/0x80 [ 692.552274][ T4750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.552377][ T4750] RIP: 0033:0x7fc77ce5e169 [ 692.552395][ T4750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.552414][ T4750] RSP: 002b:00007fc77b4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 692.552432][ T4750] RAX: ffffffffffffffda RBX: 00007fc77d085fa0 RCX: 00007fc77ce5e169 [ 692.552447][ T4750] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 692.552529][ T4750] RBP: 00007fc77b4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 692.552544][ T4750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.552559][ T4750] R13: 0000000000000000 R14: 00007fc77d085fa0 R15: 00007fff91d2f2e8 [ 692.552582][ T4750] [ 692.774549][ T4580] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.786850][T22564] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.793954][T22564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.812242][T22564] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.819692][T22564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.833158][ T4763] loop4: detected capacity change from 0 to 128 [ 692.851722][ T4763] FAT-fs (loop4): Directory bread(block 162) failed [ 692.867983][ T4763] FAT-fs (loop4): Directory bread(block 163) failed [ 692.881986][ T4763] FAT-fs (loop4): Directory bread(block 164) failed [ 692.892423][ T4763] FAT-fs (loop4): Directory bread(block 165) failed [ 692.904274][ T4763] FAT-fs (loop4): Directory bread(block 166) failed [ 692.913313][ T4763] FAT-fs (loop4): Directory bread(block 167) failed [ 692.925120][ T4770] loop6: detected capacity change from 0 to 128 [ 692.936571][ T4770] FAT-fs (loop6): Directory bread(block 162) failed [ 692.945003][ T4770] FAT-fs (loop6): Directory bread(block 163) failed [ 692.952048][ T4770] FAT-fs (loop6): Directory bread(block 164) failed [ 692.960834][ T4763] FAT-fs (loop4): Directory bread(block 168) failed [ 692.968100][ T4770] FAT-fs (loop6): Directory bread(block 165) failed [ 692.970573][ T4580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.974816][ T4763] FAT-fs (loop4): Directory bread(block 169) failed [ 692.988765][ T4770] FAT-fs (loop6): Directory bread(block 166) failed [ 692.995797][ T4770] FAT-fs (loop6): Directory bread(block 167) failed [ 693.003470][ T4770] FAT-fs (loop6): Directory bread(block 168) failed [ 693.010073][ T4763] FAT-fs (loop4): Directory bread(block 162) failed [ 693.010103][ T4763] FAT-fs (loop4): Directory bread(block 163) failed [ 693.010794][ T4763] bio_check_eod: 16 callbacks suppressed [ 693.010810][ T4763] syz.4.12219: attempt to access beyond end of device [ 693.010810][ T4763] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 693.016936][ T4770] FAT-fs (loop6): Directory bread(block 169) failed [ 693.026187][ T4763] syz.4.12219: attempt to access beyond end of device [ 693.026187][ T4763] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 693.049284][ T4770] FAT-fs (loop6): Directory bread(block 162) failed [ 693.070913][ T4770] FAT-fs (loop6): Directory bread(block 163) failed [ 693.078227][ T4770] syz.6.12222: attempt to access beyond end of device [ 693.078227][ T4770] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 693.092319][ T4770] syz.6.12222: attempt to access beyond end of device [ 693.092319][ T4770] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 693.104694][ T4580] veth0_vlan: entered promiscuous mode [ 693.112865][ T4770] smc: net device bond0 applied user defined pnetid SYZ0 [ 693.121311][ T4770] smc: net device bond0 erased user defined pnetid SYZ0 [ 693.131711][ T4580] veth1_vlan: entered promiscuous mode [ 693.134960][ T4770] syz.6.12222: attempt to access beyond end of device [ 693.134960][ T4770] loop6: rw=3, sector=234, nr_sectors = 6 limit=128 [ 693.159916][ T4580] veth0_macvtap: entered promiscuous mode [ 693.170459][ T4770] syz.6.12222: attempt to access beyond end of device [ 693.170459][ T4770] loop6: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 693.179191][ T4580] veth1_macvtap: entered promiscuous mode [ 693.232957][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.244009][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.254054][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.264638][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.274632][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.285192][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.295636][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.306299][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.319919][ T4580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.336744][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.347390][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.357480][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.368080][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.378033][ T4580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.388666][ T4580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.409470][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12227'. [ 693.420175][ T4580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.440748][ T4796] 8021q: adding VLAN 0 to HW filter on device team4 [ 693.458158][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12229'. [ 693.469662][ T4580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.478975][ T4580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.487928][ T4580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.497134][ T4580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.535074][ T4803] 8021q: adding VLAN 0 to HW filter on device team2 [ 693.618179][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 693.618197][ T29] audit: type=1400 audit(2000000022.150:51253): avc: denied { write } for pid=4814 comm="syz.3.12162" name="tcp" dev="proc" ino=4026532498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 693.720613][ T29] audit: type=1326 audit(2000000022.250:51254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.4.12234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 693.744618][ T29] audit: type=1326 audit(2000000022.250:51255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.4.12234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 693.777258][ T29] audit: type=1326 audit(2000000022.250:51256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.4.12234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 693.801697][ T29] audit: type=1326 audit(2000000022.250:51257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.4.12234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 693.826127][ T29] audit: type=1326 audit(2000000022.250:51258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.4.12234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 693.850456][ T29] audit: type=1326 audit(2000000022.300:51259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.4.12234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 693.874906][ T29] audit: type=1326 audit(2000000022.300:51260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.4.12234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 693.899322][ T29] audit: type=1326 audit(2000000022.300:51261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.4.12234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 693.923584][ T29] audit: type=1326 audit(2000000022.300:51262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.4.12234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbdd2fe169 code=0x7ffc0000 [ 694.085579][ T4826] netlink: 'syz.6.12236': attribute type 1 has an invalid length. [ 694.093904][ T4826] netlink: 'syz.6.12236': attribute type 1 has an invalid length. [ 694.166967][ T4833] ip6gretap1: entered allmulticast mode [ 694.277458][ T4845] loop4: detected capacity change from 0 to 512 [ 694.286640][ T4847] pim6reg1: entered promiscuous mode [ 694.292066][ T4847] pim6reg1: entered allmulticast mode [ 694.311294][ T4845] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 694.433615][ T4861] netlink: 'syz.7.12246': attribute type 1 has an invalid length. [ 694.441536][ T4861] netlink: 'syz.7.12246': attribute type 1 has an invalid length. [ 694.518097][ T4866] netlink: 'syz.4.12257': attribute type 1 has an invalid length. [ 694.526981][ T4866] netlink: 'syz.4.12257': attribute type 1 has an invalid length. [ 694.623385][ T2261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.684476][ T2261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.770300][ T2261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.779834][ T4883] loop7: detected capacity change from 0 to 128 [ 694.788432][ T4883] FAT-fs (loop7): Directory bread(block 162) failed [ 694.796970][ T4883] FAT-fs (loop7): Directory bread(block 163) failed [ 694.804976][ T4883] FAT-fs (loop7): Directory bread(block 164) failed [ 694.811815][ T4883] FAT-fs (loop7): Directory bread(block 165) failed [ 694.822344][ T4883] FAT-fs (loop7): Directory bread(block 166) failed [ 694.825473][ T2261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.829443][ T4883] FAT-fs (loop7): Directory bread(block 167) failed [ 694.847493][ T4883] FAT-fs (loop7): Directory bread(block 168) failed [ 694.854565][ T4883] FAT-fs (loop7): Directory bread(block 169) failed [ 694.857055][ T4863] chnl_net:caif_netlink_parms(): no params data found [ 694.873422][ T4883] FAT-fs (loop7): Directory bread(block 162) failed [ 694.882871][ T4883] FAT-fs (loop7): Directory bread(block 163) failed [ 694.891055][ T4883] syz.7.12253: attempt to access beyond end of device [ 694.891055][ T4883] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 694.906482][ T4883] syz.7.12253: attempt to access beyond end of device [ 694.906482][ T4883] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 694.928475][ T4883] smc: net device bond0 applied user defined pnetid SYZ0 [ 694.937101][ T4883] smc: net device bond0 erased user defined pnetid SYZ0 [ 694.949377][ T4883] syz.7.12253: attempt to access beyond end of device [ 694.949377][ T4883] loop7: rw=3, sector=234, nr_sectors = 6 limit=128 [ 694.963652][ T4883] syz.7.12253: attempt to access beyond end of device [ 694.963652][ T4883] loop7: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 694.991521][ T2261] team0: left allmulticast mode [ 694.996734][ T2261] team_slave_0: left allmulticast mode [ 695.002452][ T2261] team_slave_1: left allmulticast mode [ 695.008479][ T2261] bridge0: port 4(team0) entered disabled state [ 695.017623][ T2261] dummy0: left allmulticast mode [ 695.022666][ T2261] dummy0: left promiscuous mode [ 695.027755][ T2261] bridge0: port 3(dummy0) entered disabled state [ 695.056693][ T2261] bridge_slave_1: left allmulticast mode [ 695.062957][ T2261] bridge_slave_1: left promiscuous mode [ 695.069022][ T2261] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.089676][ T2261] bridge_slave_0: left allmulticast mode [ 695.095760][ T2261] bridge_slave_0: left promiscuous mode [ 695.101808][ T2261] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.206826][ T2261] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.217338][ T2261] bond_slave_0: left promiscuous mode [ 695.225034][ T2261] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.236121][ T2261] bond_slave_1: left promiscuous mode [ 695.243801][ T2261] $Hÿ (unregistering): Released all slaves [ 695.252066][ T4863] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.260241][ T4863] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.268101][ T4863] bridge_slave_0: entered allmulticast mode [ 695.275120][ T4863] bridge_slave_0: entered promiscuous mode [ 695.282260][ T4863] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.289577][ T4863] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.297515][ T4863] bridge_slave_1: entered allmulticast mode [ 695.304510][ T4863] bridge_slave_1: entered promiscuous mode [ 695.321505][ T4906] pim6reg1: entered promiscuous mode [ 695.327230][ T4906] pim6reg1: entered allmulticast mode [ 695.334336][ T2261] tipc: Disabling bearer [ 695.339899][ T2261] tipc: Left network mode [ 695.381850][ T4863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.407465][ T4863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.418690][ T4919] netlink: 'syz.4.12263': attribute type 1 has an invalid length. [ 695.427460][ T4919] netlink: 'syz.4.12263': attribute type 1 has an invalid length. [ 695.442333][ T2261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.450258][ T2261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.477169][ T2261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.484972][ T2261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.538438][ T2261] veth1_macvtap: left promiscuous mode [ 695.552449][ T2261] veth0_macvtap: left promiscuous mode [ 695.569779][ T2261] veth1_vlan: left promiscuous mode [ 695.589365][ T2261] veth0_vlan: left promiscuous mode [ 695.792992][ T2261] team_slave_1 (unregistering): left promiscuous mode [ 695.801489][ T2261] team0 (unregistering): Port device team_slave_1 removed [ 695.815915][ T4952] loop6: detected capacity change from 0 to 128 [ 695.826596][ T2261] team_slave_0 (unregistering): left promiscuous mode [ 695.852690][ T2261] team0 (unregistering): Port device team_slave_0 removed [ 695.897910][ T4952] FAT-fs (loop6): Directory bread(block 32) failed [ 695.906137][ T4952] FAT-fs (loop6): Directory bread(block 33) failed [ 695.915118][ T4952] FAT-fs (loop6): Directory bread(block 34) failed [ 695.923106][ T4952] FAT-fs (loop6): Directory bread(block 35) failed [ 695.932005][ T4952] FAT-fs (loop6): Directory bread(block 36) failed [ 695.942155][ T4952] FAT-fs (loop6): Directory bread(block 37) failed [ 695.951590][ T4863] team0: Port device team_slave_0 added [ 695.957570][ T4952] FAT-fs (loop6): Directory bread(block 38) failed [ 695.967655][ T4863] team0: Port device team_slave_1 added [ 695.974360][ T4952] FAT-fs (loop6): Directory bread(block 39) failed [ 695.993494][ T4952] FAT-fs (loop6): Directory bread(block 40) failed [ 696.005820][ T4966] loop4: detected capacity change from 0 to 128 [ 696.005924][ T4952] FAT-fs (loop6): Directory bread(block 41) failed [ 696.013498][ T4966] FAT-fs (loop4): Directory bread(block 162) failed [ 696.028684][ T4966] FAT-fs (loop4): Directory bread(block 163) failed [ 696.035586][ T4966] FAT-fs (loop4): Directory bread(block 164) failed [ 696.046417][ T4966] FAT-fs (loop4): Directory bread(block 165) failed [ 696.054030][ T4966] FAT-fs (loop4): Directory bread(block 166) failed [ 696.061307][ T4966] FAT-fs (loop4): Directory bread(block 167) failed [ 696.070354][ T4966] FAT-fs (loop4): Directory bread(block 168) failed [ 696.078203][ T4966] FAT-fs (loop4): Directory bread(block 169) failed [ 696.088753][ T4863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.090329][ T4966] FAT-fs (loop4): Directory bread(block 162) failed [ 696.095955][ T4863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.102687][ T4966] FAT-fs (loop4): Directory bread(block 163) failed [ 696.128734][ T4863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.130035][ T4863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.153264][ T4863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.179500][ T4863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.201877][ T4969] smc: net device bond0 applied user defined pnetid SYZ0 [ 696.206612][ T4971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.224201][ T4971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.281708][ T4863] hsr_slave_0: entered promiscuous mode [ 696.293085][ T4863] hsr_slave_1: entered promiscuous mode [ 696.305377][ T4863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 696.326865][ T4863] Cannot create hsr debugfs directory [ 696.441066][ T2261] IPVS: stop unused estimator thread 0... [ 696.650792][ T4952] netlink: 88 bytes leftover after parsing attributes in process `syz.6.12276'. [ 696.672594][ T4863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 696.685827][ T4863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 696.696209][ T4863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 696.708048][ T4863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 696.757261][ T4863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.772626][ T4863] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.804681][T22560] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.812191][T22560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.835969][ T4997] loop6: detected capacity change from 0 to 128 [ 696.847260][T22560] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.854827][T22560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.875355][ T4997] FAT-fs (loop6): Directory bread(block 162) failed [ 696.906969][ T4997] FAT-fs (loop6): Directory bread(block 163) failed [ 696.933654][ T4997] FAT-fs (loop6): Directory bread(block 164) failed [ 696.950348][ T4997] FAT-fs (loop6): Directory bread(block 165) failed [ 696.967263][ T4997] FAT-fs (loop6): Directory bread(block 166) failed [ 696.975477][ T4863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.982488][ T5010] loop7: detected capacity change from 0 to 128 [ 696.991129][ T4997] FAT-fs (loop6): Directory bread(block 167) failed [ 696.999581][ T5010] FAT-fs (loop7): Directory bread(block 162) failed [ 697.014055][ T5010] FAT-fs (loop7): Directory bread(block 163) failed [ 697.021056][ T4997] FAT-fs (loop6): Directory bread(block 168) failed [ 697.029626][ T4997] FAT-fs (loop6): Directory bread(block 169) failed [ 697.033008][ T5010] FAT-fs (loop7): Directory bread(block 164) failed [ 697.045674][ T5010] FAT-fs (loop7): Directory bread(block 165) failed [ 697.052661][ T5010] FAT-fs (loop7): Directory bread(block 166) failed [ 697.062490][ T4997] FAT-fs (loop6): Directory bread(block 162) failed [ 697.064033][ T5010] FAT-fs (loop7): Directory bread(block 167) failed [ 697.072105][ T4997] FAT-fs (loop6): Directory bread(block 163) failed [ 697.090233][ T5010] FAT-fs (loop7): Directory bread(block 168) failed [ 697.090464][ T5018] openvswitch: netlink: Message has 6 unknown bytes. [ 697.105346][ T5021] loop4: detected capacity change from 0 to 512 [ 697.117752][ T5010] FAT-fs (loop7): Directory bread(block 169) failed [ 697.128112][ T5010] FAT-fs (loop7): Directory bread(block 162) failed [ 697.139404][ T5021] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 697.154228][ T5010] FAT-fs (loop7): Directory bread(block 163) failed [ 697.161645][ T4863] veth0_vlan: entered promiscuous mode [ 697.169696][ T4863] veth1_vlan: entered promiscuous mode [ 697.182862][ T5010] smc: net device bond0 erased user defined pnetid SYZ0 [ 697.210741][ T4863] veth0_macvtap: entered promiscuous mode [ 697.225780][ T4863] veth1_macvtap: entered promiscuous mode [ 697.244320][ T4863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.255348][ T4863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.265597][ T4863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.276116][ T4863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.286080][ T4863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.288076][ T5034] netlink: 'syz.6.12301': attribute type 1 has an invalid length. [ 697.296523][ T4863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.296554][ T4863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.305105][ T5034] netlink: 'syz.6.12301': attribute type 1 has an invalid length. [ 697.314657][ T4863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.316364][ T4863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.353677][ T5035] openvswitch: netlink: Message has 6 unknown bytes. [ 697.354803][ T4863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.371131][ T4863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.381179][ T4863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.391982][ T4863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.401911][ T4863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.412386][ T4863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.429002][ T4863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.440998][ T4863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.450094][ T4863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.459119][ T4863] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.468033][ T4863] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.511225][ T5038] loop7: detected capacity change from 0 to 512 [ 697.516892][ T5041] loop6: detected capacity change from 0 to 512 [ 697.527242][ T5038] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 697.547630][ T5041] ext4 filesystem being mounted at /568/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 697.642446][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12308'. [ 697.658291][ T5056] 8021q: adding VLAN 0 to HW filter on device team3 [ 697.849975][ T5069] loop6: detected capacity change from 0 to 128 [ 697.857805][ T5069] FAT-fs (loop6): Directory bread(block 162) failed [ 697.865239][ T5069] FAT-fs (loop6): Directory bread(block 163) failed [ 697.871954][ T5069] FAT-fs (loop6): Directory bread(block 164) failed [ 697.878935][ T5069] FAT-fs (loop6): Directory bread(block 165) failed [ 697.878954][ T5071] loop7: detected capacity change from 0 to 512 [ 697.885623][ T5069] FAT-fs (loop6): Directory bread(block 166) failed [ 697.885651][ T5069] FAT-fs (loop6): Directory bread(block 167) failed [ 697.905648][ T5069] FAT-fs (loop6): Directory bread(block 168) failed [ 697.912560][ T5069] FAT-fs (loop6): Directory bread(block 169) failed [ 697.913370][ T5071] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 697.922550][ T5069] FAT-fs (loop6): Directory bread(block 162) failed [ 697.937560][ T5069] FAT-fs (loop6): Directory bread(block 163) failed [ 697.969066][ T5077] loop6: detected capacity change from 0 to 128 [ 697.976656][ T5077] FAT-fs (loop6): Directory bread(block 162) failed [ 697.983436][ T5077] FAT-fs (loop6): Directory bread(block 163) failed [ 697.990241][ T5077] FAT-fs (loop6): Directory bread(block 164) failed [ 697.996924][ T5077] FAT-fs (loop6): Directory bread(block 165) failed [ 698.003678][ T5077] FAT-fs (loop6): Directory bread(block 166) failed [ 698.012613][ T5077] FAT-fs (loop6): Directory bread(block 167) failed [ 698.019664][ T5077] FAT-fs (loop6): Directory bread(block 168) failed [ 698.022051][ T5079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12318'. [ 698.030621][ T5077] FAT-fs (loop6): Directory bread(block 169) failed [ 698.035678][ T5079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12318'. [ 698.049180][ T5077] FAT-fs (loop6): Directory bread(block 162) failed [ 698.052582][ T5079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12318'. [ 698.070667][ T5077] FAT-fs (loop6): Directory bread(block 163) failed [ 698.077900][ T5079] xt_hashlimit: max too large, truncated to 1048576 [ 698.085777][ T5077] bio_check_eod: 15 callbacks suppressed [ 698.085797][ T5077] syz.6.12317: attempt to access beyond end of device [ 698.085797][ T5077] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 698.188857][ T5077] syz.6.12317: attempt to access beyond end of device [ 698.188857][ T5077] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 698.202787][ T5079] Cannot find add_set index 3 as target [ 698.323343][ T5097] pim6reg1: entered promiscuous mode [ 698.328739][ T5097] pim6reg1: entered allmulticast mode [ 698.358439][ T5100] loop4: detected capacity change from 0 to 512 [ 698.368966][ T5100] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 698.392218][ T5102] openvswitch: netlink: Message has 6 unknown bytes. [ 698.438901][ T5104] pim6reg1: entered promiscuous mode [ 698.444527][ T5104] pim6reg1: entered allmulticast mode [ 698.453056][ T5106] loop4: detected capacity change from 0 to 128 [ 698.460767][ T5106] FAT-fs (loop4): Directory bread(block 162) failed [ 698.469143][ T5106] FAT-fs (loop4): Directory bread(block 163) failed [ 698.481806][ T5106] FAT-fs (loop4): Directory bread(block 164) failed [ 698.491164][ T5106] FAT-fs (loop4): Directory bread(block 165) failed [ 698.499086][ T5106] FAT-fs (loop4): Directory bread(block 166) failed [ 698.506754][ T5106] FAT-fs (loop4): Directory bread(block 167) failed [ 698.513872][ T5106] FAT-fs (loop4): Directory bread(block 168) failed [ 698.520966][ T5106] FAT-fs (loop4): Directory bread(block 169) failed [ 698.537306][ T5106] FAT-fs (loop4): Directory bread(block 162) failed [ 698.545338][ T5106] FAT-fs (loop4): Directory bread(block 163) failed [ 698.552710][ T5106] syz.4.12327: attempt to access beyond end of device [ 698.552710][ T5106] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 698.568756][ T5106] syz.4.12327: attempt to access beyond end of device [ 698.568756][ T5106] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 698.586780][ T5110] smc: net device bond0 applied user defined pnetid SYZ0 [ 698.594650][ T5110] smc: net device bond0 erased user defined pnetid SYZ0 [ 698.690468][ T5123] FAULT_INJECTION: forcing a failure. [ 698.690468][ T5123] name failslab, interval 1, probability 0, space 0, times 0 [ 698.703812][ T5123] CPU: 0 UID: 0 PID: 5123 Comm: syz.3.12333 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 698.703846][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 698.703862][ T5123] Call Trace: [ 698.703870][ T5123] [ 698.703880][ T5123] dump_stack_lvl+0xf6/0x150 [ 698.703985][ T5123] dump_stack+0x15/0x1a [ 698.704006][ T5123] should_fail_ex+0x261/0x270 [ 698.704035][ T5123] should_failslab+0x8f/0xb0 [ 698.704063][ T5123] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 698.704110][ T5123] ? __d_alloc+0x3d/0x350 [ 698.704190][ T5123] __d_alloc+0x3d/0x350 [ 698.704254][ T5123] ? selinux_socket_post_create+0x211/0x2a0 [ 698.704286][ T5123] d_alloc_pseudo+0x1e/0x80 [ 698.704345][ T5123] alloc_file_pseudo+0x75/0x160 [ 698.704379][ T5123] sock_alloc_file+0x9b/0x1e0 [ 698.704436][ T5123] __sys_socket+0x117/0x240 [ 698.704475][ T5123] __x64_sys_socket+0x3f/0x50 [ 698.704514][ T5123] x64_sys_call+0x28f1/0x2e10 [ 698.704542][ T5123] do_syscall_64+0xc9/0x1a0 [ 698.704600][ T5123] ? clear_bhb_loop+0x25/0x80 [ 698.704705][ T5123] ? clear_bhb_loop+0x25/0x80 [ 698.704732][ T5123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.704756][ T5123] RIP: 0033:0x7f18b16a0087 [ 698.704775][ T5123] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.704798][ T5123] RSP: 002b:00007f18afd05fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 698.704859][ T5123] RAX: ffffffffffffffda RBX: 00007f18b18c5fa0 RCX: 00007f18b16a0087 [ 698.704875][ T5123] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 698.704950][ T5123] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 698.704965][ T5123] R10: 0000200000000240 R11: 0000000000000286 R12: 0000000000000001 [ 698.704980][ T5123] R13: 0000000000000000 R14: 00007f18b18c5fa0 R15: 00007ffe7db96398 [ 698.705003][ T5123] [ 699.072881][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 699.072899][ T29] audit: type=1326 audit(2000000027.600:51548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.3.12341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b169e169 code=0x7ffc0000 [ 699.104483][ T29] audit: type=1326 audit(2000000027.600:51549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.3.12341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b169e169 code=0x7ffc0000 [ 699.109632][ T5140] validate_nla: 4 callbacks suppressed [ 699.109653][ T5140] netlink: 'syz.7.12340': attribute type 1 has an invalid length. [ 699.142543][ T5140] netlink: 'syz.7.12340': attribute type 1 has an invalid length. [ 699.154827][ T29] audit: type=1326 audit(2000000027.690:51550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.3.12341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18b169e169 code=0x7ffc0000 [ 699.178713][ T29] audit: type=1326 audit(2000000027.690:51551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.3.12341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b169e169 code=0x7ffc0000 [ 699.202762][ T29] audit: type=1326 audit(2000000027.690:51552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.3.12341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b169e169 code=0x7ffc0000 [ 699.227541][ T29] audit: type=1326 audit(2000000027.690:51553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.3.12341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18b169e169 code=0x7ffc0000 [ 699.251959][ T29] audit: type=1326 audit(2000000027.690:51554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.3.12341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b169e169 code=0x7ffc0000 [ 699.276476][ T29] audit: type=1326 audit(2000000027.690:51555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.3.12341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b169e169 code=0x7ffc0000 [ 699.302448][ T29] audit: type=1326 audit(2000000027.690:51556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.3.12341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18b169e169 code=0x7ffc0000 [ 699.326471][ T29] audit: type=1326 audit(2000000027.690:51557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.3.12341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b169e169 code=0x7ffc0000 [ 699.393096][ T5147] loop6: detected capacity change from 0 to 128 [ 699.428540][ T5147] FAT-fs (loop6): Directory bread(block 162) failed [ 699.437269][ T5147] FAT-fs (loop6): Directory bread(block 163) failed [ 699.446982][ T5147] FAT-fs (loop6): Directory bread(block 164) failed [ 699.454455][ T5147] FAT-fs (loop6): Directory bread(block 165) failed [ 699.461652][ T5147] FAT-fs (loop6): Directory bread(block 166) failed [ 699.474416][ T5147] FAT-fs (loop6): Directory bread(block 167) failed [ 699.481575][ T5147] FAT-fs (loop6): Directory bread(block 168) failed [ 699.489292][ T5147] FAT-fs (loop6): Directory bread(block 169) failed [ 699.497633][ T5147] FAT-fs (loop6): Directory bread(block 162) failed [ 699.506628][ T5147] FAT-fs (loop6): Directory bread(block 163) failed [ 699.515532][ T5147] syz.6.12343: attempt to access beyond end of device [ 699.515532][ T5147] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 699.530678][ T5147] syz.6.12343: attempt to access beyond end of device [ 699.530678][ T5147] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 699.632131][ T5160] vcan0: MTU too low for tipc bearer [ 699.637760][ T5160] tipc: Enabling of bearer rejected, failed to enable media [ 699.657792][ T5160] @ÿ: renamed from bond_slave_0 (while UP) [ 699.768700][ T5175] loop7: detected capacity change from 0 to 512 [ 699.781948][ T5175] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 699.825337][ T5181] loop7: detected capacity change from 0 to 128 [ 699.833200][ T5181] FAT-fs (loop7): Directory bread(block 162) failed [ 699.833657][ T5183] smc: net device bond0 applied user defined pnetid SYZ0 [ 699.842217][ T5181] FAT-fs (loop7): Directory bread(block 163) failed [ 699.850963][ T5183] smc: net device bond0 erased user defined pnetid SYZ0 [ 699.855856][ T5181] FAT-fs (loop7): Directory bread(block 164) failed [ 699.869003][ T5181] FAT-fs (loop7): Directory bread(block 165) failed [ 699.876168][ T5181] FAT-fs (loop7): Directory bread(block 166) failed [ 699.885686][ T5181] FAT-fs (loop7): Directory bread(block 167) failed [ 699.892760][ T5181] FAT-fs (loop7): Directory bread(block 168) failed [ 699.900900][ T5181] FAT-fs (loop7): Directory bread(block 169) failed [ 699.910550][ T5181] FAT-fs (loop7): Directory bread(block 162) failed [ 699.917555][ T5181] FAT-fs (loop7): Directory bread(block 163) failed [ 699.926456][ T5181] syz.7.12355: attempt to access beyond end of device [ 699.926456][ T5181] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 699.939982][ T5181] syz.7.12355: attempt to access beyond end of device [ 699.939982][ T5181] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 699.960604][ T5181] smc: net device bond0 applied user defined pnetid SYZ0 [ 699.968419][ T5181] smc: net device bond0 erased user defined pnetid SYZ0 [ 699.981286][ T5181] syz.7.12355: attempt to access beyond end of device [ 699.981286][ T5181] loop7: rw=3, sector=234, nr_sectors = 6 limit=128 [ 699.996410][ T5181] syz.7.12355: attempt to access beyond end of device [ 699.996410][ T5181] loop7: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 700.012115][ T5188] smc: net device bond0 applied user defined pnetid SYZ0 [ 700.020593][ T5188] smc: net device bond0 erased user defined pnetid SYZ0 [ 700.298197][ T5200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12360'. [ 700.320395][ T5202] loop6: detected capacity change from 0 to 128 [ 700.329943][ T5202] FAT-fs (loop6): Directory bread(block 162) failed [ 700.336874][ T5202] FAT-fs (loop6): Directory bread(block 163) failed [ 700.344460][ T5202] FAT-fs (loop6): Directory bread(block 164) failed [ 700.351673][ T5202] FAT-fs (loop6): Directory bread(block 165) failed [ 700.358583][ T5202] FAT-fs (loop6): Directory bread(block 166) failed [ 700.365902][ T5202] FAT-fs (loop6): Directory bread(block 167) failed [ 700.372731][ T5202] FAT-fs (loop6): Directory bread(block 168) failed [ 700.379826][ T5202] FAT-fs (loop6): Directory bread(block 169) failed [ 700.387840][ T5202] FAT-fs (loop6): Directory bread(block 162) failed [ 700.394859][ T5202] FAT-fs (loop6): Directory bread(block 163) failed [ 700.451004][ T5212] loop6: detected capacity change from 0 to 512 [ 700.460479][ T5212] ext4 filesystem being mounted at /583/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 700.533922][ T5217] loop6: detected capacity change from 0 to 512 [ 700.543152][ T5217] ext4 filesystem being mounted at /585/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 700.612670][ T5225] ================================================================== [ 700.620896][ T5225] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 700.628482][ T5225] [ 700.630824][ T5225] write to 0xffff888104092300 of 8 bytes by task 5223 on cpu 0: [ 700.638456][ T5225] mas_wmb_replace+0xebb/0x1510 [ 700.643345][ T5225] mas_wr_store_entry+0x158c/0x2460 [ 700.648764][ T5225] mas_store_prealloc+0x6d5/0x960 [ 700.653806][ T5225] vma_iter_store_new+0x1d3/0x210 [ 700.658866][ T5225] vma_complete+0x12b/0x570 [ 700.663482][ T5225] __split_vma+0x5b6/0x630 [ 700.668006][ T5225] vma_modify+0x1a2/0x200 [ 700.672465][ T5225] vma_modify_flags+0x10a/0x140 [ 700.677331][ T5225] mprotect_fixup+0x30f/0x5d0 [ 700.682048][ T5225] do_mprotect_pkey+0x6ce/0x9a0 [ 700.686920][ T5225] __x64_sys_mprotect+0x48/0x60 [ 700.691797][ T5225] x64_sys_call+0x272f/0x2e10 [ 700.696490][ T5225] do_syscall_64+0xc9/0x1a0 [ 700.701047][ T5225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.706968][ T5225] [ 700.709296][ T5225] read to 0xffff888104092300 of 8 bytes by task 5225 on cpu 1: [ 700.716929][ T5225] mtree_range_walk+0x347/0x460 [ 700.721794][ T5225] mas_walk+0x16e/0x320 [ 700.725956][ T5225] lock_vma_under_rcu+0xa7/0x340 [ 700.731015][ T5225] exc_page_fault+0x150/0x6a0 [ 700.735709][ T5225] asm_exc_page_fault+0x26/0x30 [ 700.740598][ T5225] [ 700.743008][ T5225] value changed: 0xffff8881038af20e -> 0xffff888104092300 [ 700.750201][ T5225] [ 700.752525][ T5225] Reported by Kernel Concurrency Sanitizer on: [ 700.758760][ T5225] CPU: 1 UID: 0 PID: 5225 Comm: syz.6.12369 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 700.772090][ T5225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 700.782302][ T5225] ==================================================================