last executing test programs: 6.33540488s ago: executing program 4 (id=916): open(&(0x7f0000000300)='.\x00', 0xc00, 0x0) 6.33451058s ago: executing program 4 (id=917): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) munlockall() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f00000000c0)=0x4000007, 0x4) sendmmsg$sock(r8, &(0x7f0000000240)=[{{&(0x7f0000000040)=@can, 0x80, 0x0}}], 0x1, 0x880) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x1, 0xf}}]}}}]}, 0x60}}, 0x0) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000008ae8d592c4ea233dc91d007f197aecb6f0d913a68c3619528d1379c6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x26e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x320c81c, &(0x7f0000000380)=ANY=[@ANYBLOB="636865636b3d7374726963742c6d61703d61636f726e2c686964652c6e6f726f636b2c636865636b3d72656c617865642c6e6f6a6f6c6965742c6d6f64653d3078303030303030303030303030303030302c626c6f636b3d3078303030303030303030303030303430302c00ef49cf86458fe7d77ad665fd54ecde2920ecf341fdc99e3dd3bbb43add61fbd65ef0936a80c2f39e63"], 0x1, 0x545, &(0x7f0000000ac0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x0) 5.318371126s ago: executing program 4 (id=943): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) poll(&(0x7f0000000100)=[{r0, 0xcf9aa395655278ef}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x3) 5.28173233s ago: executing program 4 (id=946): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@nobarrier}, {@noquota}, {@barrier_val}, {@jqfmt_vfsv1}, {@block_validity}, {@mblk_io_submit}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000003840)='./bus\x00', 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x0) r6 = dup2(r5, r4) ftruncate(r6, 0x4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) write$binfmt_script(r2, &(0x7f00000002c0), 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) fallocate(r3, 0x20, 0x0, 0x10000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f00000003c0)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x4}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x81) r10 = gettid() process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r11 = syz_open_procfs(r10, &(0x7f0000000040)='net/sockstat6\x00') sendmmsg(r9, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r11) sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="9b220000", @ANYRES16=r12, @ANYBLOB="010026bd7000fedbdf256b0000000a001a0008021100000100000a000600ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0xc000) r13 = dup2(r9, r8) sendmsg$ETHTOOL_MSG_DEBUG_GET(r13, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x18, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040810}, 0x1) sendmsg$nl_route_sched(r13, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 4.996675204s ago: executing program 0 (id=948): rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.969430886s ago: executing program 4 (id=950): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) getdents(r2, &(0x7f0000000080)=""/177, 0xb1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x31, 0x0, 0x4, 0x0, 0x2, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x400, 0x9}, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x24000080}, 0x40040) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904"], 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x40, 0x0, 0x7ffc0002}]}) syz_io_uring_setup(0x6d46, &(0x7f00000004c0)={0x0, 0xcdd0, 0x400, 0x2, 0x46}, &(0x7f0000000080), &(0x7f0000000540)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8, 0xfff2}, {0x6, 0x2}, {0x0, 0x10}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) 4.902985992s ago: executing program 0 (id=952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 4.820719759s ago: executing program 0 (id=954): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) readv(r0, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) (fail_nth: 2) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) 4.820517889s ago: executing program 2 (id=955): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 4.490229437s ago: executing program 2 (id=956): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) poll(&(0x7f0000000100)=[{r0, 0xcf9aa395655278ef}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x3) 4.409333984s ago: executing program 0 (id=957): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2a14000, &(0x7f0000000680)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@discard}, {@nodiscard}, {@nouid32}, {@i_version}, {}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@noquota}, {@jqfmt_vfsv0}, {@discard}, {@block_validity}, {@user_xattr}, {@grpid}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') open(&(0x7f00000003c0)='./bus\x00', 0x14bb42, 0x0) gettid() mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000740)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000840)={0x60, 0x3, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x80000000, 0x0, 0x0, 0x9c47, 0x4, 0x40, 0x4, 0x50}) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140), 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES8=r6], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x860627dfe5fa6604, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.317314482s ago: executing program 0 (id=962): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34}}], 0x18}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100051010000000000ec0000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="021800000c00000000000000feffffff05000500005975000a004e2100000002fe800000000000000000000000000028070000000000000005000600000000000a00010700100000fe80000000000000000000000000001405000200000000005c93611561a54c3a6386551f9b0407fbdb5b427606e7a2b5dd6f41a6079fdc9f036a3f34bcf2dce0bc4c5b78dada2720826663855f3bd6b91d7e0ce21d97321b47f511a296686a575de74d40768f6564d2eb5ffd3f2393e1f780a69cf0fd9b8e3756e2d928ddafc9a858da0b24a4e57314826423aec0ab76e301a0a9bff168b6ad3cff5406774e4249989bd98b7fcf"], 0x60}}, 0x24048004) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r5}, 0x10) io_uring_setup(0x25f3, &(0x7f0000019680)={0x0, 0x0, 0x2, 0x1, 0x3}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0xffffffc3}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r6, 0x11, 0x6d, &(0x7f0000000040), &(0x7f00000002c0)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 3.873335749s ago: executing program 0 (id=967): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004e66c00040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x0, 0x0) close(r5) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write(r6, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r1) 3.823690474s ago: executing program 2 (id=969): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c456f65e96087d6931b0a82d5b4f882ef9dbe9d75296be7984be5ef148085835efc32e5d4355e0406530a663b8569e11cd3963c2e9ed8f02dd4af191be8b48289a6ed01cc5fb8e7aa855c63cf497a129cf9cc001272e444f9cd562aabf2104cb40facade1b8cb133a43e62520fbfbbaf0fb36c6ece1f00d65d846b1300ed212cf75742d80e46a6a56de66109a0622faf570273343012c57c571167c9bde8012f8fa46bde9413ae1d4e3cfbfe2b7f16e86d6f103c44", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x2000000000000393, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x1, 0xfffffffffffffe27, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) futex_waitv(&(0x7f0000001140)=[{0x8000, 0x0, 0x2}, {0xc09d, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x1800000000000, 0x0, 0x2}, {0x7fffffffffffffff, 0x0, 0x2}, {0xc88c, 0x0, 0x82}, {0xd, 0x0, 0x2}, {0xe485, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x16a7, 0x0, 0x82}, {0x200, 0x0, 0x82}, {0x10, 0x0, 0x82}, {0x5, 0x0, 0x82}, {0x74, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x80, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0xfffffffffffffff9, 0x0, 0x82}, {0x100000000, 0x0, 0x82}, {0x8000000000000000, 0x0, 0x82}, {0xb8b, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x9, 0x0, 0x82}, {0x29, 0x0, 0x2}, {0x3181, 0x0, 0x82}, {0x35, 0x0, 0x82}, {0xf, 0x0, 0x2}, {0x7fffffff, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x2, 0x0, 0x86}, {0x401, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x471, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x10000, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x10001, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x46, 0x0, 0x82}, {0x2, 0x0, 0x80}, {0x7f, 0x0, 0x82}, {0x3ff5, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0xfffffffffffffffc, 0x0, 0x2}, {0x8, 0x0, 0x82}], 0x36, 0x0, &(0x7f0000001080)={0x0, 0x989680}, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000907"], 0x38}}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r1) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{r6}, &(0x7f0000001b00), &(0x7f0000001b40)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) open(&(0x7f0000000300)='.\x00', 0xc00, 0x0) 3.816906175s ago: executing program 4 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) stat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x20000387, &(0x7f0000002040)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x206}, {0x6, 0x8, 0x8, 0x7f}, {0xfffe, 0x5, 0x4, 0x46e}, {0x200, 0x1, 0x8b}, {0x81, 0x40, 0x9, 0x1}, {0x3, 0x6, 0xf7, 0x6000}]}, 0x10) 3.790504067s ago: executing program 2 (id=973): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2a14000, &(0x7f0000000680)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@discard}, {@nodiscard}, {@nouid32}, {@i_version}, {}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@noquota}, {@jqfmt_vfsv0}, {@discard}, {@block_validity}, {@user_xattr}, {@grpid}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') open(&(0x7f00000003c0)='./bus\x00', 0x14bb42, 0x0) gettid() mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000740)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000840)={0x60, 0x3, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x80000000, 0x0, 0x0, 0x9c47, 0x4, 0x40, 0x4, 0x50}) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140), 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES8=r6], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x860627dfe5fa6604, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 3.443695996s ago: executing program 2 (id=984): memfd_secret(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x4, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) tkill(0x0, 0x12) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000716f00000000000033"], 0xfc}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10) 3.221351316s ago: executing program 2 (id=985): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 1.87734051s ago: executing program 3 (id=1002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001ec0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001e00)=[{&(0x7f0000001a00)=""/212, 0xd4}], 0x1}}], 0x48}, 0x0) 1.87333428s ago: executing program 3 (id=1003): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000300), 0x80000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000032087b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='btrfs_clear_extent_bit\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f9ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r8}, 0x18) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0xfffd, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="b1de1188329b778fd736bbbd2316692b25c29b05", 0x14}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="5825be57aff9352b356be67ca2746357d1787935", 0x14}], 0x1}}], 0x2, 0x4000040) 1.853662962s ago: executing program 3 (id=1004): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000008c0)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000fac200"/28], 0x48) 1.621074982s ago: executing program 3 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, 0x0}, 0x2b0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$selinux_attr(r3, &(0x7f0000000680)='system_u:object_r:mtrr_device_t:s0\x00', 0x23) 1.598412214s ago: executing program 3 (id=1006): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x4}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="330300000000000000001c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x27, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0xab) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0xe3276e1cd06c86b7, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r6, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x44}}, 0x4008804) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r7, 0xa) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r7, 0x0, 0x0, 0x0) 850.992927ms ago: executing program 1 (id=1016): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) 837.577749ms ago: executing program 1 (id=1017): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000060000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b7030000000080008500000006000000b7080000ff000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 780.929514ms ago: executing program 1 (id=1018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) stat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x20000387, &(0x7f0000002040)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x206}, {0x6, 0x8, 0x8, 0x7f}, {0xfffe, 0x5, 0x4, 0x46e}, {0x200, 0x1, 0x8b}, {0x81, 0x40, 0x9, 0x1}, {0x3, 0x6, 0xf7, 0x6000}]}, 0x10) 777.129724ms ago: executing program 1 (id=1019): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x344, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000000)={0x80, 0x8, 0x0, 0x0, 0x4, 0xfffe, 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002d80)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0xa, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa], 0x0, [0x6, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8bfc], [0x0, 0x7, 0x0, 0x0, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}]}}]}, 0xa0}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r9, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\x98\x94\x8e|:\xae,.\x14w\x80\x1c1+\x11\xbc\x9c\xd4h|\xce\x9b.\xb9\x9e\"\xa2\x80\x8a\xe5\x8b\xfdV\xf6=\x7f\x00\"\xabY@>9\xb6q\xcb\rM\xafi\x9c\xb8\xec\v\xc8\xa1K\bl6\xd7\x97\xaeG\x01\x02P\xdd\xce\xd5\x8c\x11\x02\xc2'}, {0x20, 'n\x89CD\x8f\xb2\r\t\x90\x15etdevs\x00m\x00\xd0\xaf8\x18\xd5\xaa\xac\fd\xce1\xbd\xbf5,\xa1 \xaak\xb4/\x8c\xe0\x9f\x8fo\x8c\xb9v\xdb\xfa\xfcV\n\xb3y\xf7Y0\"\x84\xad\xdcvc5H\x1e\xd7rS\xa3\x1c\x87\x13K\x84\xba>^\x04\xed\xa3\xb1\xfa\x89R\xb3\xdc\xed\xee\xe5\xbc$\x7f\t\x90O\xf6\x9es\xc5:\x7f\x13Y!\xadv\xc9\xcd\xf2[\xef\xf0\xd8A3\xb4\xbe\x97\x03\x88\xc1<\xc6\x02\x93\x83\xacZ\xa6@2n\x86\xaarl\x04f\xc7\xd1R\xf4\xe3b)+\xd0\x01\'\x86f\xdf}\xac\x8c\x99\x92\x19\xd8\x9c\x9c\x88acO\xf4\t\xf0\xb6\x15\v=\xaf\x05\x06.\x9d\xf7\xb8\xd8-\xbep)\xd7\xc8\xe2\x96\xab\xfbx\x99\xff\xb7\x1c7\xaf\x93H1*\xe5+\xf0~\xa3\x8c\xf53UKzg\xdd\xfej\xa5\x17'}]}, 0x133) write$UHID_CREATE2(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r12}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200283afffe8000000000000000000000000000bbfe80000003000000000000000000003f8900907800000000000000000000000000000001ff0000aafc01000000000000e300000000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="dfaa550641c4"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 352.50379ms ago: executing program 3 (id=1020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000600)="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", &(0x7f0000000780)=""/176}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000500000000040000000000000700000000002e002e0000"], &(0x7f00000004c0)=""/240, 0x2e, 0xf0, 0x1, 0x8001, 0x10000, @value}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sysinfo(&(0x7f0000000080)=""/98) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r7, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffc01}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x50) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 181.150245ms ago: executing program 1 (id=1021): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) open(&(0x7f0000000100)='./file0\x00', 0x121bff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 0s ago: executing program 1 (id=1022): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, 0x0}, 0x2b0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) write$selinux_attr(r3, &(0x7f0000000680)='system_u:object_r:mtrr_device_t:s0\x00', 0x23) kernel console output (not intermixed with test programs): attempt to access beyond end of device [ 80.566469][ T6482] loop1: rw=0, sector=209, nr_sectors = 8 limit=128 [ 80.578677][ T6491] CPU: 1 UID: 0 PID: 6491 Comm: syz.4.746 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 80.591689][ T6482] syz.1.741: attempt to access beyond end of device [ 80.591689][ T6482] loop1: rw=0, sector=209, nr_sectors = 8 limit=128 [ 80.602205][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.602218][ T6491] Call Trace: [ 80.602225][ T6491] [ 80.615223][ T6482] syz.1.741: attempt to access beyond end of device [ 80.615223][ T6482] loop1: rw=0, sector=209, nr_sectors = 8 limit=128 [ 80.625230][ T6491] dump_stack_lvl+0xf2/0x150 [ 80.628538][ T6482] syz.1.741: attempt to access beyond end of device [ 80.628538][ T6482] loop1: rw=0, sector=209, nr_sectors = 8 limit=128 [ 80.631404][ T6491] dump_stack+0x15/0x20 [ 80.631459][ T6491] should_fail_ex+0x223/0x230 [ 80.631484][ T6491] should_fail_alloc_page+0xfd/0x110 [ 80.650728][ T6487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.662035][ T6491] __alloc_pages_noprof+0x109/0x340 [ 80.683574][ T6487] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002] [ 80.684466][ T6491] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 80.689785][ T6487] System zones: [ 80.697744][ T6491] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 80.703160][ T6487] 0-1 [ 80.706623][ T6491] do_wp_page+0x64e/0x2340 [ 80.711971][ T6487] , 3-36 [ 80.714530][ T6491] ? xas_load+0x3ae/0x3d0 [ 80.714608][ T6491] ? __rcu_read_lock+0x36/0x50 [ 80.719002][ T6487] [ 80.733444][ T6491] handle_mm_fault+0xc47/0x2a80 [ 80.738352][ T6491] exc_page_fault+0x296/0x650 [ 80.743132][ T6491] asm_exc_page_fault+0x26/0x30 [ 80.747993][ T6491] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 80.753811][ T6491] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 80.773426][ T6491] RSP: 0018:ffffc90001b5ba20 EFLAGS: 00050206 [ 80.779568][ T6491] RAX: ffff8881225eab78 RBX: 0000000020000180 RCX: 000000000000f180 [ 80.787550][ T6491] RDX: 0000000000000000 RSI: ffff888112cc0eac RDI: 0000000020001000 [ 80.795520][ T6491] RBP: ffffc90001b5bdd0 R08: 0000000080000000 R09: 0000000000000000 [ 80.803525][ T6491] R10: 0001888112cc002c R11: 0001888112cd002b R12: 0000000000010000 [ 80.811522][ T6491] R13: 0000000020010180 R14: ffffc90001b5bde0 R15: ffff888112cc002c [ 80.819566][ T6491] _copy_to_iter+0x137/0xd20 [ 80.824231][ T6491] ? avc_has_perm+0xd4/0x160 [ 80.828831][ T6491] ? __virt_addr_valid+0x1ed/0x250 [ 80.834019][ T6491] ? __check_object_size+0x364/0x520 [ 80.839329][ T6491] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 80.845003][ T6491] __skb_datagram_iter+0xc8/0x610 [ 80.850116][ T6491] ? __rcu_read_unlock+0x4e/0x70 [ 80.855112][ T6491] skb_copy_datagram_iter+0x41/0x130 [ 80.860467][ T6491] virtio_transport_seqpacket_dequeue+0x1dd/0x530 [ 80.866968][ T6491] __vsock_connectible_recvmsg+0x3bd/0x760 [ 80.872832][ T6491] ? selinux_socket_recvmsg+0x19c/0x1d0 [ 80.878406][ T6491] ? __pfx_autoremove_wake_function+0x10/0x10 [ 80.884494][ T6491] vsock_connectible_recvmsg+0x83/0xa0 [ 80.889963][ T6491] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 80.896149][ T6491] sock_recvmsg+0x13f/0x170 [ 80.900704][ T6491] __sys_recvfrom+0x15b/0x230 [ 80.905402][ T6491] __x64_sys_recvfrom+0x78/0x90 [ 80.910264][ T6491] x64_sys_call+0x1726/0x2d60 [ 80.914996][ T6491] do_syscall_64+0xc9/0x1c0 [ 80.919584][ T6491] ? clear_bhb_loop+0x55/0xb0 [ 80.924275][ T6491] ? clear_bhb_loop+0x55/0xb0 [ 80.929105][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.935011][ T6491] RIP: 0033:0x7f875afcdff9 [ 80.939425][ T6491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.959111][ T6491] RSP: 002b:00007f8759c47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 80.967589][ T6491] RAX: ffffffffffffffda RBX: 00007f875b185f80 RCX: 00007f875afcdff9 [ 80.975560][ T6491] RDX: 000000000001ffd4 RSI: 0000000020000180 RDI: 0000000000000007 [ 80.983527][ T6491] RBP: 00007f8759c47090 R08: 0000000000000000 R09: 0000000000000000 [ 80.991528][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.999501][ T6491] R13: 0000000000000000 R14: 00007f875b185f80 R15: 00007ffff31b4098 [ 81.007478][ T6491] [ 81.039595][ T6496] loop1: detected capacity change from 0 to 1024 [ 81.046448][ T6496] EXT4-fs: Ignoring removed i_version option [ 81.090759][ T6505] loop3: detected capacity change from 0 to 128 [ 81.107417][ T6496] syz.1.747[6496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.107497][ T6496] syz.1.747[6496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.120082][ T6496] syz.1.747[6496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.195482][ T6505] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 81.204866][ T6518] loop4: detected capacity change from 0 to 128 [ 81.230896][ T6518] dummy0: entered promiscuous mode [ 81.237194][ T6518] batman_adv: batadv0: Adding interface: macsec1 [ 81.243551][ T6518] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.268915][ T6518] batman_adv: batadv0: Interface activated: macsec1 [ 81.307285][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.314513][ T6523] loop3: detected capacity change from 0 to 1024 [ 81.333778][ T6523] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.358143][ T6523] FAULT_INJECTION: forcing a failure. [ 81.358143][ T6523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.371248][ T6523] CPU: 1 UID: 0 PID: 6523 Comm: syz.3.755 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 81.381838][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.391975][ T6523] Call Trace: [ 81.395250][ T6523] [ 81.398191][ T6523] dump_stack_lvl+0xf2/0x150 [ 81.402775][ T6523] dump_stack+0x15/0x20 [ 81.406947][ T6523] should_fail_ex+0x223/0x230 [ 81.411715][ T6523] should_fail+0xb/0x10 [ 81.415867][ T6523] should_fail_usercopy+0x1a/0x20 [ 81.420954][ T6523] strncpy_from_user+0x25/0x200 [ 81.425860][ T6523] path_setxattr+0x88/0x360 [ 81.430367][ T6523] ? get_pid_task+0x8e/0xc0 [ 81.434869][ T6523] __x64_sys_setxattr+0x6d/0x80 [ 81.439718][ T6523] x64_sys_call+0x2927/0x2d60 [ 81.444388][ T6523] do_syscall_64+0xc9/0x1c0 [ 81.448880][ T6523] ? clear_bhb_loop+0x55/0xb0 [ 81.453595][ T6523] ? clear_bhb_loop+0x55/0xb0 [ 81.458361][ T6523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.464254][ T6523] RIP: 0033:0x7f1f6915dff9 [ 81.468656][ T6523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.488307][ T6523] RSP: 002b:00007f1f67dd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 81.496745][ T6523] RAX: ffffffffffffffda RBX: 00007f1f69315f80 RCX: 00007f1f6915dff9 [ 81.504706][ T6523] RDX: 0000000020001400 RSI: 00000000200001c0 RDI: 0000000020000200 [ 81.512708][ T6523] RBP: 00007f1f67dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.520667][ T6523] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 81.528628][ T6523] R13: 0000000000000000 R14: 00007f1f69315f80 R15: 00007ffe37173748 [ 81.536617][ T6523] [ 81.568459][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.619020][ T6537] loop0: detected capacity change from 0 to 1024 [ 81.648696][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.758'. [ 81.659097][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.669226][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.758'. [ 81.679316][ T6531] loop4: detected capacity change from 0 to 164 [ 81.685942][ T6531] /dev/loop4: Can't open blockdev [ 81.688821][ T6537] EXT4-fs error (device loop0): ext4_xattr_ibody_get:653: inode #2: comm syz.0.760: corrupted in-inode xattr: bad e_name length [ 81.705128][ T6537] EXT4-fs (loop0): Remounting filesystem read-only [ 81.726240][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.739989][ T6550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.761'. [ 81.767219][ T6285] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 81.776630][ T6285] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 81.786431][ T6285] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 81.795393][ T6285] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 81.804246][ T6285] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 81.815450][ T6285] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 81.824677][ T6285] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 81.836975][ T6285] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 81.862503][ T6559] loop4: detected capacity change from 0 to 1024 [ 81.869092][ T6559] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 81.881530][ T6528] chnl_net:caif_netlink_parms(): no params data found [ 81.899612][ T50] bridge_slave_1: left allmulticast mode [ 81.905343][ T50] bridge_slave_1: left promiscuous mode [ 81.911018][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.920235][ T50] bridge_slave_0: left allmulticast mode [ 81.926028][ T50] bridge_slave_0: left promiscuous mode [ 81.931676][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.025538][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.035845][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.045725][ T50] bond0 (unregistering): Released all slaves [ 82.060986][ T6567] bond1: entered promiscuous mode [ 82.066017][ T6567] bond1: entered allmulticast mode [ 82.071820][ T6567] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.082017][ T6567] bond1 (unregistering): Released all slaves [ 82.122485][ T50] hsr_slave_0: left promiscuous mode [ 82.128043][ T50] hsr_slave_1: left promiscuous mode [ 82.134086][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.141502][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.149259][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.156796][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.166425][ T50] veth1_macvtap: left promiscuous mode [ 82.171896][ T50] veth0_macvtap: left promiscuous mode [ 82.177501][ T50] veth1_vlan: left promiscuous mode [ 82.182726][ T50] veth0_vlan: left promiscuous mode [ 82.258837][ T50] team0 (unregistering): Port device team_slave_1 removed [ 82.269052][ T50] team0 (unregistering): Port device team_slave_0 removed [ 82.308051][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.315217][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.322498][ T6528] bridge_slave_0: entered allmulticast mode [ 82.332270][ T6528] bridge_slave_0: entered promiscuous mode [ 82.339938][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.347068][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.354398][ T6528] bridge_slave_1: entered allmulticast mode [ 82.368175][ T6528] bridge_slave_1: entered promiscuous mode [ 82.415377][ T6583] loop4: detected capacity change from 0 to 1024 [ 82.417120][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.422077][ T6583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.437770][ T6583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.448783][ T6583] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002] [ 82.452062][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.457210][ T6583] System zones: 0-1, 3-36 [ 82.490053][ T6564] chnl_net:caif_netlink_parms(): no params data found [ 82.504797][ T6528] team0: Port device team_slave_0 added [ 82.523618][ T6528] team0: Port device team_slave_1 added [ 82.541643][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.548731][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.574666][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.588686][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.595628][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.621718][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.667615][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.674850][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.682074][ T6564] bridge_slave_0: entered allmulticast mode [ 82.688675][ T6564] bridge_slave_0: entered promiscuous mode [ 82.695568][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.702763][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.709922][ T6564] bridge_slave_1: entered allmulticast mode [ 82.716335][ T6564] bridge_slave_1: entered promiscuous mode [ 82.750487][ T6528] hsr_slave_0: entered promiscuous mode [ 82.756570][ T6528] hsr_slave_1: entered promiscuous mode [ 82.762816][ T6528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.770382][ T6528] Cannot create hsr debugfs directory [ 82.777274][ T6564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.799353][ T6564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.854875][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.878755][ T6564] team0: Port device team_slave_0 added [ 82.888314][ T6564] team0: Port device team_slave_1 added [ 82.930749][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.937756][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.963752][ T6564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.988205][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.995199][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.021160][ T6564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.061598][ T6564] hsr_slave_0: entered promiscuous mode [ 83.070530][ T6564] hsr_slave_1: entered promiscuous mode [ 83.093517][ T6564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.102161][ T6564] Cannot create hsr debugfs directory [ 83.129414][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 83.129427][ T29] audit: type=1326 audit(1729183218.549:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 83.169932][ T29] audit: type=1326 audit(1729183218.586:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 83.191092][ T6607] tipc: Started in network mode [ 83.193246][ T29] audit: type=1326 audit(1729183218.586:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 83.198123][ T6607] tipc: Node identity ac1414aa, cluster identity 4711 [ 83.221397][ T29] audit: type=1326 audit(1729183218.586:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 83.228849][ T6607] tipc: Enabled bearer , priority 10 [ 83.251353][ T29] audit: type=1326 audit(1729183218.586:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 83.280767][ T29] audit: type=1326 audit(1729183218.586:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 83.304150][ T29] audit: type=1326 audit(1729183218.586:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 83.327441][ T29] audit: type=1326 audit(1729183218.586:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 83.350825][ T29] audit: type=1326 audit(1729183218.586:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 83.374109][ T29] audit: type=1326 audit(1729183218.586:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.3.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 83.398986][ T3341] IPVS: starting estimator thread 0... [ 83.453070][ T6612] loop4: detected capacity change from 0 to 2048 [ 83.486199][ T6612] loop4: p1 < > p4 [ 83.498315][ T6612] loop4: p4 size 8388608 extends beyond EOD, truncated [ 83.518483][ T6609] IPVS: using max 3264 ests per chain, 163200 per kthread [ 83.563945][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.590555][ T6528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.593536][ T6626] loop4: detected capacity change from 0 to 8192 [ 83.604614][ T6626] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.606984][ T6528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.624243][ T6528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.634494][ T6528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.662006][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.682261][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.695805][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.705981][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.719470][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.726529][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.737064][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.744111][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.784061][ T50] bridge_slave_1: left allmulticast mode [ 83.789771][ T50] bridge_slave_1: left promiscuous mode [ 83.795413][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.803716][ T50] bridge_slave_0: left allmulticast mode [ 83.809411][ T50] bridge_slave_0: left promiscuous mode [ 83.815096][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.890551][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.900860][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.910976][ T50] bond0 (unregistering): Released all slaves [ 83.937534][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.978828][ T50] hsr_slave_0: left promiscuous mode [ 83.986302][ T50] hsr_slave_1: left promiscuous mode [ 83.991936][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.999386][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.006984][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.014527][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.023984][ T50] veth1_macvtap: left promiscuous mode [ 84.029473][ T50] veth0_macvtap: left promiscuous mode [ 84.035031][ T50] veth1_vlan: left promiscuous mode [ 84.040261][ T50] veth0_vlan: left promiscuous mode [ 84.113599][ T50] team0 (unregistering): Port device team_slave_1 removed [ 84.124386][ T50] team0 (unregistering): Port device team_slave_0 removed [ 84.177693][ T6528] veth0_vlan: entered promiscuous mode [ 84.187278][ T6528] veth1_vlan: entered promiscuous mode [ 84.203816][ T6528] veth0_macvtap: entered promiscuous mode [ 84.211301][ T6528] veth1_macvtap: entered promiscuous mode [ 84.221612][ T6528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.232063][ T6528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.241913][ T6528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.252400][ T6528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.262347][ T6528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.272805][ T6528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.282675][ T6528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.293104][ T6528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.304946][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.306031][ T6647] loop3: detected capacity change from 0 to 1024 [ 84.312963][ T6528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.328988][ T6528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.331418][ T6647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.338842][ T6528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.346964][ T6647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.355813][ T6528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.355826][ T6528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.366523][ T6647] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002] [ 84.374140][ T6528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.384641][ T6647] System zones: [ 84.394496][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.402397][ T6647] 0-1 [ 84.408063][ T6528] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.413275][ T6647] , 3-36 [ 84.415652][ T6528] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.424506][ T6647] [ 84.427221][ T6528] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.439307][ T3343] tipc: Node number set to 2886997162 [ 84.446970][ T6528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.490141][ T6564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.501583][ T6564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.513143][ T6564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.533905][ T6564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.638397][ T6663] loop4: detected capacity change from 0 to 128 [ 84.656367][ T6564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.671458][ T6663] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.725652][ T6564] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.743236][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.750288][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.767998][ T6199] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 84.770367][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.789065][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.798389][ T6672] FAULT_INJECTION: forcing a failure. [ 84.798389][ T6672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.811513][ T6672] CPU: 0 UID: 0 PID: 6672 Comm: syz.1.792 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 84.822175][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.832230][ T6672] Call Trace: [ 84.835500][ T6672] [ 84.838491][ T6672] dump_stack_lvl+0xf2/0x150 [ 84.843085][ T6672] dump_stack+0x15/0x20 [ 84.847239][ T6672] should_fail_ex+0x223/0x230 [ 84.851924][ T6672] should_fail+0xb/0x10 [ 84.856137][ T6672] should_fail_usercopy+0x1a/0x20 [ 84.861238][ T6672] _copy_from_user+0x1e/0xd0 [ 84.865828][ T6672] copy_msghdr_from_user+0x54/0x2a0 [ 84.871119][ T6672] __sys_sendmsg+0x171/0x270 [ 84.875727][ T6672] __x64_sys_sendmsg+0x46/0x50 [ 84.880576][ T6672] x64_sys_call+0x2689/0x2d60 [ 84.885257][ T6672] do_syscall_64+0xc9/0x1c0 [ 84.889848][ T6672] ? clear_bhb_loop+0x55/0xb0 [ 84.894556][ T6672] ? clear_bhb_loop+0x55/0xb0 [ 84.899315][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.905220][ T6672] RIP: 0033:0x7fe6bf7bdff9 [ 84.909631][ T6672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.929318][ T6672] RSP: 002b:00007fe6be437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.937765][ T6672] RAX: ffffffffffffffda RBX: 00007fe6bf975f80 RCX: 00007fe6bf7bdff9 [ 84.945748][ T6672] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000006 [ 84.953791][ T6672] RBP: 00007fe6be437090 R08: 0000000000000000 R09: 0000000000000000 [ 84.961761][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.969823][ T6672] R13: 0000000000000000 R14: 00007fe6bf975f80 R15: 00007ffc1c8a1b68 [ 84.977816][ T6672] [ 84.984904][ T6199] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 85.020633][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.022339][ T6199] EXT4-fs error (device loop4): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 85.044095][ T6199] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 85.059781][ T6199] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 85.108092][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.109099][ T6679] loop1: detected capacity change from 0 to 1024 [ 85.125621][ T6679] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 85.134848][ T6199] EXT4-fs error (device loop4): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 85.151323][ T6199] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 85.199667][ T6199] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 85.215354][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.226111][ T6199] EXT4-fs error (device loop4): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 85.239636][ T6199] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 85.280716][ T6564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.282194][ T6689] loop3: detected capacity change from 0 to 8192 [ 85.301151][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.322751][ T6659] chnl_net:caif_netlink_parms(): no params data found [ 85.338066][ T6689] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 85.346657][ T6689] FAT-fs (loop3): Filesystem has been set read-only [ 85.368251][ T6689] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 85.385340][ T6689] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 85.409360][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.416493][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.423775][ T6659] bridge_slave_0: entered allmulticast mode [ 85.430182][ T6659] bridge_slave_0: entered promiscuous mode [ 85.438723][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.445760][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.453042][ T6659] bridge_slave_1: entered allmulticast mode [ 85.459576][ T6659] bridge_slave_1: entered promiscuous mode [ 85.479180][ T6659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.488457][ T50] bridge_slave_1: left allmulticast mode [ 85.494210][ T50] bridge_slave_1: left promiscuous mode [ 85.499902][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.507694][ T50] bridge_slave_0: left allmulticast mode [ 85.513387][ T50] bridge_slave_0: left promiscuous mode [ 85.519094][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.551829][ T6703] loop3: detected capacity change from 0 to 1024 [ 85.668314][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.679596][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.694210][ T50] bond0 (unregistering): Released all slaves [ 85.709899][ T6564] veth0_vlan: entered promiscuous mode [ 85.717597][ T6564] veth1_vlan: entered promiscuous mode [ 85.731634][ T6564] veth0_macvtap: entered promiscuous mode [ 85.738579][ T6564] veth1_macvtap: entered promiscuous mode [ 85.749549][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.760096][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.770028][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.780572][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.790398][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.800879][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.810976][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.821419][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.831386][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.841824][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.852525][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.861434][ T6659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.897487][ T6715] loop3: detected capacity change from 0 to 512 [ 85.904340][ T6715] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.915313][ T6715] EXT4-fs (loop3): 1 truncate cleaned up [ 85.921045][ T50] hsr_slave_0: left promiscuous mode [ 85.927258][ T50] hsr_slave_1: left promiscuous mode [ 85.932958][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.940425][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.948116][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.955521][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.964804][ T50] veth1_macvtap: left promiscuous mode [ 85.970364][ T50] veth0_macvtap: left promiscuous mode [ 85.976069][ T50] veth1_vlan: left promiscuous mode [ 85.981565][ T50] veth0_vlan: left promiscuous mode [ 86.017051][ T6724] loop3: detected capacity change from 0 to 1024 [ 86.023732][ T6724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.030795][ T6724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.041786][ T6724] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002] [ 86.050606][ T6724] System zones: 0-1, 3-36 [ 86.081900][ T50] team0 (unregistering): Port device team_slave_0 removed [ 86.124252][ T6659] team0: Port device team_slave_0 added [ 86.131618][ T6659] team0: Port device team_slave_1 added [ 86.137452][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.147927][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.157778][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.168312][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.178200][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.188648][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.204924][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.213318][ T6564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.222111][ T6564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.230902][ T6564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.239658][ T6564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.289492][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.296483][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.307599][ T6734] loop1: detected capacity change from 0 to 512 [ 86.322471][ T6659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.340833][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.347833][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.373818][ T6659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.395135][ T6734] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.426140][ T6659] hsr_slave_0: entered promiscuous mode [ 86.442964][ T6659] hsr_slave_1: entered promiscuous mode [ 86.450329][ T6659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.459837][ T6659] Cannot create hsr debugfs directory [ 86.461077][ T6739] loop2: detected capacity change from 0 to 2048 [ 86.591785][ T6707] chnl_net:caif_netlink_parms(): no params data found [ 86.620979][ T6747] loop1: detected capacity change from 0 to 512 [ 86.672406][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 86.734911][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.742072][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.749507][ T6707] bridge_slave_0: entered allmulticast mode [ 86.755815][ T6707] bridge_slave_0: entered promiscuous mode [ 86.762996][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.770118][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.804532][ T6707] bridge_slave_1: entered allmulticast mode [ 86.852150][ T6707] bridge_slave_1: entered promiscuous mode [ 86.954743][ T6707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.981338][ T6707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.044121][ T6707] team0: Port device team_slave_0 added [ 87.069707][ T6707] team0: Port device team_slave_1 added [ 87.115895][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.132388][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.139391][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.165431][ T6707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.176611][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.183741][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.209693][ T6707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.222831][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 87.231633][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.239183][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.268349][ T6707] hsr_slave_0: entered promiscuous mode [ 87.274358][ T6707] hsr_slave_1: entered promiscuous mode [ 87.280582][ T6707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.288122][ T6707] Cannot create hsr debugfs directory [ 87.296335][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.332974][ T6659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.341440][ T6659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.354856][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.366586][ T6659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.382898][ T6659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.434277][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.449007][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.461933][ T6659] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.472501][ T3373] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.479596][ T3373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.496916][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.503981][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.516729][ T6766] 9pnet_fd: Insufficient options for proto=fd [ 87.566433][ T50] bridge_slave_1: left allmulticast mode [ 87.572161][ T50] bridge_slave_1: left promiscuous mode [ 87.577756][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.587704][ T50] bridge_slave_0: left allmulticast mode [ 87.593412][ T50] bridge_slave_0: left promiscuous mode [ 87.595989][ T6770] loop1: detected capacity change from 0 to 2048 [ 87.599152][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.670225][ T6778] loop1: detected capacity change from 0 to 1024 [ 87.676848][ T6778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.684294][ T6778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.693764][ T6778] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002] [ 87.702095][ T6778] System zones: 0-1, 3-36 [ 87.708130][ T6782] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 87.714812][ T6782] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 87.722492][ T6782] vhci_hcd vhci_hcd.0: Device attached [ 87.729451][ T6782] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.739742][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.749846][ T6782] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(18) [ 87.756554][ T6782] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.764262][ T6782] vhci_hcd vhci_hcd.0: Device attached [ 87.771554][ T6782] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.781982][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.795239][ T6782] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.805312][ T50] bond0 (unregistering): Released all slaves [ 87.813096][ T6782] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(24) [ 87.819695][ T6782] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 87.827164][ T6782] vhci_hcd vhci_hcd.0: Device attached [ 87.834229][ T6659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.847731][ T6786] vhci_hcd: connection closed [ 87.847902][ T6797] vhci_hcd: connection closed [ 87.853423][ T6783] vhci_hcd: connection closed [ 87.858251][ T11] vhci_hcd: stop threads [ 87.867230][ T11] vhci_hcd: release socket [ 87.871707][ T11] vhci_hcd: disconnect device [ 87.876970][ T11] vhci_hcd: stop threads [ 87.881234][ T11] vhci_hcd: release socket [ 87.885771][ T11] vhci_hcd: disconnect device [ 87.890954][ T11] vhci_hcd: stop threads [ 87.895257][ T11] vhci_hcd: release socket [ 87.899801][ T11] vhci_hcd: disconnect device [ 87.919272][ T50] hsr_slave_0: left promiscuous mode [ 87.927939][ T4972] vhci_hcd: vhci_device speed not set [ 87.937147][ T6803] syz.2.820[6803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.937241][ T6803] syz.2.820[6803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.948878][ T6803] syz.2.820[6803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.964735][ T50] hsr_slave_1: left promiscuous mode [ 87.981937][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.989442][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.999592][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.007038][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.015725][ T50] batman_adv: batadv0: Interface deactivated: macsec1 [ 88.022556][ T50] batman_adv: batadv0: Removing interface: macsec1 [ 88.031615][ T50] dummy0: left promiscuous mode [ 88.036530][ T50] veth1_macvtap: left promiscuous mode [ 88.042057][ T50] veth0_macvtap: left promiscuous mode [ 88.047610][ T50] veth1_vlan: left promiscuous mode [ 88.052935][ T50] veth0_vlan: left promiscuous mode [ 88.145934][ T50] team0 (unregistering): Port device team_slave_1 removed [ 88.157494][ T50] team0 (unregistering): Port device team_slave_0 removed [ 88.236382][ T6807] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 88.241265][ T6659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.338689][ T6659] veth0_vlan: entered promiscuous mode [ 88.349265][ T6659] veth1_vlan: entered promiscuous mode [ 88.375813][ T6659] veth0_macvtap: entered promiscuous mode [ 88.392581][ T6659] veth1_macvtap: entered promiscuous mode [ 88.403821][ T6707] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.425326][ T6707] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.434782][ T6707] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.453457][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.463978][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.473862][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.484386][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.494221][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.504750][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.518680][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.530698][ T6707] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.547919][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.558401][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.568326][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.578755][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.588548][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.598992][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.609891][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.621749][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 88.621762][ T29] audit: type=1400 audit(1729183223.626:2087): avc: denied { create } for pid=6829 comm="syz.3.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 88.649916][ T6707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.663241][ T29] audit: type=1400 audit(1729183223.654:2088): avc: denied { bind } for pid=6829 comm="syz.3.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 88.665884][ T6659] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.692468][ T6659] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.701317][ T6659] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.710325][ T6659] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.723989][ T6830] ALSA: seq fatal error: cannot create timer (-22) [ 88.744108][ T29] audit: type=1326 audit(1729183223.727:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 88.749033][ T6837] syz.2.828[6837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.767503][ T29] audit: type=1326 audit(1729183223.727:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 88.770841][ T6837] syz.2.828[6837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.778707][ T29] audit: type=1326 audit(1729183223.727:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 88.808638][ T6837] syz.2.828[6837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.813140][ T29] audit: type=1326 audit(1729183223.727:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 88.851612][ T6707] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.870932][ T29] audit: type=1326 audit(1729183223.727:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 88.900895][ T29] audit: type=1326 audit(1729183223.727:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 88.924350][ T29] audit: type=1326 audit(1729183223.727:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 88.947850][ T29] audit: type=1326 audit(1729183223.727:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6829 comm="syz.3.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6915dff9 code=0x7ffc0000 [ 88.986895][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 88.993112][ T6842] loop1: detected capacity change from 0 to 2048 [ 89.007904][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.015002][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.024097][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.031216][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.044435][ T6845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.787'. [ 89.058220][ T6842] loop1: p1 < > p4 [ 89.065655][ T6842] loop1: p4 size 8388608 extends beyond EOD, truncated [ 89.160924][ T6867] loop3: detected capacity change from 0 to 1024 [ 89.168202][ T6867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.178363][ T6867] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.193046][ T6871] loop0: detected capacity change from 0 to 1024 [ 89.200406][ T6871] EXT4-fs: Ignoring removed oldalloc option [ 89.212013][ T6867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002] [ 89.224157][ T6867] System zones: 0-1, 3-36 [ 89.231023][ T6871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.838'. [ 89.246592][ T6707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.272055][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 89.292241][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'. [ 89.301546][ T6885] netlink: 65536 bytes leftover after parsing attributes in process `syz.0.840'. [ 89.329153][ T6882] loop2: detected capacity change from 0 to 164 [ 89.338427][ T6882] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 89.352132][ T6882] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 89.363143][ T6892] loop0: detected capacity change from 0 to 512 [ 89.384315][ T6892] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.396789][ T6896] rdma_op ffff888102f37980 conn xmit_rdma 0000000000000000 [ 89.416180][ T6892] Process accounting resumed [ 89.425466][ T6896] loop1: detected capacity change from 0 to 512 [ 89.436802][ T6892] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 89.447548][ T6896] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.842: casefold flag without casefold feature [ 89.460980][ T6896] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.842: couldn't read orphan inode 15 (err -117) [ 89.510842][ T6896] loop1: detected capacity change from 512 to 64 [ 89.514061][ T6707] veth0_vlan: entered promiscuous mode [ 89.521902][ T6906] loop0: detected capacity change from 0 to 2048 [ 89.526655][ T6707] veth1_vlan: entered promiscuous mode [ 89.537529][ T6896] bio_check_eod: 15 callbacks suppressed [ 89.537542][ T6896] syz.1.842: attempt to access beyond end of device [ 89.537542][ T6896] loop1: rw=3, sector=500, nr_sectors = 4 limit=64 [ 89.542954][ T6707] veth0_macvtap: entered promiscuous mode [ 89.553392][ T6896] syz.1.842: attempt to access beyond end of device [ 89.553392][ T6896] loop1: rw=2051, sector=504, nr_sectors = 2 limit=64 [ 89.558136][ T6707] veth1_macvtap: entered promiscuous mode [ 89.576887][ T6896] EXT4-fs (loop1): discard request in group:0 block:249 count:3 failed with -5 [ 89.593744][ T6896] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: IO failure [ 89.594450][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.612342][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.622180][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.632609][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.642444][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.652874][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.662831][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.667266][ T6896] syz.1.842: attempt to access beyond end of device [ 89.667266][ T6896] loop1: rw=2051, sector=82, nr_sectors = 2 limit=64 [ 89.673358][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.687453][ T6896] EXT4-fs (loop1): discard request in group:0 block:40 count:1 failed with -5 [ 89.706007][ T6906] loop0: p1 < > p4 [ 89.708641][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.710569][ T6906] loop0: p4 size 8388608 extends beyond EOD, truncated [ 89.720092][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.734447][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.744437][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.747803][ T6896] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: IO failure [ 89.754937][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.772763][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.783299][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.793161][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.803638][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.814288][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.821375][ T6896] syz.1.842: attempt to access beyond end of device [ 89.821375][ T6896] loop1: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 89.834851][ T6896] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 89.846192][ T6896] Buffer I/O error on device loop1, logical block 255 [ 89.853236][ T6896] syz.1.842: attempt to access beyond end of device [ 89.853236][ T6896] loop1: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 89.866605][ T6896] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 89.877939][ T6896] Buffer I/O error on device loop1, logical block 253 [ 89.884697][ T6896] Buffer I/O error on device loop1, logical block 254 [ 89.885792][ T6707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.899942][ T6896] syz.1.842: attempt to access beyond end of device [ 89.899942][ T6896] loop1: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 89.900150][ T6707] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.913227][ T6896] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 89.921891][ T6707] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.932965][ T6896] Buffer I/O error on device loop1, logical block 37 [ 89.941592][ T6707] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.948253][ T6896] Buffer I/O error on device loop1, logical block 38 [ 89.963661][ T6896] Buffer I/O error on device loop1, logical block 39 [ 89.970370][ T6896] Buffer I/O error on device loop1, logical block 40 [ 89.980066][ T6896] syz.1.842: attempt to access beyond end of device [ 89.980066][ T6896] loop1: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 89.993390][ T6896] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 90.004719][ T6896] Buffer I/O error on device loop1, logical block 249 [ 90.011558][ T6896] Buffer I/O error on device loop1, logical block 250 [ 90.018313][ T6896] Buffer I/O error on device loop1, logical block 251 [ 90.025395][ T6896] syz.1.842: attempt to access beyond end of device [ 90.025395][ T6896] loop1: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 90.038596][ T6896] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 90.078830][ T6528] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 90.097582][ T3342] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 90.105294][ T3342] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 90.112274][ T6913] bond1: entered promiscuous mode [ 90.118034][ T6913] bond1: entered allmulticast mode [ 90.131413][ T6913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.135906][ T3342] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 90.146258][ T3342] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 90.157866][ T6913] bond1 (unregistering): Released all slaves [ 90.177311][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'. [ 90.186671][ T6920] bridge_slave_1: left allmulticast mode [ 90.192383][ T6920] bridge_slave_1: left promiscuous mode [ 90.198113][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.206172][ T6920] bridge_slave_0: left allmulticast mode [ 90.211866][ T6920] bridge_slave_0: left promiscuous mode [ 90.217774][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.250435][ T6922] loop2: detected capacity change from 0 to 512 [ 90.257505][ T6922] EXT4-fs (loop2): fragment/cluster size (131072) != block size (4096) [ 90.349205][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.431247][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.457338][ T6944] loop3: detected capacity change from 0 to 1024 [ 90.464252][ T6944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.490279][ T6944] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.543422][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.595874][ T6918] loop4: detected capacity change from 0 to 512 [ 90.606027][ T6944] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c018, mo2=0002] [ 90.643972][ T6944] System zones: 0-1, 3-36 [ 90.650254][ T6918] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 90.678508][ T6918] System zones: 0-2, 18-18, 34-34 [ 90.708500][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.736194][ T6918] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.800: bg 0: block 248: padding at end of block bitmap is not set [ 90.764396][ T6918] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.800: Failed to acquire dquot type 1 [ 90.779846][ T6918] EXT4-fs (loop4): 1 truncate cleaned up [ 90.790281][ T6918] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.820572][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.828143][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.835579][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.843047][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.850486][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.857886][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.865282][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.872726][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.880135][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.887627][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.894999][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.902477][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.910071][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.917626][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.925105][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.932520][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.939924][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.947307][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.954729][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.962130][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.969497][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.977009][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.984420][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.991862][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 90.999497][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.007058][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.014502][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.021993][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.029463][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.036877][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.044260][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.051710][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.059095][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.066472][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.073909][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.081398][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.088966][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.096364][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.103763][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.111173][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.118591][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.125971][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.133340][ T4972] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 91.142479][ T4972] hid-generic 0000:0000:0001.0004: hidraw0: HID v4000.00 Device [syz0] on syz0 [ 91.153747][ T11] bridge_slave_1: left allmulticast mode [ 91.159509][ T11] bridge_slave_1: left promiscuous mode [ 91.165137][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.174279][ T11] bridge_slave_0: left allmulticast mode [ 91.180653][ T11] bridge_slave_0: left promiscuous mode [ 91.186322][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.256734][ T6967] loop2: detected capacity change from 0 to 2048 [ 91.278880][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.287928][ T6967] loop2: p1 < > p4 [ 91.292705][ T6967] loop2: p4 size 8388608 extends beyond EOD, truncated [ 91.299898][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.312772][ T11] bond0 (unregistering): Released all slaves [ 91.333941][ T6964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.376333][ T6939] chnl_net:caif_netlink_parms(): no params data found [ 91.392234][ T11] hsr_slave_0: left promiscuous mode [ 91.398202][ T11] hsr_slave_1: left promiscuous mode [ 91.403955][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.411449][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.419244][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.426623][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.437250][ T11] veth1_macvtap: left promiscuous mode [ 91.442784][ T11] veth0_macvtap: left promiscuous mode [ 91.448293][ T11] veth1_vlan: left promiscuous mode [ 91.453538][ T11] veth0_vlan: left promiscuous mode [ 91.544468][ T11] team0 (unregistering): Port device team_slave_1 removed [ 91.554758][ T11] team0 (unregistering): Port device team_slave_0 removed [ 91.648065][ T6976] ALSA: seq fatal error: cannot create timer (-22) [ 91.745811][ T6964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.816909][ T6964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.851341][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.858506][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.904152][ T6939] bridge_slave_0: entered allmulticast mode [ 91.920582][ T6939] bridge_slave_0: entered promiscuous mode [ 91.939283][ T6964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.954535][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.961757][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.969096][ T6939] bridge_slave_1: entered allmulticast mode [ 91.975434][ T6939] bridge_slave_1: entered promiscuous mode [ 91.987051][ T6992] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 92.006351][ T6939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.019009][ T6939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.044659][ T6939] team0: Port device team_slave_0 added [ 92.051907][ T6939] team0: Port device team_slave_1 added [ 92.071273][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.078271][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.104401][ T6939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.120221][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.130254][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.130283][ T6964] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.153014][ T6964] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.164058][ T6964] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.175381][ T6964] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.220259][ T11] bridge_slave_1: left allmulticast mode [ 92.225919][ T11] bridge_slave_1: left promiscuous mode [ 92.231713][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.241340][ T11] bridge_slave_0: left allmulticast mode [ 92.247033][ T11] bridge_slave_0: left promiscuous mode [ 92.252717][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.298337][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 92.306131][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 92.345696][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.353513][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.354436][ T7021] syz.3.880[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.361258][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.365596][ T7022] syz.2.881 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.372485][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.380242][ T7021] syz.3.880[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.390456][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.409635][ T7021] syz.3.880[7021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.416869][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.416895][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.437404][ T7023] netlink: zone id is out of range [ 92.443332][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.448461][ T7023] netlink: zone id is out of range [ 92.448467][ T7023] netlink: zone id is out of range [ 92.448472][ T7023] netlink: zone id is out of range [ 92.448477][ T7023] netlink: zone id is out of range [ 92.448482][ T7023] netlink: zone id is out of range [ 92.461483][ T7023] netlink: zone id is out of range [ 92.466338][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.471660][ T7023] netlink: zone id is out of range [ 92.476591][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.481725][ T7023] netlink: zone id is out of range [ 92.486841][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.486864][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.494498][ T7023] netlink: zone id is out of range [ 92.499586][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.540546][ T3341] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 92.548558][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.552499][ T3341] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 92.575659][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.586353][ T11] bond0 (unregistering): Released all slaves [ 92.619749][ T7032] FAULT_INJECTION: forcing a failure. [ 92.619749][ T7032] name failslab, interval 1, probability 0, space 0, times 0 [ 92.632419][ T7032] CPU: 0 UID: 0 PID: 7032 Comm: syz.3.885 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 92.643142][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.653195][ T7032] Call Trace: [ 92.656470][ T7032] [ 92.659399][ T7032] dump_stack_lvl+0xf2/0x150 [ 92.663997][ T7032] dump_stack+0x15/0x20 [ 92.668176][ T7032] should_fail_ex+0x223/0x230 [ 92.672866][ T7032] ? sidtab_sid2str_get+0xb8/0x140 [ 92.678014][ T7032] should_failslab+0x8f/0xb0 [ 92.682675][ T7032] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 92.689077][ T7032] kmemdup_noprof+0x2a/0x60 [ 92.693579][ T7032] sidtab_sid2str_get+0xb8/0x140 [ 92.698506][ T7032] security_sid_to_context_core+0x1eb/0x2f0 [ 92.704414][ T7032] security_sid_to_context+0x27/0x30 [ 92.709757][ T7032] avc_audit_post_callback+0x9d/0x530 [ 92.715123][ T7032] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 92.721161][ T7032] common_lsm_audit+0x7cc/0xfc0 [ 92.726041][ T7032] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 92.732029][ T7032] ? avc_denied+0xf1/0x110 [ 92.736445][ T7032] slow_avc_audit+0xf9/0x140 [ 92.741061][ T7032] avc_has_perm+0x129/0x160 [ 92.745676][ T7032] selinux_socket_sendmsg+0x19c/0x1d0 [ 92.751046][ T7032] security_socket_sendmsg+0x47/0x80 [ 92.756341][ T7032] __sock_sendmsg+0x2d/0x180 [ 92.760926][ T7032] ____sys_sendmsg+0x312/0x410 [ 92.765754][ T7032] __sys_sendmmsg+0x259/0x500 [ 92.770517][ T7032] __x64_sys_sendmmsg+0x57/0x70 [ 92.775394][ T7032] x64_sys_call+0xa49/0x2d60 [ 92.779984][ T7032] do_syscall_64+0xc9/0x1c0 [ 92.784530][ T7032] ? clear_bhb_loop+0x55/0xb0 [ 92.789242][ T7032] ? clear_bhb_loop+0x55/0xb0 [ 92.793917][ T7032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.799806][ T7032] RIP: 0033:0x7f1f6915dff9 [ 92.804252][ T7032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.823851][ T7032] RSP: 002b:00007f1f67dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 92.832327][ T7032] RAX: ffffffffffffffda RBX: 00007f1f69315f80 RCX: 00007f1f6915dff9 [ 92.840285][ T7032] RDX: 0000000000000001 RSI: 0000000020002e80 RDI: 0000000000000008 [ 92.848246][ T7032] RBP: 00007f1f67dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.856204][ T7032] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 92.864164][ T7032] R13: 0000000000000000 R14: 00007f1f69315f80 R15: 00007ffe37173748 [ 92.872129][ T7032] [ 92.907344][ T7041] loop4: detected capacity change from 0 to 128 [ 92.922113][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.936265][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 92.978338][ T11] team0 (unregistering): Port device team_slave_1 removed [ 92.996828][ T7054] ALSA: seq fatal error: cannot create timer (-22) [ 93.006393][ T11] team0 (unregistering): Port device team_slave_0 removed [ 93.039082][ T7058] loop3: detected capacity change from 0 to 512 [ 93.051992][ T7058] EXT4-fs: inline encryption not supported [ 93.080103][ T7011] chnl_net:caif_netlink_parms(): no params data found [ 93.092383][ T7058] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 93.115775][ T7058] EXT4-fs (loop3): mount failed [ 93.168943][ T7011] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.176179][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.200815][ T7011] bridge_slave_0: entered allmulticast mode [ 93.213841][ T7011] bridge_slave_0: entered promiscuous mode [ 93.222900][ T7011] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.230030][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.237458][ T7011] bridge_slave_1: entered allmulticast mode [ 93.243844][ T7011] bridge_slave_1: entered promiscuous mode [ 93.272780][ T7011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.290638][ T7071] loop3: detected capacity change from 0 to 512 [ 93.297123][ T7011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.311031][ T7071] EXT4-fs: Ignoring removed bh option [ 93.317935][ T7071] EXT4-fs error (device loop3): __ext4_iget:4952: inode #15: block 1803188595: comm syz.3.894: invalid block [ 93.330981][ T7071] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.894: couldn't read orphan inode 15 (err -117) [ 93.346241][ T7011] team0: Port device team_slave_0 added [ 93.353144][ T7011] team0: Port device team_slave_1 added [ 93.370125][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.377117][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.403062][ T7011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.426853][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.433923][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.459911][ T7011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.504644][ T7011] hsr_slave_0: entered promiscuous mode [ 93.513850][ T7011] hsr_slave_1: entered promiscuous mode [ 93.522541][ T7078] loop2: detected capacity change from 0 to 8192 [ 93.529154][ T7011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.538721][ T7011] Cannot create hsr debugfs directory [ 93.652559][ T7095] FAULT_INJECTION: forcing a failure. [ 93.652559][ T7095] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 93.665886][ T7095] CPU: 1 UID: 0 PID: 7095 Comm: syz.3.904 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 93.676524][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.686602][ T7095] Call Trace: [ 93.689863][ T7095] [ 93.692793][ T7095] dump_stack_lvl+0xf2/0x150 [ 93.697440][ T7095] dump_stack+0x15/0x20 [ 93.701631][ T7095] should_fail_ex+0x223/0x230 [ 93.706299][ T7095] should_fail_alloc_page+0xfd/0x110 [ 93.711598][ T7095] __alloc_pages_noprof+0x109/0x340 [ 93.716829][ T7095] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 93.722245][ T7095] alloc_pages_noprof+0xe1/0x100 [ 93.727169][ T7095] pipe_write+0x348/0xd20 [ 93.731496][ T7095] vfs_write+0x76a/0x910 [ 93.735730][ T7095] ? __pfx_pipe_write+0x10/0x10 [ 93.740646][ T7095] ksys_write+0xeb/0x1b0 [ 93.744962][ T7095] __x64_sys_write+0x42/0x50 [ 93.749546][ T7095] x64_sys_call+0x27dd/0x2d60 [ 93.754213][ T7095] do_syscall_64+0xc9/0x1c0 [ 93.758712][ T7095] ? clear_bhb_loop+0x55/0xb0 [ 93.763396][ T7095] ? clear_bhb_loop+0x55/0xb0 [ 93.768058][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.773958][ T7095] RIP: 0033:0x7f1f6915dff9 [ 93.778439][ T7095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.798062][ T7095] RSP: 002b:00007f1f67dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.806470][ T7095] RAX: ffffffffffffffda RBX: 00007f1f69315f80 RCX: 00007f1f6915dff9 [ 93.814442][ T7095] RDX: 00000000200002e6 RSI: 00000000200002c0 RDI: 0000000000000004 [ 93.822539][ T7095] RBP: 00007f1f67dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.830500][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.838457][ T7095] R13: 0000000000000000 R14: 00007f1f69315f80 R15: 00007ffe37173748 [ 93.846429][ T7095] [ 93.849940][ T11] kworker/u8:0: attempt to access beyond end of device [ 93.849940][ T11] loop4: rw=1, sector=145, nr_sectors = 32 limit=128 [ 93.854014][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.867768][ T11] kworker/u8:0: attempt to access beyond end of device [ 93.867768][ T11] loop4: rw=1, sector=177, nr_sectors = 1 limit=128 [ 93.885215][ T11] Buffer I/O error on dev loop4, logical block 177, lost async page write [ 93.894011][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.937029][ T7102] loop4: detected capacity change from 0 to 2048 [ 93.951898][ T7106] ref_ctr increment failed for inode: 0x90 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888129d7d500 [ 93.963388][ T7106] uprobe: syz.0.908:7106 failed to unregister, leaking uprobe [ 93.972867][ T7102] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 94.029692][ T7011] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.037963][ T7011] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.046441][ T7011] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.055867][ T7011] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.065429][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 94.065449][ T29] audit: type=1400 audit(1729183228.647:2577): avc: denied { append } for pid=7111 comm="syz.4.911" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.095407][ T7112] program syz.4.911 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.100283][ T7011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.117190][ T7011] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.133722][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.140794][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.151631][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.158764][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.216457][ T7114] loop4: detected capacity change from 0 to 8192 [ 94.229657][ T7011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.276081][ T29] audit: type=1326 audit(1729183228.832:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3280dff9 code=0x7ffc0000 [ 94.299561][ T29] audit: type=1326 audit(1729183228.832:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3280dff9 code=0x7ffc0000 [ 94.302457][ T7011] veth0_vlan: entered promiscuous mode [ 94.322933][ T29] audit: type=1326 audit(1729183228.832:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3280dff9 code=0x7ffc0000 [ 94.333996][ T7011] veth1_vlan: entered promiscuous mode [ 94.351602][ T29] audit: type=1326 audit(1729183228.832:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3280dff9 code=0x7ffc0000 [ 94.368215][ T7011] veth0_macvtap: entered promiscuous mode [ 94.380962][ T29] audit: type=1326 audit(1729183228.896:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3280dff9 code=0x7ffc0000 [ 94.390129][ T7011] veth1_macvtap: entered promiscuous mode [ 94.409291][ T29] audit: type=1326 audit(1729183228.896:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3280dff9 code=0x7ffc0000 [ 94.422129][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.438289][ T29] audit: type=1326 audit(1729183228.896:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3280dff9 code=0x7ffc0000 [ 94.448670][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.482095][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.482980][ T29] audit: type=1326 audit(1729183228.942:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3280dff9 code=0x7ffc0000 [ 94.492511][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.515781][ T29] audit: type=1326 audit(1729183228.942:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3280dff9 code=0x7ffc0000 [ 94.549201][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.554391][ T7124] loop4: detected capacity change from 0 to 4096 [ 94.559662][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.559677][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.559734][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.566497][ T7011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.580376][ T7124] EXT4-fs: Ignoring removed nobh option [ 94.591592][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.596456][ T7124] EXT4-fs: Ignoring removed i_version option [ 94.603599][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.635543][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.635556][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.635569][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.635581][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.635591][ T7011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.635606][ T7011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.637371][ T7011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.707723][ T7011] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.716720][ T7011] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.725877][ T7011] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.725909][ T7011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.839008][ T7105] FAULT_INJECTION: forcing a failure. [ 94.839008][ T7105] name failslab, interval 1, probability 0, space 0, times 0 [ 94.851676][ T7105] CPU: 1 UID: 0 PID: 7105 Comm: syz.3.909 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 94.862353][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.872395][ T7105] Call Trace: [ 94.875665][ T7105] [ 94.878641][ T7105] dump_stack_lvl+0xf2/0x150 [ 94.883253][ T7105] dump_stack+0x15/0x20 [ 94.887397][ T7105] should_fail_ex+0x223/0x230 [ 94.892148][ T7105] ? flock_lock_inode+0x236/0xf50 [ 94.897187][ T7105] should_failslab+0x8f/0xb0 [ 94.901795][ T7105] kmem_cache_alloc_noprof+0x4c/0x290 [ 94.907173][ T7105] flock_lock_inode+0x236/0xf50 [ 94.912079][ T7105] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 94.917455][ T7105] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 94.923270][ T7105] locks_lock_inode_wait+0x6e/0x2c0 [ 94.928463][ T7105] ? __pfx_autoremove_wake_function+0x10/0x10 [ 94.934604][ T7105] __se_sys_flock+0x2f0/0x3a0 [ 94.939283][ T7105] __x64_sys_flock+0x31/0x40 [ 94.943867][ T7105] x64_sys_call+0x289b/0x2d60 [ 94.948647][ T7105] do_syscall_64+0xc9/0x1c0 [ 94.953143][ T7105] ? clear_bhb_loop+0x55/0xb0 [ 94.957866][ T7105] ? clear_bhb_loop+0x55/0xb0 [ 94.962544][ T7105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.968435][ T7105] RIP: 0033:0x7f1f6915dff9 [ 94.972837][ T7105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.992457][ T7105] RSP: 002b:00007f1f67dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 95.000881][ T7105] RAX: ffffffffffffffda RBX: 00007f1f69315f80 RCX: 00007f1f6915dff9 [ 95.008915][ T7105] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000006 [ 95.016876][ T7105] RBP: 00007f1f67dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.024849][ T7105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.032810][ T7105] R13: 0000000000000000 R14: 00007f1f69315f80 R15: 00007ffe37173748 [ 95.040774][ T7105] [ 95.103605][ T7146] loop4: detected capacity change from 0 to 164 [ 95.113081][ T7148] loop0: detected capacity change from 0 to 2048 [ 95.138454][ T7146] ISOFS: unable to read i-node block [ 95.171298][ T7148] loop0: p1 < > p4 [ 95.175660][ T7148] loop0: p4 size 8388608 extends beyond EOD, truncated [ 95.186599][ T7156] loop1: detected capacity change from 0 to 512 [ 95.220340][ T7156] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.222574][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 95.271898][ T7174] sg_write: data in/out 45479/14 bytes for SCSI command 0x0-- guessing data in; [ 95.271898][ T7174] program syz.3.929 not setting count and/or reply_len properly [ 95.306648][ T7177] FAULT_INJECTION: forcing a failure. [ 95.306648][ T7177] name failslab, interval 1, probability 0, space 0, times 0 [ 95.319374][ T7177] CPU: 1 UID: 0 PID: 7177 Comm: syz.3.930 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 95.329959][ T7177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.339998][ T7177] Call Trace: [ 95.343256][ T7177] [ 95.346237][ T7177] dump_stack_lvl+0xf2/0x150 [ 95.350812][ T7177] dump_stack+0x15/0x20 [ 95.354998][ T7177] should_fail_ex+0x223/0x230 [ 95.359661][ T7177] ? security_cred_alloc_blank+0x4e/0x110 [ 95.365360][ T7177] should_failslab+0x8f/0xb0 [ 95.369997][ T7177] __kmalloc_noprof+0xa5/0x370 [ 95.374754][ T7177] security_cred_alloc_blank+0x4e/0x110 [ 95.380318][ T7177] cred_alloc_blank+0x4c/0x90 [ 95.384999][ T7177] keyctl_session_to_parent+0x42/0x4c0 [ 95.390455][ T7177] ? get_pid_task+0x8e/0xc0 [ 95.394950][ T7177] ? proc_fail_nth_write+0x12a/0x150 [ 95.400296][ T7177] __se_sys_keyctl+0x4be/0xbb0 [ 95.405117][ T7177] ? __fget_files+0x1d4/0x210 [ 95.409976][ T7177] ? fput+0x14e/0x190 [ 95.413951][ T7177] ? ksys_write+0x17a/0x1b0 [ 95.418515][ T7177] __x64_sys_keyctl+0x67/0x80 [ 95.423225][ T7177] x64_sys_call+0x971/0x2d60 [ 95.427826][ T7177] do_syscall_64+0xc9/0x1c0 [ 95.432410][ T7177] ? clear_bhb_loop+0x55/0xb0 [ 95.437090][ T7177] ? clear_bhb_loop+0x55/0xb0 [ 95.441833][ T7177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.447726][ T7177] RIP: 0033:0x7f1f6915dff9 [ 95.452151][ T7177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.471749][ T7177] RSP: 002b:00007f1f67dd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 95.480151][ T7177] RAX: ffffffffffffffda RBX: 00007f1f69315f80 RCX: 00007f1f6915dff9 [ 95.488233][ T7177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 95.496219][ T7177] RBP: 00007f1f67dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.504179][ T7177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.512139][ T7177] R13: 0000000000000001 R14: 00007f1f69315f80 R15: 00007ffe37173748 [ 95.520104][ T7177] [ 95.542846][ T7179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.931'. [ 95.555728][ T7184] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 95.569567][ T7185] loop2: detected capacity change from 0 to 1764 [ 95.576351][ T7185] iso9660: Unknown parameter 'sessin' [ 95.615706][ T7193] loop3: detected capacity change from 0 to 512 [ 95.619181][ T7191] loop2: detected capacity change from 0 to 2048 [ 95.632801][ T7193] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.644898][ T7191] loop2: p1 < > p4 [ 95.649204][ T7191] loop2: p4 size 8388608 extends beyond EOD, truncated [ 95.669627][ T7202] usb usb7: usbfs: process 7202 (syz.0.939) did not claim interface 0 before use [ 95.885552][ T7224] loop4: detected capacity change from 0 to 1024 [ 95.933701][ T7221] loop0: detected capacity change from 0 to 2048 [ 95.958655][ T7224] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.022467][ T7221] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.076835][ T7221] tipc: Can't bind to reserved service type 1 [ 96.130977][ T7224] loop4: detected capacity change from 1024 to 64 [ 96.159588][ T6707] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 96.209811][ T6707] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 96.229885][ T6707] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 96.243920][ T6707] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 96.279058][ T6707] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 96.308813][ T6707] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 96.322592][ T6707] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 96.336805][ T6707] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 96.358443][ T7250] FAULT_INJECTION: forcing a failure. [ 96.358443][ T7250] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 96.362177][ T6707] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 96.371728][ T7250] CPU: 1 UID: 0 PID: 7250 Comm: syz.0.954 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 96.387404][ T6707] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 96.395496][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.395514][ T7250] Call Trace: [ 96.395520][ T7250] [ 96.395529][ T7250] dump_stack_lvl+0xf2/0x150 [ 96.429707][ T7250] dump_stack+0x15/0x20 [ 96.433936][ T7250] should_fail_ex+0x223/0x230 [ 96.438666][ T7250] should_fail_alloc_page+0xfd/0x110 [ 96.443952][ T7250] __alloc_pages_noprof+0x109/0x340 [ 96.449272][ T7250] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 96.454705][ T7250] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 96.460085][ T7250] handle_mm_fault+0xdbe/0x2a80 [ 96.464950][ T7250] exc_page_fault+0x296/0x650 [ 96.469636][ T7250] asm_exc_page_fault+0x26/0x30 [ 96.474509][ T7250] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 96.480359][ T7250] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 96.500018][ T7250] RSP: 0018:ffffc900015d7ae0 EFLAGS: 00050206 [ 96.506083][ T7250] RAX: ffff88810277dcf8 RBX: 00000000200007c0 RCX: 00000000000007c0 [ 96.514054][ T7250] RDX: 0000000000000000 RSI: ffff88810ddc1840 RDI: 0000000020001000 [ 96.522027][ T7250] RBP: ffffc900015d7da8 R08: 0000000080000000 R09: 0000000000000000 [ 96.530042][ T7250] R10: 000188810ddc1000 R11: 000188810ddc1fff R12: 0000000000001000 [ 96.538004][ T7250] R13: 00000000200017c0 R14: ffffc900015d7db8 R15: ffff88810ddc1000 [ 96.545971][ T7250] _copy_to_iter+0x137/0xd20 [ 96.550565][ T7250] ? _raw_spin_unlock+0x26/0x50 [ 96.555408][ T7250] ? finish_task_switch+0xb5/0x2b0 [ 96.560512][ T7250] ? __schedule+0x732/0x940 [ 96.565005][ T7250] copy_page_to_iter+0x171/0x2b0 [ 96.569975][ T7250] pipe_read+0x295/0x880 [ 96.574288][ T7250] ? __pfx_autoremove_wake_function+0x10/0x10 [ 96.580379][ T7250] do_iter_readv_writev+0x394/0x450 [ 96.585599][ T7250] vfs_readv+0x1df/0x660 [ 96.589979][ T7250] do_readv+0xf8/0x220 [ 96.594119][ T7250] __x64_sys_readv+0x45/0x50 [ 96.598734][ T7250] x64_sys_call+0x2bd9/0x2d60 [ 96.603407][ T7250] do_syscall_64+0xc9/0x1c0 [ 96.608111][ T7250] ? clear_bhb_loop+0x55/0xb0 [ 96.612783][ T7250] ? clear_bhb_loop+0x55/0xb0 [ 96.617519][ T7250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.623411][ T7250] RIP: 0033:0x7f91b447dff9 [ 96.627918][ T7250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.647522][ T7250] RSP: 002b:00007f91b30f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 96.655923][ T7250] RAX: ffffffffffffffda RBX: 00007f91b4635f80 RCX: 00007f91b447dff9 [ 96.663881][ T7250] RDX: 0000000000000001 RSI: 0000000020002a40 RDI: 0000000000000003 [ 96.671883][ T7250] RBP: 00007f91b30f1090 R08: 0000000000000000 R09: 0000000000000000 [ 96.679844][ T7250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.687802][ T7250] R13: 0000000000000000 R14: 00007f91b4635f80 R15: 00007ffd386e9808 [ 96.695839][ T7250] [ 96.731101][ T7259] loop0: detected capacity change from 0 to 1024 [ 96.738876][ T7259] EXT4-fs: Ignoring removed i_version option [ 96.764737][ T7259] syz.0.957[7259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.764817][ T7259] syz.0.957[7259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.776959][ T7259] syz.0.957[7259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.850503][ T7277] loop1: detected capacity change from 0 to 512 [ 96.868322][ T7275] FAULT_INJECTION: forcing a failure. [ 96.868322][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 96.880996][ T7275] CPU: 1 UID: 0 PID: 7275 Comm: syz.3.964 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 96.891617][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.901666][ T7275] Call Trace: [ 96.904934][ T7275] [ 96.907851][ T7275] dump_stack_lvl+0xf2/0x150 [ 96.912433][ T7275] dump_stack+0x15/0x20 [ 96.916619][ T7275] should_fail_ex+0x223/0x230 [ 96.921331][ T7275] ? bpf_test_init+0xc7/0x170 [ 96.926008][ T7275] should_failslab+0x8f/0xb0 [ 96.930588][ T7275] __kmalloc_noprof+0xa5/0x370 [ 96.935350][ T7275] ? _parse_integer+0x27/0x30 [ 96.940040][ T7275] bpf_test_init+0xc7/0x170 [ 96.944620][ T7275] bpf_prog_test_run_skb+0x151/0xba0 [ 96.949927][ T7275] ? kstrtouint_from_user+0xb0/0xe0 [ 96.955128][ T7275] ? __fget_files+0x1d4/0x210 [ 96.959901][ T7275] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 96.965731][ T7275] bpf_prog_test_run+0x20f/0x3a0 [ 96.970740][ T7275] __sys_bpf+0x400/0x7a0 [ 96.974987][ T7275] __x64_sys_bpf+0x43/0x50 [ 96.979449][ T7275] x64_sys_call+0x2625/0x2d60 [ 96.984124][ T7275] do_syscall_64+0xc9/0x1c0 [ 96.988619][ T7275] ? clear_bhb_loop+0x55/0xb0 [ 96.993300][ T7275] ? clear_bhb_loop+0x55/0xb0 [ 96.997997][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.003942][ T7275] RIP: 0033:0x7f1f6915dff9 [ 97.008343][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.027943][ T7275] RSP: 002b:00007f1f67dd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.036352][ T7275] RAX: ffffffffffffffda RBX: 00007f1f69315f80 RCX: 00007f1f6915dff9 [ 97.044373][ T7275] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 97.052351][ T7275] RBP: 00007f1f67dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.060312][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.068273][ T7275] R13: 0000000000000000 R14: 00007f1f69315f80 R15: 00007ffe37173748 [ 97.076236][ T7275] [ 97.095964][ T7277] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.102093][ T7279] loop3: detected capacity change from 0 to 2048 [ 97.148267][ T7279] loop3: p1 < > p4 [ 97.148752][ T40] kworker/u8:2: attempt to access beyond end of device [ 97.148752][ T40] loop4: rw=1, sector=256, nr_sectors = 32 limit=64 [ 97.152836][ T7279] loop3: p4 size 8388608 extends beyond EOD, truncated [ 97.166285][ T40] buffer_io_error: 2 callbacks suppressed [ 97.166303][ T40] Buffer I/O error on device loop4, logical block 128 [ 97.184747][ T40] Buffer I/O error on device loop4, logical block 129 [ 97.191490][ T40] Buffer I/O error on device loop4, logical block 130 [ 97.198232][ T40] Buffer I/O error on device loop4, logical block 131 [ 97.205048][ T40] Buffer I/O error on device loop4, logical block 132 [ 97.211870][ T40] Buffer I/O error on device loop4, logical block 133 [ 97.218648][ T40] Buffer I/O error on device loop4, logical block 134 [ 97.225390][ T40] Buffer I/O error on device loop4, logical block 135 [ 97.232172][ T40] Buffer I/O error on device loop4, logical block 136 [ 97.238920][ T40] Buffer I/O error on device loop4, logical block 137 [ 97.259192][ T7231] kmmpd-loop4: attempt to access beyond end of device [ 97.259192][ T7231] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 97.272691][ T7231] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 97.282460][ T3364] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.357820][ T3364] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.437362][ T7307] loop2: detected capacity change from 0 to 1024 [ 97.450129][ T7309] loop3: detected capacity change from 0 to 512 [ 97.462444][ T7307] EXT4-fs: Ignoring removed i_version option [ 97.469201][ T7309] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.477678][ T7309] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent [ 97.489252][ T3364] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.533984][ T7307] syz.2.973[7307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.534092][ T7307] syz.2.973[7307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.557226][ T3364] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.563431][ T7330] loop3: detected capacity change from 0 to 256 [ 97.578914][ T7307] syz.2.973[7307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.591189][ T7330] FAT-fs (loop3): Directory bread(block 64) failed [ 97.609461][ T7330] FAT-fs (loop3): Directory bread(block 65) failed [ 97.616406][ T7330] FAT-fs (loop3): Directory bread(block 66) failed [ 97.622931][ T7330] FAT-fs (loop3): Directory bread(block 67) failed [ 97.630734][ T7330] FAT-fs (loop3): Directory bread(block 68) failed [ 97.637287][ T7330] FAT-fs (loop3): Directory bread(block 69) failed [ 97.644044][ T7330] FAT-fs (loop3): Directory bread(block 70) failed [ 97.651270][ T7330] FAT-fs (loop3): Directory bread(block 71) failed [ 97.659393][ T7330] FAT-fs (loop3): Directory bread(block 72) failed [ 97.665693][ T7333] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.666036][ T7330] FAT-fs (loop3): Directory bread(block 73) failed [ 97.707099][ T7330] xt_TCPMSS: Only works on TCP SYN packets [ 97.725791][ T3364] bridge_slave_1: left allmulticast mode [ 97.731415][ T3364] bridge_slave_1: left promiscuous mode [ 97.737245][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.745111][ T3364] bridge_slave_0: left allmulticast mode [ 97.750756][ T3364] bridge_slave_0: left promiscuous mode [ 97.756422][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.836036][ T7338] syz.3.982: attempt to access beyond end of device [ 97.836036][ T7338] loop3: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 97.857186][ T3364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.872743][ T3364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.885555][ T3364] bond0 (unregistering): Released all slaves [ 97.926577][ T3364] IPVS: stopping backup sync thread 7184 ... [ 97.952081][ T7349] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.959438][ T3364] hsr_slave_0: left promiscuous mode [ 97.965615][ T3364] hsr_slave_1: left promiscuous mode [ 97.971579][ T3364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.978958][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.986690][ T3364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.994215][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.003258][ T3364] veth1_macvtap: left promiscuous mode [ 98.008849][ T3364] veth0_macvtap: left promiscuous mode [ 98.014344][ T3364] veth1_vlan: left promiscuous mode [ 98.019621][ T3364] veth0_vlan: left promiscuous mode [ 98.074217][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'. [ 98.097102][ T3364] team0 (unregistering): Port device team_slave_1 removed [ 98.106978][ T3364] team0 (unregistering): Port device team_slave_0 removed [ 98.125537][ T7349] hub 9-0:1.0: USB hub found [ 98.130311][ T7349] hub 9-0:1.0: 8 ports detected [ 98.144547][ T7297] chnl_net:caif_netlink_parms(): no params data found [ 98.194212][ T7293] chnl_net:caif_netlink_parms(): no params data found [ 98.232376][ T7297] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.239432][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.247079][ T7297] bridge_slave_0: entered allmulticast mode [ 98.253594][ T7297] bridge_slave_0: entered promiscuous mode [ 98.268926][ T7297] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.276126][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.283221][ T7297] bridge_slave_1: entered allmulticast mode [ 98.289573][ T7297] bridge_slave_1: entered promiscuous mode [ 98.312124][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.319180][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.326347][ T7293] bridge_slave_0: entered allmulticast mode [ 98.332723][ T7293] bridge_slave_0: entered promiscuous mode [ 98.347916][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.355006][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.362541][ T7293] bridge_slave_1: entered allmulticast mode [ 98.368798][ T7293] bridge_slave_1: entered promiscuous mode [ 98.376226][ T7297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.388554][ T7297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.415504][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.430768][ T7297] team0: Port device team_slave_0 added [ 98.437668][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.447565][ T7297] team0: Port device team_slave_1 added [ 98.476139][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.483177][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.486681][ T7366] loop3: detected capacity change from 0 to 1024 [ 98.509075][ T7297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.509710][ T7297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.533370][ T7297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.548719][ T7366] loop3: detected capacity change from 0 to 512 [ 98.559625][ T7297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.576525][ T7366] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 98.581030][ T7293] team0: Port device team_slave_0 added [ 98.602514][ T7293] team0: Port device team_slave_1 added [ 98.631179][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.638198][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.664197][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.695988][ T7297] hsr_slave_0: entered promiscuous mode [ 98.704185][ T7297] hsr_slave_1: entered promiscuous mode [ 98.712635][ T7297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.720384][ T7297] Cannot create hsr debugfs directory [ 98.737787][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.744789][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.770710][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.787741][ T7344] chnl_net:caif_netlink_parms(): no params data found [ 98.832951][ T3364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.864669][ T7293] hsr_slave_0: entered promiscuous mode [ 98.872181][ T7293] hsr_slave_1: entered promiscuous mode [ 98.878049][ T7293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.885809][ T7293] Cannot create hsr debugfs directory [ 98.910847][ T3364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.966308][ T3364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.987548][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.994636][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.001815][ T7344] bridge_slave_0: entered allmulticast mode [ 99.008231][ T7344] bridge_slave_0: entered promiscuous mode [ 99.017059][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.024304][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.031550][ T7344] bridge_slave_1: entered allmulticast mode [ 99.038325][ T7344] bridge_slave_1: entered promiscuous mode [ 99.053182][ T3364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.081447][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.998'. [ 99.091900][ T7344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.123694][ T7297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.135689][ T7344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.173037][ T7297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.184071][ T7401] loop3: detected capacity change from 0 to 1024 [ 99.190988][ T7401] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 99.193741][ T7344] team0: Port device team_slave_0 added [ 99.216244][ T7344] team0: Port device team_slave_1 added [ 99.228967][ T7297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.248255][ T3364] bridge_slave_1: left allmulticast mode [ 99.254210][ T3364] bridge_slave_1: left promiscuous mode [ 99.259861][ T3364] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.268541][ T3364] bridge_slave_0: left allmulticast mode [ 99.274319][ T3364] bridge_slave_0: left promiscuous mode [ 99.280162][ T3364] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.361196][ T3364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.371428][ T3364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.381478][ T3364] bond0 (unregistering): Released all slaves [ 99.394993][ T7297] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.406483][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 99.419605][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.426670][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.452661][ T7344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.465277][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.472256][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.498272][ T7344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.524254][ T3364] hsr_slave_0: left promiscuous mode [ 99.530018][ T3364] hsr_slave_1: left promiscuous mode [ 99.535805][ T3364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.543296][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.546413][ T29] kauditd_printk_skb: 570 callbacks suppressed [ 99.546426][ T29] audit: type=1400 audit(1729183233.696:3157): avc: denied { ioctl } for pid=7417 comm="syz.3.1006" path="socket:[26344]" dev="sockfs" ino=26344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.582603][ T3364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.590029][ T3364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.598786][ T3364] veth1_macvtap: left promiscuous mode [ 99.601838][ T29] audit: type=1400 audit(1729183233.751:3158): avc: denied { create } for pid=7417 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 99.604244][ T3364] veth0_macvtap: left promiscuous mode [ 99.626036][ T29] audit: type=1400 audit(1729183233.779:3159): avc: denied { bind } for pid=7417 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 99.629178][ T3364] veth1_vlan: left promiscuous mode [ 99.648374][ T29] audit: type=1400 audit(1729183233.779:3160): avc: denied { name_bind } for pid=7417 comm="syz.3.1006" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 99.653586][ T3364] veth0_vlan: left promiscuous mode [ 99.674280][ T29] audit: type=1400 audit(1729183233.779:3161): avc: denied { node_bind } for pid=7417 comm="syz.3.1006" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 99.701141][ T29] audit: type=1400 audit(1729183233.779:3162): avc: denied { listen } for pid=7417 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 99.720655][ T29] audit: type=1400 audit(1729183233.779:3163): avc: denied { connect } for pid=7417 comm="syz.3.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 99.740187][ T29] audit: type=1400 audit(1729183233.779:3164): avc: denied { name_connect } for pid=7417 comm="syz.3.1006" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 99.761583][ T29] audit: type=1400 audit(1729183233.844:3165): avc: denied { accept } for pid=7417 comm="syz.3.1006" lport=46867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 99.845372][ T3364] team0 (unregistering): Port device team_slave_1 removed [ 99.856831][ T3364] team0 (unregistering): Port device team_slave_0 removed [ 99.887586][ T29] audit: type=1400 audit(1729183234.010:3166): avc: denied { create } for pid=7421 comm="syz.1.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.910111][ T7344] hsr_slave_0: entered promiscuous mode [ 99.917287][ T7344] hsr_slave_1: entered promiscuous mode [ 99.923607][ T7344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.931479][ T7344] Cannot create hsr debugfs directory [ 99.953208][ T7426] FAULT_INJECTION: forcing a failure. [ 99.953208][ T7426] name failslab, interval 1, probability 0, space 0, times 0 [ 99.965916][ T7426] CPU: 0 UID: 0 PID: 7426 Comm: syz.1.1009 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 99.976578][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.986688][ T7426] Call Trace: [ 99.990005][ T7426] [ 99.992916][ T7426] dump_stack_lvl+0xf2/0x150 [ 99.997492][ T7426] dump_stack+0x15/0x20 [ 100.001626][ T7426] should_fail_ex+0x223/0x230 [ 100.006288][ T7426] ? vm_area_dup+0x98/0x130 [ 100.010850][ T7426] should_failslab+0x8f/0xb0 [ 100.015500][ T7426] kmem_cache_alloc_noprof+0x4c/0x290 [ 100.020924][ T7426] vm_area_dup+0x98/0x130 [ 100.025234][ T7426] __split_vma+0xf7/0x6a0 [ 100.029562][ T7426] vms_gather_munmap_vmas+0x175/0x7a0 [ 100.034918][ T7426] ? mas_walk+0x204/0x320 [ 100.039230][ T7426] mmap_region+0x385/0x16e0 [ 100.043787][ T7426] do_mmap+0x718/0xb60 [ 100.047842][ T7426] vm_mmap_pgoff+0x133/0x290 [ 100.052420][ T7426] ksys_mmap_pgoff+0xd0/0x330 [ 100.057094][ T7426] ? fpregs_assert_state_consistent+0x83/0xa0 [ 100.063232][ T7426] x64_sys_call+0x1884/0x2d60 [ 100.067925][ T7426] do_syscall_64+0xc9/0x1c0 [ 100.072411][ T7426] ? clear_bhb_loop+0x55/0xb0 [ 100.077132][ T7426] ? clear_bhb_loop+0x55/0xb0 [ 100.081797][ T7426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.087735][ T7426] RIP: 0033:0x7feac018dff9 [ 100.092189][ T7426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.111852][ T7426] RSP: 002b:00007feabee01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 100.120311][ T7426] RAX: ffffffffffffffda RBX: 00007feac0345f80 RCX: 00007feac018dff9 [ 100.128265][ T7426] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020001000 [ 100.136265][ T7426] RBP: 00007feabee01090 R08: ffffffffffffffff R09: 0000000000000000 [ 100.144265][ T7426] R10: 0000000000003032 R11: 0000000000000246 R12: 0000000000000001 [ 100.152219][ T7426] R13: 0000000000000000 R14: 00007feac0345f80 R15: 00007ffd2b637d88 [ 100.160323][ T7426] [ 100.172976][ T7297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.183119][ T7297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.201066][ T7297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.224594][ T7297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.292609][ T7297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.305529][ T7297] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.315293][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.322359][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.332733][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.339789][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.417851][ T7297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.493411][ T7293] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.508961][ T7293] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.536331][ T7293] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.546748][ T7293] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.598817][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.612268][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.625851][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.632921][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.654181][ T7293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.664597][ T7293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.679110][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.686169][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.759255][ T7344] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.782091][ T7344] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.797669][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.810944][ T7344] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.822383][ T7344] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.871057][ T7297] veth0_vlan: entered promiscuous mode [ 100.881973][ T7297] veth1_vlan: entered promiscuous mode [ 100.916081][ T7297] veth0_macvtap: entered promiscuous mode [ 100.926012][ T7481] loop1: detected capacity change from 0 to 2048 [ 100.927960][ T7297] veth1_macvtap: entered promiscuous mode [ 100.953161][ T7293] veth0_vlan: entered promiscuous mode [ 100.955565][ T7481] EXT4-fs mount: 60 callbacks suppressed [ 100.955578][ T7481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.962555][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.986976][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.996955][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.007389][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.017262][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.027699][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.038506][ T7297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.049893][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.060371][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.070264][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.080777][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.090555][ T7297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.101066][ T7297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.113275][ T7297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.124173][ T7344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.132703][ T7293] veth1_vlan: entered promiscuous mode [ 101.140237][ T7297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.149060][ T7297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.157831][ T7297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.166538][ T7297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.189063][ C0] ================================================================== [ 101.194737][ T7293] veth0_macvtap: entered promiscuous mode [ 101.197137][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 101.204617][ T7293] veth1_macvtap: entered promiscuous mode [ 101.209984][ C0] [ 101.209989][ C0] read-write to 0xffff8881047a8eb8 of 8 bytes by interrupt on cpu 1: [ 101.210006][ C0] wq_worker_tick+0x63/0x240 [ 101.210023][ C0] sched_tick+0xd2/0x110 [ 101.210040][ C0] update_process_times+0x15a/0x180 [ 101.222029][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.226092][ C0] tick_nohz_handler+0x250/0x2d0 [ 101.230678][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.234882][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 101.234913][ C0] hrtimer_interrupt+0x210/0x7b0 [ 101.240077][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.250450][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 101.250482][ C0] sysvec_apic_timer_interrupt+0x6e/0x80 [ 101.255403][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.265152][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.265185][ C0] curve25519_base_arch+0x483/0x2e10 [ 101.265209][ C0] wg_noise_handshake_create_initiation+0x253/0x5f0 [ 101.270407][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.275296][ C0] wg_packet_handshake_send_worker+0xb3/0x150 [ 101.285708][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.291544][ C0] process_scheduled_works+0x483/0x9a0 [ 101.297175][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.306935][ C0] worker_thread+0x51d/0x6f0 [ 101.306953][ C0] kthread+0x1d1/0x210 [ 101.312940][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.318160][ C0] ret_from_fork+0x4b/0x60 [ 101.328064][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.335109][ C0] ret_from_fork_asm+0x1a/0x30 [ 101.342431][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.350935][ C0] [ 101.350940][ C0] read-write to 0xffff8881047a8eb8 of 8 bytes by interrupt on cpu 0: [ 101.356390][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.366748][ C0] wq_worker_tick+0x63/0x240 [ 101.366770][ C0] sched_tick+0xd2/0x110 [ 101.371339][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.375376][ C0] update_process_times+0x15a/0x180 [ 101.375402][ C0] tick_nohz_handler+0x250/0x2d0 [ 101.385185][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.389553][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 101.396764][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.401460][ C0] hrtimer_interrupt+0x210/0x7b0 [ 101.411876][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.414150][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 101.414183][ C0] sysvec_apic_timer_interrupt+0x6e/0x80 [ 101.422260][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.431995][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.436576][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.439666][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.440794][ C0] curve25519_arch+0x2d9e/0x4ff0 [ 101.452663][ T7293] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.456353][ C0] mix_dh+0x5e/0x1c0 [ 101.456377][ C0] wg_noise_handshake_create_initiation+0x2ad/0x5f0 [ 101.456398][ C0] wg_packet_handshake_send_worker+0xb3/0x150 [ 101.456424][ C0] process_scheduled_works+0x483/0x9a0 [ 101.461357][ T7293] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.471112][ C0] worker_thread+0x51d/0x6f0 [ 101.471133][ C0] kthread+0x1d1/0x210 [ 101.471152][ C0] ret_from_fork+0x4b/0x60 [ 101.471172][ C0] ret_from_fork_asm+0x1a/0x30 [ 101.476352][ T7293] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.486812][ C0] [ 101.486816][ C0] value changed: 0x0000000000000000 -> 0x0000000000002710 [ 101.486826][ C0] [ 101.486830][ C0] Reported by Kernel Concurrency Sanitizer on: [ 101.486837][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 101.486862][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.486877][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 101.486911][ C0] ================================================================== [ 101.491854][ T7293] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.703119][ T7011] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.724296][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.737227][ T7344] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.750358][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.757424][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.778675][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.785761][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.808242][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.837685][ T7344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.848075][ T7344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.897891][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.930978][ T7344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.961527][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.022506][ T7344] veth0_vlan: entered promiscuous mode [ 102.031123][ T7344] veth1_vlan: entered promiscuous mode [ 102.053130][ T11] bridge_slave_1: left allmulticast mode [ 102.058869][ T11] bridge_slave_1: left promiscuous mode [ 102.064520][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.077630][ T11] bridge_slave_0: left allmulticast mode [ 102.083299][ T11] bridge_slave_0: left promiscuous mode [ 102.089099][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.200472][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.212169][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.222504][ T11] bond0 (unregistering): Released all slaves [ 102.234846][ T7344] veth0_macvtap: entered promiscuous mode [ 102.246741][ T7344] veth1_macvtap: entered promiscuous mode [ 102.256836][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.267289][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.277131][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.287629][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.297514][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.307989][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.317905][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.328412][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.338268][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.348714][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.361078][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.378146][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.388696][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.398578][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.409002][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.418809][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.429278][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.439190][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.449623][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.459435][ T7344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.469917][ T7344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.481216][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.491504][ T11] hsr_slave_0: left promiscuous mode [ 102.497235][ T11] hsr_slave_1: left promiscuous mode [ 102.504892][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.512387][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.519798][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.527648][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.538440][ T11] veth1_macvtap: left promiscuous mode [ 102.544059][ T11] veth0_macvtap: left promiscuous mode [ 102.549539][ T11] veth1_vlan: left promiscuous mode [ 102.554784][ T11] veth0_vlan: left promiscuous mode [ 102.646842][ T11] team0 (unregistering): Port device team_slave_1 removed [ 102.660784][ T11] team0 (unregistering): Port device team_slave_0 removed [ 102.709227][ T7344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.717986][ T7344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.726744][ T7344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.735455][ T7344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0