last executing test programs: 4.814762471s ago: executing program 3 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004050000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001439) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x2, 0x300) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x5e, &(0x7f0000000b40)={[{@debug}, {@grpquota}, {@data_err_ignore}, {@i_version}, {@jqfmt_vfsold}, {@debug}]}, 0x1, 0x44b, &(0x7f00000006c0)="$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") r4 = fspick(r3, &(0x7f0000000bc0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000180)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000007000000010001000800000000000000", @ANYRES32, @ANYBLOB="00000000000e00000000ed000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000540)=0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x6}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x7176, 0x8, 0x1, 0x4, 0x8}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0xc}}}, 0x24}}, 0x0) 4.602059565s ago: executing program 3 (id=470): gettid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000d40), 0x9, 0x61d, &(0x7f0000000700)="$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") mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1baa87f, &(0x7f00000003c0)=ANY=[@ANYBLOB="73e97a653d303300"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) socket(0x1e, 0x5, 0x0) (async) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="08003400020000010500350000000000050033"], 0x34}}, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x8000000d) (async) sendfile(r1, r0, 0x0, 0x8000000d) socket$l2tp6(0xa, 0x2, 0x73) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = socket(0x80000000000000a, 0x2, 0x0) writev(r8, &(0x7f0000000680)=[{&(0x7f0000000440)="540eddfd1648c1935827cfd485c1718c7f86993823b8aaed4d1cf947991789447d4b49e65db7e8e8b8eafe93d15bc8e8d92a9d6697d053a4fdf45a8e1df0d1b5cce3b441265b04a1ccfd555d6509b3c0b0e9c174e839988a56030d6fb81621b282bec6ad2d73891c479313163678801f510480289ed6edbebad90dca55a972c8aac0fe8cf75de481bc28280e0b465634b9bc9b2855dcad8aa57dca552d09b23f6d909828084898050715d522e043bb6e4bc3b41f55", 0xb5}, {&(0x7f0000000500)="dfc6b34a233df6744a9c6c6264b0c84c77ef3e7a9529822c3af1038a19ea4fcbbfb3a53b10e9e1c963f53697fcb6e0cdd75bab3054d79c1e238c17c30006a9928a20e96bfc8f439dc82d45d46f147d4c", 0x50}, {&(0x7f0000000580)="ebf6aa511019ee2dc3a17ff09abbc98248f58992e39c5c164f23b9e8b2bd1393f19f032dbca8282a8d74979aeec4eafef6f0cfecd0ec6debd2", 0x39}, {&(0x7f0000001b40)="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", 0x1000}], 0x4) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0xffa4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0xffa4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x37, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x37, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x1}, 0x18) r10 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r10, 0x409, 0xb) ioctl$SIOCGETVIFCNT(r8, 0x89e0, &(0x7f0000000300)={0xffffffffffffffff}) sendmmsg$inet6(r7, &(0x7f0000006cc0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008000000290000000400000032000000000000001400000000000000290000000b0000000000000400000000"], 0x30}}, {{&(0x7f0000000780)={0xa, 0x4e22, 0x6, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000006d80)=[@tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x4}}}], 0x30}}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@noload}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") 4.38949869s ago: executing program 3 (id=471): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) 1.426738744s ago: executing program 4 (id=524): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1250a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_config_ext={0xfffffffffffffe8d, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000040035fc00000000050000000000f3ffa3987afb1b0a16f32d36fb8de3e3db9a095cc8a9ed0240ff606a37f866f0316748cd858a006438f19af3c0a7b7f53dc43fdeab032f2353e392ec64d0352c5888dd29d68b8c842b32a4f66f4246ce5c7c2b291396ebc9db268b6fd223f81031af8adbc16151e3a5f1cd10dca600c393ac419e9ea056b5a1817dc97ec3adb1fe18bbc3398013cc535e3dcf5c5bdb61ff68c9eca5d26e4791a91897fa8eaf136a8feba2504f605aa43db267d4dc2b90510b5d606a0ba2b009e3c169dde5239972e9c64df39d97002514180f05f1eea995cab24f497f7b2a1ca10b2e2d4b5218600ca7844df86b961e6f83fbe5fb27e778d1a8a36ae2fb8d04b6a0aa2302035f8ba3a6c0a37381dc3a201a387c583b3db4c359be8801e3e567c9e4ec0ae51019caffe61bcdc313554bf4891b748bed79bd591ab07c675c1774fe12f555a2b3f2abeefe92e7e355155cf192e64f00"/367, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @empty, 0x1, "d64724f6257e43b341dc333940c0ca00", 0xffffffff, 0x0, 0x409, 0xc3b}, 0x3c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20020084, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000007c0)={0x80, 0x8, 0xcc, 0x38b, 0x0, 0x102}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180001000020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000958fe19350c5d78425656516ce0f8cc22a3209e717ed0719a3e9a45905fef1de04440bdf60c8148d684f3f50e3e1b85e5d7e4650c15e0070ae49112cea16acdbd3a1032d1a78435066e39440b855f8058b671ccaeee8ae2fef33b28692b562c05bd887fd3e80ede18fb4d05cf714fc1a21f61f0f3debdb72deb1cd53c296d8da1dc9ecbe2904a9ef414f97a0ebf1a5f728fc680d685a158fd2ed3e3ac68485"], &(0x7f0000000280)='GPL\x00', 0xf, 0x55, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='rpcgss_svc_seqno_bad\x00', r3, 0x0, 0x4}, 0xffffffed) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r5, &(0x7f0000000300)=""/150, 0x96, 0x300) 1.401411867s ago: executing program 2 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x23) statfs(0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x2, [{}, {}]}, 0x48) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, 0x140f, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0xfffffffd}}], 0x30}], 0x1, 0x0) 1.280246641s ago: executing program 2 (id=526): bpf$MAP_CREATE(0x0, 0x0, 0xffffff11) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 1.165066164s ago: executing program 0 (id=528): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20410}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x19, 0x1f}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x0) 1.163982444s ago: executing program 1 (id=530): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "bc1b87e378fd4942"}}, 0x48}}, 0x0) 1.087149143s ago: executing program 1 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b330000000000ffff001500000008000300", @ANYRES32=0x0, @ANYBLOB="05002a"], 0x2c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r6, 0x0, 0x17, &(0x7f0000000a80)='U', 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r8, &(0x7f0000000040)="eee15d69c15fa1f48eb845edf1a1f540a9b7e50a98c6aff5d543827da8e8abec3d7d25ced0f094ef8d4643755a99bd0ef6d52a81", 0x34, 0x10, &(0x7f0000000080)={0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 1.086802953s ago: executing program 2 (id=532): shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) bind$can_raw(r1, &(0x7f0000000280), 0x10) 1.080242554s ago: executing program 1 (id=533): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000040)='fd/4\x00') fcntl$setstatus(r3, 0x4, 0xfa3bc5f6db214b7e) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4be, &(0x7f0000000540)="$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") r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r6, 0x9, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@lsrr={0x83, 0x13, 0x0, [@local, @loopback, @rand_addr=0x64010100, @private=0xa010100]}, @cipso={0x86, 0x2a, 0x0, [{0x0, 0x6, "4b6cefc5"}, {0x6, 0xd, "102bc870b88f2f0dc1eee2"}, {0x0, 0x8, "2189ea43a214"}, {0x0, 0x9, "ffd11634eea26b"}]}]}}}}}}}, 0x0) chmod(&(0x7f0000000180)='./file1\x00', 0x4) pread64(r3, &(0x7f00000002c0)=""/80, 0x50, 0x1f00) 1.001053183s ago: executing program 0 (id=534): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYBLOB="82ccc48e296b2a200016b174ae24017cfe66e45af0a4f773272c19665e5b69b28637f67f3f3c8f01a50a86ee406bff045840d98a7e90f5270b073ee40994f788f0ef63429e0df2d45a2f4fb46ad185cd7fc7078cfdc3f3bd8d8731d808a71ad8aec1c80c5861dd7f0625ca0159eb616cb3c24d5d946505500dc5d03808e1e60dcc2b295d3e9b22775270f0b7dbdca6e3809657a1782a9f29ade10167b1e06dc7851815e6978438faba7fdc5142a79a9363c159cd451326e3786ffe5f28f97600272a62cdfd760e2a396dfd4edd1f954b9a86e2306e57b2191e3e9b3ca9ce922113a186bcd13fb8bb74f02fbfe1e447ae6f1bc0", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioperm(0x2, 0x7ff, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) fsmount(r1, 0x0, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket(0x1, 0x800, 0x0) recvmmsg(r2, &(0x7f0000001b40), 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x5452, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x7a) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff5) 965.405897ms ago: executing program 1 (id=535): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18ed000000000020e89fb8995f048b2b880663901f9512cc03000200fd0000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@multicast2, @in6=@empty, 0x4f24, 0x5, 0x4e21, 0x3, 0xa, 0xa0, 0xa0, 0x2f}, {0x8136, 0x2, 0x3, 0x5, 0x6, 0x6, 0x2, 0x8}, {0x8, 0x9, 0x4, 0x9}, 0xd1c, 0x6e6bba, 0x1, 0x0, 0x2, 0x2}, {{@in6=@mcast1, 0x4d3, 0x33}, 0xa, @in=@multicast1, 0x3507, 0x4, 0x3, 0x76, 0x9, 0xfffffffd, 0xa}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000a00), 0x80402, 0x0) set_mempolicy(0x4005, &(0x7f0000000000)=0x80000084, 0x6) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x61d, &(0x7f0000001680)="$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") r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001980)=[{0x20, 0x84, 0x8, "d10dbbdbe757693702"}, {0x18, 0x84, 0x0, 'b'}], 0x38}, 0x41) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$cgroup_int(r4, 0x0, 0x2) 633.600356ms ago: executing program 2 (id=536): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x44) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x40000) 587.467312ms ago: executing program 2 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r1, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x38}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) io_getevents(r3, 0x2, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000d80), 0x208e24b) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffdf2, 0x10, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x1d4) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000240)={0x3920e, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xf, 0x2000002}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) personality(0xeaffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000d40)={0x6c8, r7, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x168, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @broadcast, @initial, {0x5, 0x5}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x4, @default, 0x80, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x5}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x43, 0xa9, 0x80}}, @val={0x2d, 0x1a, {0x10, 0x1, 0x3, 0x0, {0xf1c, 0x4f0, 0x0, 0xe0, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x400, 0x400, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x9, 0x20}}, @val={0x76, 0x6, {0x56, 0xe, 0x23, 0x8}}, [{0xdd, 0xf3, "65e29fe38eb0365a955bc4ecd77ee34a48099a703642f7173655748b6271ec6020b74dd6b6cc548f9b9dc31688eb9146beafff6618c77e379864f6c49326e0e2e860d5e7dc1d8f710f997b5511f4dee3a481e4f0658b1b93dcb5d93a9e0ae8ae78c7410d095791fa991c8541a278062822abd373eecb5515ae872901d1b1ea111a288a2b230f1a61314795ab0e0593ed962c1b71c84217a06ee9558cc8989104a4a2eca08a4d0d43297149a1fc9f2afcee4c3b9bd541b439ff78a02a54f903cf6d0782932daeba75ac87d97d202f3608b34bb9f8a8f44e977cacaf80bd8f03e9fc77ef7f5df07e9eabb7e1ff9686047c838c50"}]}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0xe}}}, @NL80211_ATTR_FRAME={0xb9, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @from_mac, {0xd, 0xa8}, @value=@ver_80211n={0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x8, 0x2a, @default, @val, @val={0x2d, 0x1a, {0x1, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x300}}, [{0xdd, 0x73, "2c94b58dd5b3484e60353466f08127dc849f4c4fa093e046e3dcfd77ade4f36d711928e21b503db11bab400b786d0b10c92b5bbb4cdbe6e0245153e03c6608763a1f495fa01539f8957a29e87b8f49397b8f3d15b834c6e0e45b1e565f6568e9dff04c5e8ee1c7c89c661ced60cd19023674eb"}]}}, @NL80211_ATTR_FRAME={0x2f8, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8f}, @device_a, @device_a, @initial, {0x1, 0x717}, @device_b, @value={0x4, 0x0, 0x2, 0x1, 0x81}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @random="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"}}, @NL80211_ATTR_FRAME={0x15c, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xaaf}, @device_a, @initial, @device_b, {0x9, 0x7}, "", @void, @value=@ver_80211n={0x0, 0x2a, 0x3, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_a, @device_a, 0x56, "86195b10d3c4c14dfe42b19cc3d8c65cf05eb7657c921b13d4373e12d6c9b15995e81b015e654eb0701dc6076454d68bc3b71d0b4102e6a9a08cd69f28acb73ace9c61ae428a10f72de8a66a99bb356c4460c85322d1"}, {@device_b, @device_b, 0xca, "638f6c80030aa9d35855b53dcde4fd86e4383c0007153892a69e698ded6426837a57daa9bd802a4dfe7118e511443e16f65b38997846f85aa4206078659519bb4885432ce5944361495fe93e5ca97ce26473a27e115164aeaa88897f108cb516d073804f3c43016c9e98a0388c272ae635bb92cc83b4800ab4ceece19d64cfb3963d9f120ffe65a3cf58976b056f500817f065d80821923a3aa59d7140dbe4bba7cce3f515b2d3d8f79dc6750f016ef9cf5a7f4e8c9211b0d2a13fee3b0023872f5f6cbca598a152cbfd"}]}}, @NL80211_ATTR_MAC={0xa}]}, 0x6c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r1, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x7b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf3c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26b}], @chandef_params, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x20004801) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 532.343328ms ago: executing program 4 (id=538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="0000007cda2db8e2eaea73200000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x19, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) 418.724631ms ago: executing program 1 (id=539): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) preadv2(r4, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) creat(0x0, 0x104) fallocate(r5, 0x0, 0x0, 0x10fff9) 301.256605ms ago: executing program 4 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000ae18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB, @ANYRESOCT=r1], 0x0, 0xfffff134, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) r4 = dup(r3) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001f00)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@keyring) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1fd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0x0) socket(0x2, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='scsi_dispatch_cmd_error\x00', r7, 0x0, 0x7}, 0xffffffffffffff73) msgsnd(0x0, 0x0, 0x0, 0x800) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000190000000000000000000000050000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 234.904932ms ago: executing program 4 (id=541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000c90400"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x10000) getsockname(r2, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) r12 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40082404, &(0x7f0000000200)=0x800) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$kcm(0x25, 0x5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000008db40e19f6fc09b9af0000000000070000000900010073797a3000bdbbff2df6625c560a010400000000000000000700000408000a60000000000900020073797a30000000000900110073797a30000000000800054000000180090001006c6177740000000004000280140001800a000100696e6e65720000c225240f0af313df96487d1faf23a400040002801400000010"], 0xb8}}, 0x20050800) 205.633336ms ago: executing program 1 (id=542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x60002015}) read$char_usb(r5, &(0x7f0000001980)=""/179, 0xb3) socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 114.763936ms ago: executing program 2 (id=543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b330000000000ffff001500000008000300", @ANYRES32=0x0, @ANYBLOB="05002a"], 0x2c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r6, 0x0, 0x17, &(0x7f0000000a80)='U', 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r8, &(0x7f0000000040)="eee15d69c15fa1f48eb845edf1a1f540a9b7e50a98c6aff5d543827da8e8abec3d7d25ced0f094ef8d4643755a99bd0ef6d52a81", 0x34, 0x10, &(0x7f0000000080)={0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) 114.326036ms ago: executing program 0 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000b70800000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000640)=@bloom_filter={0x1e, 0x3, 0x6, 0x81, 0x4008, 0x1, 0xba9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x7, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xffffffffffffff6d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xef) 72.312601ms ago: executing program 4 (id=545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000000000000b70800000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000640)=@bloom_filter={0x1e, 0x3, 0x6, 0x81, 0x4008, 0x1, 0xba9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x7, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xffffffffffffff6d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xef) 44.601114ms ago: executing program 0 (id=546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004050000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001439) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x2, 0x300) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x5e, &(0x7f0000000b40)={[{@debug}, {@grpquota}, {@data_err_ignore}, {@i_version}, {@jqfmt_vfsold}, {@debug}]}, 0x1, 0x44b, &(0x7f00000006c0)="$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") r4 = fspick(r3, &(0x7f0000000bc0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000180)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000007000000010001000800000000000000", @ANYRES32, @ANYBLOB="00000000000e00000000ed000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000540)=0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x6}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x7176, 0x8, 0x1, 0x4, 0x8}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0xc}}}, 0x24}}, 0x0) 0s ago: executing program 4 (id=547): openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="460020000400000008400000080000855875e6b3ed3abd0000000000e97787cf7a39e4a577d7d378c097c9609a4dc46fc39cc31b9667b1fb5550a1f785241760ababe2d731472670ac00fdf6bdd9610e7479b24248d4b6a127d7cc099b2a9fe626720b99010a8cfef26518010cd7bee9e78f776f22da893930144457", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffc}}) io_uring_enter(r2, 0x47fa, 0x9bbe, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b000000080000000c00fc0000ffffffff010000af1dd3672a321405c14f31bc55ad1a64bf37c7798e7e2d511c87dc73b08ac956ab799b780c6949b118ec52dbb04545a7b8b7d666354706f6c19e3e48fcdc0ee12cc04f420637af39588dda667b20c7b035b3471bf97393ed63f9", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000f40)='fdinfo\x00') fchdir(r7) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000040)='.\x00', 0x10000a0) setreuid(0xee01, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r10, 0x7ff, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x7c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8a}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x40489c0) getdents64(r10, 0x0, 0x0) unshare(0x2040400) signalfd4(r6, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x8, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) kernel console output (not intermixed with test programs): [4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.987717][ T4467] syz.2.203[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.999167][ T4467] syz.2.203[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.010667][ T4467] syz.2.203[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.060882][ T4467] syz.2.203[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.072411][ T4467] syz.2.203[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.083829][ T4467] syz.2.203[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.132955][ T4472] loop7: detected capacity change from 0 to 16384 [ 54.190139][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.197650][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.205203][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.212650][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.220079][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.227493][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.234958][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.242416][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.249903][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.257440][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.264897][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.272381][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.279874][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.287267][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.294703][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.302153][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.309561][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.316952][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.324377][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.331872][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.339311][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.346723][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.354267][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.361718][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.369173][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.376609][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.384097][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.391521][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.398933][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.406329][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.413733][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.421148][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.428543][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.435931][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.443490][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.450891][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.458377][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.465850][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.473270][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.480684][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.488108][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.495531][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.503002][ T984] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 54.511586][ T984] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 54.558315][ T4472] loop7: detected capacity change from 16384 to 16383 [ 54.599409][ T4476] Invalid logical block size (65472) [ 54.618496][ T4484] loop2: detected capacity change from 0 to 512 [ 54.633501][ T4484] EXT4-fs (loop2): orphan cleanup on readonly fs [ 54.636583][ T4487] loop1: detected capacity change from 0 to 512 [ 54.640198][ T4484] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 54.658749][ T4484] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.211: invalid indirect mapped block 2683928664 (level 1) [ 54.669820][ T4487] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.684689][ T4484] EXT4-fs (loop2): Remounting filesystem read-only [ 54.686708][ T4490] program syz.4.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.692981][ T4484] EXT4-fs (loop2): 1 truncate cleaned up [ 54.706275][ T4490] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 54.706939][ T4484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.715057][ T4487] EXT4-fs (loop1): 1 truncate cleaned up [ 54.727101][ T4484] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 54.739841][ T4484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.743167][ T4487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.763150][ T4494] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4494 comm=syz.4.214 [ 54.777527][ T4487] syz.1.212[4487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.917139][ T4504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.218'. [ 55.598917][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.622749][ T4532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.221'. [ 55.754818][ T4543] program syz.2.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.764341][ T4543] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 55.836212][ T4545] tipc: Enabling of bearer rejected, failed to enable media [ 55.903686][ T4549] loop2: detected capacity change from 0 to 512 [ 55.960471][ T4549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.983152][ T4549] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.002152][ T4549] Process accounting resumed [ 56.011681][ T4549] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 56.034529][ T3578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.136192][ T4559] loop2: detected capacity change from 0 to 512 [ 56.143094][ T4559] EXT4-fs: Ignoring removed i_version option [ 56.156079][ T4559] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 56.171576][ T4559] System zones: 1-12 [ 56.178945][ T4559] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.230: bg 0: block 131: padding at end of block bitmap is not set [ 56.196020][ T4559] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 56.205938][ T4559] EXT4-fs (loop2): 1 truncate cleaned up [ 56.212902][ T4559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.270418][ T3578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.320087][ T4568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 56.341000][ T4568] netlink: 68 bytes leftover after parsing attributes in process `syz.2.234'. [ 56.436440][ T4575] program syz.2.237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.446865][ T4575] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 56.551852][ T4579] loop1: detected capacity change from 0 to 2048 [ 56.572387][ T4579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.586638][ T4579] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 56.601822][ T4579] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 56.614181][ T4579] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.614181][ T4579] [ 56.623867][ T4579] EXT4-fs (loop1): Total free blocks count 0 [ 56.629870][ T4579] EXT4-fs (loop1): Free/Dirty block details [ 56.635839][ T4579] EXT4-fs (loop1): free_blocks=2415919504 [ 56.641602][ T4579] EXT4-fs (loop1): dirty_blocks=32 [ 56.646795][ T4579] EXT4-fs (loop1): Block reservation details [ 56.652817][ T4579] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 56.698788][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.843173][ T4596] loop7: detected capacity change from 0 to 16384 [ 56.862299][ T4597] netlink: 92 bytes leftover after parsing attributes in process `syz.4.243'. [ 57.028204][ T4598] loop7: detected capacity change from 16384 to 16383 [ 57.158277][ T4599] Invalid logical block size (65472) [ 57.500655][ T4577] +}[@ (4577) used greatest stack depth: 7288 bytes left [ 57.558464][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 57.558482][ T29] audit: type=1400 audit(2000000013.200:1813): avc: denied { map } for pid=4605 comm="syz.1.246" path="socket:[7587]" dev="sockfs" ino=7587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 57.626500][ T4612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.249'. [ 57.780277][ T29] audit: type=1400 audit(2000000013.460:1814): avc: denied { mount } for pid=4619 comm="syz.2.252" name="/" dev="ramfs" ino=7639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.805628][ T4620] bio_check_eod: 5 callbacks suppressed [ 57.805645][ T4620] syz.2.252: attempt to access beyond end of device [ 57.805645][ T4620] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.132917][ T29] audit: type=1400 audit(2000000013.810:1815): avc: denied { write } for pid=4627 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.183525][ T29] audit: type=1400 audit(2000000013.860:1816): avc: denied { accept } for pid=4627 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.369584][ T29] audit: type=1326 audit(2000000014.050:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 58.376518][ T4635] program syz.4.256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.392949][ T29] audit: type=1326 audit(2000000014.050:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 58.425567][ T29] audit: type=1326 audit(2000000014.050:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 58.448963][ T29] audit: type=1326 audit(2000000014.050:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 58.448976][ T4635] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 58.480748][ T29] audit: type=1326 audit(2000000014.050:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 58.504109][ T29] audit: type=1326 audit(2000000014.050:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4634 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 58.533047][ T4638] FAULT_INJECTION: forcing a failure. [ 58.533047][ T4638] name failslab, interval 1, probability 0, space 0, times 0 [ 58.533437][ T4640] netlink: 256 bytes leftover after parsing attributes in process `syz.4.258'. [ 58.545830][ T4638] CPU: 0 UID: 0 PID: 4638 Comm: syz.2.257 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 58.545857][ T4638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.545870][ T4638] Call Trace: [ 58.545879][ T4638] [ 58.581808][ T4638] dump_stack_lvl+0xf2/0x150 [ 58.586413][ T4638] dump_stack+0x15/0x20 [ 58.590611][ T4638] should_fail_ex+0x223/0x230 [ 58.595385][ T4638] ? skb_clone+0x154/0x1f0 [ 58.599848][ T4638] should_failslab+0x8f/0xb0 [ 58.604447][ T4638] kmem_cache_alloc_noprof+0x4c/0x290 [ 58.609843][ T4638] skb_clone+0x154/0x1f0 [ 58.614106][ T4638] __netlink_deliver_tap+0x2bd/0x4c0 [ 58.619468][ T4638] netlink_sendskb+0x126/0x150 [ 58.624311][ T4638] netlink_unicast+0x291/0x670 [ 58.629088][ T4638] netlink_ack+0x4c4/0x4f0 [ 58.633541][ T4638] netlink_rcv_skb+0x19c/0x230 [ 58.638321][ T4638] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 58.643802][ T4638] rtnetlink_rcv+0x1c/0x30 [ 58.648237][ T4638] netlink_unicast+0x599/0x670 [ 58.653018][ T4638] netlink_sendmsg+0x5cc/0x6e0 [ 58.657792][ T4638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.663095][ T4638] __sock_sendmsg+0x140/0x180 [ 58.667859][ T4638] ____sys_sendmsg+0x312/0x410 [ 58.672695][ T4638] __sys_sendmmsg+0x259/0x500 [ 58.677413][ T4638] __x64_sys_sendmmsg+0x57/0x70 [ 58.682353][ T4638] x64_sys_call+0xa49/0x2d60 [ 58.686956][ T4638] do_syscall_64+0xc9/0x1c0 [ 58.691478][ T4638] ? clear_bhb_loop+0x55/0xb0 [ 58.696258][ T4638] ? clear_bhb_loop+0x55/0xb0 [ 58.700955][ T4638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.706890][ T4638] RIP: 0033:0x7f6f2640dff9 [ 58.711310][ T4638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.730964][ T4638] RSP: 002b:00007f6f25060038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 58.739379][ T4638] RAX: ffffffffffffffda RBX: 00007f6f265c6058 RCX: 00007f6f2640dff9 [ 58.747352][ T4638] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 58.755389][ T4638] RBP: 00007f6f25060090 R08: 0000000000000000 R09: 0000000000000000 [ 58.763404][ T4638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.771458][ T4638] R13: 0000000000000000 R14: 00007f6f265c6058 R15: 00007ffc9bc85578 [ 58.779438][ T4638] [ 58.912459][ T4657] netlink: 92 bytes leftover after parsing attributes in process `syz.3.262'. [ 58.943279][ T4661] loop4: detected capacity change from 0 to 512 [ 58.956221][ T4661] EXT4-fs: Ignoring removed i_version option [ 58.981680][ T4661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 58.994105][ T4661] System zones: 1-12 [ 59.019668][ T4661] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.265: bg 0: block 131: padding at end of block bitmap is not set [ 59.034514][ T4667] FAULT_INJECTION: forcing a failure. [ 59.034514][ T4667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.047628][ T4667] CPU: 1 UID: 0 PID: 4667 Comm: syz.2.267 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 59.058235][ T4667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.068304][ T4667] Call Trace: [ 59.071587][ T4667] [ 59.074532][ T4667] dump_stack_lvl+0xf2/0x150 [ 59.079143][ T4667] dump_stack+0x15/0x20 [ 59.083303][ T4667] should_fail_ex+0x223/0x230 [ 59.087997][ T4667] should_fail+0xb/0x10 [ 59.092293][ T4667] should_fail_usercopy+0x1a/0x20 [ 59.097337][ T4667] _copy_from_user+0x1e/0xd0 [ 59.101998][ T4667] do_ipv6_setsockopt+0x1ef/0x2250 [ 59.107115][ T4667] ? _parse_integer+0x27/0x30 [ 59.111829][ T4667] ? kstrtoull+0x110/0x140 [ 59.116276][ T4667] ? __rcu_read_unlock+0x4e/0x70 [ 59.121224][ T4667] ? avc_has_perm_noaudit+0x1cc/0x210 [ 59.126615][ T4667] ipv6_setsockopt+0x57/0x130 [ 59.131294][ T4667] tcp_setsockopt+0x93/0xb0 [ 59.135849][ T4667] sock_common_setsockopt+0x64/0x80 [ 59.141063][ T4667] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 59.146965][ T4667] smc_setsockopt+0x182/0x7a0 [ 59.151716][ T4667] ? __pfx_smc_setsockopt+0x10/0x10 [ 59.156979][ T4667] __sys_setsockopt+0x1cc/0x240 [ 59.161952][ T4667] __x64_sys_setsockopt+0x66/0x80 [ 59.167016][ T4667] x64_sys_call+0x278d/0x2d60 [ 59.171702][ T4667] do_syscall_64+0xc9/0x1c0 [ 59.176285][ T4667] ? clear_bhb_loop+0x55/0xb0 [ 59.180975][ T4667] ? clear_bhb_loop+0x55/0xb0 [ 59.185684][ T4667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.191606][ T4667] RIP: 0033:0x7f6f2640dff9 [ 59.196098][ T4667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.215717][ T4667] RSP: 002b:00007f6f25081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 59.224194][ T4667] RAX: ffffffffffffffda RBX: 00007f6f265c5f80 RCX: 00007f6f2640dff9 [ 59.232232][ T4667] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000008 [ 59.240296][ T4667] RBP: 00007f6f25081090 R08: 0000000000000008 R09: 0000000000000000 [ 59.248268][ T4667] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 59.256251][ T4667] R13: 0000000000000000 R14: 00007f6f265c5f80 R15: 00007ffc9bc85578 [ 59.264303][ T4667] [ 59.272370][ T4661] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 59.281644][ T4661] EXT4-fs (loop4): 1 truncate cleaned up [ 59.287701][ T4661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.320645][ T4052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.359879][ T4671] loop2: detected capacity change from 0 to 512 [ 59.370587][ T4671] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.380619][ T4669] program syz.1.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.394825][ T4671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b856c118, mo2=0002] [ 59.411066][ T4669] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 59.414295][ T4671] System zones: 1-12 [ 59.428518][ T4671] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.270: corrupted in-inode xattr: e_value size too large [ 59.477563][ T4685] loop1: detected capacity change from 0 to 512 [ 59.497083][ T4671] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.270: couldn't read orphan inode 15 (err -117) [ 59.511187][ T4671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.524757][ T4685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.539131][ T4685] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.550426][ T4671] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 59.605306][ T3578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.616070][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.811992][ T4704] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.820835][ T4704] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.829662][ T4704] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.838424][ T4704] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.847512][ T4704] vxlan0: entered promiscuous mode [ 59.852782][ T4704] vxlan0: entered allmulticast mode [ 59.879260][ T4704] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.879416][ T4707] FAULT_INJECTION: forcing a failure. [ 59.879416][ T4707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.888209][ T4704] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.888238][ T4704] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.901334][ T4707] CPU: 0 UID: 0 PID: 4707 Comm: syz.1.282 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 59.910205][ T4704] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.918974][ T4707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.948493][ T4707] Call Trace: [ 59.951793][ T4707] [ 59.954830][ T4707] dump_stack_lvl+0xf2/0x150 [ 59.959438][ T4707] dump_stack+0x15/0x20 [ 59.963598][ T4707] should_fail_ex+0x223/0x230 [ 59.968375][ T4707] should_fail+0xb/0x10 [ 59.972648][ T4707] should_fail_usercopy+0x1a/0x20 [ 59.977808][ T4707] _copy_from_user+0x1e/0xd0 [ 59.982429][ T4707] do_ipv6_setsockopt+0x1ef/0x2250 [ 59.987554][ T4707] ? _parse_integer+0x27/0x30 [ 59.992239][ T4707] ? kstrtoull+0x110/0x140 [ 59.996700][ T4707] ? __rcu_read_unlock+0x4e/0x70 [ 60.001727][ T4707] ? avc_has_perm_noaudit+0x1cc/0x210 [ 60.007120][ T4707] ipv6_setsockopt+0x57/0x130 [ 60.011819][ T4707] tcp_setsockopt+0x93/0xb0 [ 60.016329][ T4707] sock_common_setsockopt+0x64/0x80 [ 60.021583][ T4707] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 60.027484][ T4707] smc_setsockopt+0x182/0x7a0 [ 60.032229][ T4707] ? __pfx_smc_setsockopt+0x10/0x10 [ 60.037486][ T4707] __sys_setsockopt+0x1cc/0x240 [ 60.042356][ T4707] __x64_sys_setsockopt+0x66/0x80 [ 60.047439][ T4707] x64_sys_call+0x278d/0x2d60 [ 60.052200][ T4707] do_syscall_64+0xc9/0x1c0 [ 60.056712][ T4707] ? clear_bhb_loop+0x55/0xb0 [ 60.061547][ T4707] ? clear_bhb_loop+0x55/0xb0 [ 60.066259][ T4707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.072162][ T4707] RIP: 0033:0x7f19fd13dff9 [ 60.076580][ T4707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.096318][ T4707] RSP: 002b:00007f19fbdb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.104731][ T4707] RAX: ffffffffffffffda RBX: 00007f19fd2f5f80 RCX: 00007f19fd13dff9 [ 60.112704][ T4707] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000006 [ 60.120673][ T4707] RBP: 00007f19fbdb7090 R08: 0000000000000008 R09: 0000000000000000 [ 60.128643][ T4707] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 60.136683][ T4707] R13: 0000000000000000 R14: 00007f19fd2f5f80 R15: 00007ffcbc569f68 [ 60.144662][ T4707] [ 60.227784][ T4709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 60.245559][ T4713] program syz.3.284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.254891][ T4713] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 60.357674][ T4732] loop4: detected capacity change from 0 to 512 [ 60.371135][ T4732] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.389829][ T4732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 60.398962][ T4732] System zones: 1-12 [ 60.403564][ T4732] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.417903][ T4732] EXT4-fs (loop4): 1 truncate cleaned up [ 60.424685][ T4732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.456865][ T4052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.470280][ T4742] FAULT_INJECTION: forcing a failure. [ 60.470280][ T4742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.483946][ T4742] CPU: 1 UID: 0 PID: 4742 Comm: syz.2.294 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 60.494579][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.504725][ T4742] Call Trace: [ 60.508019][ T4742] [ 60.510971][ T4742] dump_stack_lvl+0xf2/0x150 [ 60.515584][ T4742] dump_stack+0x15/0x20 [ 60.519761][ T4742] should_fail_ex+0x223/0x230 [ 60.524464][ T4742] should_fail+0xb/0x10 [ 60.528636][ T4742] should_fail_usercopy+0x1a/0x20 [ 60.533753][ T4742] _copy_from_user+0x1e/0xd0 [ 60.538401][ T4742] do_sched_setscheduler+0x4d/0x1d0 [ 60.543617][ T4742] __x64_sys_sched_setscheduler+0x17/0x30 [ 60.549486][ T4742] x64_sys_call+0x2342/0x2d60 [ 60.554206][ T4742] do_syscall_64+0xc9/0x1c0 [ 60.558719][ T4742] ? clear_bhb_loop+0x55/0xb0 [ 60.563442][ T4742] ? clear_bhb_loop+0x55/0xb0 [ 60.568165][ T4742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.574107][ T4742] RIP: 0033:0x7f6f2640dff9 [ 60.578523][ T4742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.598133][ T4742] RSP: 002b:00007f6f25081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000090 [ 60.606552][ T4742] RAX: ffffffffffffffda RBX: 00007f6f265c5f80 RCX: 00007f6f2640dff9 [ 60.614577][ T4742] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 00000000000000b6 [ 60.622545][ T4742] RBP: 00007f6f25081090 R08: 0000000000000000 R09: 0000000000000000 [ 60.630512][ T4742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.638500][ T4742] R13: 0000000000000000 R14: 00007f6f265c5f80 R15: 00007ffc9bc85578 [ 60.646478][ T4742] [ 60.655404][ T4743] loop1: detected capacity change from 0 to 512 [ 60.710365][ T4743] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.293: bg 0: block 248: padding at end of block bitmap is not set [ 60.725211][ T4743] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.293: Failed to acquire dquot type 1 [ 60.740676][ T4750] netlink: 92 bytes leftover after parsing attributes in process `syz.4.295'. [ 60.750829][ T4743] EXT4-fs (loop1): 1 truncate cleaned up [ 60.756870][ T4743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.771355][ T4743] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.789094][ T4741] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz.1.293: deleted inode referenced: 12 [ 61.297948][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.308259][ T174] EXT4-fs error (device loop1): ext4_release_dquot:6902: comm kworker/u8:5: Failed to release dquot type 1 [ 61.332650][ T4759] loop3: detected capacity change from 0 to 512 [ 61.339980][ T4759] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.363304][ T4762] program syz.1.298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.376725][ T4762] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 61.378436][ T4759] EXT4-fs (loop3): 1 truncate cleaned up [ 61.417115][ T4759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.584471][ T4772] FAULT_INJECTION: forcing a failure. [ 61.584471][ T4772] name failslab, interval 1, probability 0, space 0, times 0 [ 61.597183][ T4772] CPU: 0 UID: 0 PID: 4772 Comm: syz.4.304 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 61.607778][ T4772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.617833][ T4772] Call Trace: [ 61.621110][ T4772] [ 61.624038][ T4772] dump_stack_lvl+0xf2/0x150 [ 61.628694][ T4772] dump_stack+0x15/0x20 [ 61.632848][ T4772] should_fail_ex+0x223/0x230 [ 61.637698][ T4772] ? alloc_pipe_info+0x1cb/0x360 [ 61.642660][ T4772] should_failslab+0x8f/0xb0 [ 61.647250][ T4772] __kmalloc_noprof+0xa5/0x370 [ 61.652093][ T4772] alloc_pipe_info+0x1cb/0x360 [ 61.656870][ T4772] splice_direct_to_actor+0x60f/0x670 [ 61.662248][ T4772] ? kstrtouint_from_user+0xb0/0xe0 [ 61.667455][ T4772] ? __pfx_direct_splice_actor+0x10/0x10 [ 61.673094][ T4772] ? 0xffffffff81000000 [ 61.677420][ T4772] ? __rcu_read_unlock+0x4e/0x70 [ 61.682365][ T4772] ? avc_policy_seqno+0x15/0x20 [ 61.687231][ T4772] ? selinux_file_permission+0x22a/0x360 [ 61.692884][ T4772] do_splice_direct+0xd7/0x150 [ 61.697702][ T4772] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 61.703630][ T4772] do_sendfile+0x39b/0x970 [ 61.708074][ T4772] __x64_sys_sendfile64+0x110/0x150 [ 61.713289][ T4772] x64_sys_call+0xed5/0x2d60 [ 61.718007][ T4772] do_syscall_64+0xc9/0x1c0 [ 61.722515][ T4772] ? clear_bhb_loop+0x55/0xb0 [ 61.727274][ T4772] ? clear_bhb_loop+0x55/0xb0 [ 61.731993][ T4772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.737903][ T4772] RIP: 0033:0x7f76e684dff9 [ 61.742380][ T4772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.762050][ T4772] RSP: 002b:00007f76e54c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 61.770542][ T4772] RAX: ffffffffffffffda RBX: 00007f76e6a05f80 RCX: 00007f76e684dff9 [ 61.778513][ T4772] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 61.786499][ T4772] RBP: 00007f76e54c1090 R08: 0000000000000000 R09: 0000000000000000 [ 61.794465][ T4772] R10: 0001000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 61.802433][ T4772] R13: 0000000000000000 R14: 00007f76e6a05f80 R15: 00007ffccce7ac48 [ 61.810443][ T4772] [ 61.830938][ T4774] loop4: detected capacity change from 0 to 512 [ 61.837579][ T4774] EXT4-fs: Ignoring removed i_version option [ 61.844938][ T4774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 61.852994][ T4774] System zones: 1-12 [ 61.857380][ T4774] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.305: bg 0: block 131: padding at end of block bitmap is not set [ 61.871788][ T4774] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 61.880966][ T4774] EXT4-fs (loop4): 1 truncate cleaned up [ 61.887157][ T4774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.910430][ T4052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.956031][ T4778] loop4: detected capacity change from 0 to 2048 [ 61.969453][ T3272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.119760][ T4798] program syz.4.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.132486][ T4798] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 62.180465][ T4779] chnl_net:caif_netlink_parms(): no params data found [ 62.208003][ T4809] netlink: 1 bytes leftover after parsing attributes in process `syz.4.314'. [ 62.231705][ T4812] SELinux: Context Ü is not valid (left unmapped). [ 62.243095][ T4812] xt_connbytes: Forcing CT accounting to be enabled [ 62.250105][ T4812] Cannot find add_set index 0 as target [ 62.284456][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.291624][ T4779] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.298936][ T4779] bridge_slave_0: entered allmulticast mode [ 62.305425][ T4779] bridge_slave_0: entered promiscuous mode [ 62.312553][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.319726][ T4779] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.326908][ T4779] bridge_slave_1: entered allmulticast mode [ 62.338711][ T4779] bridge_slave_1: entered promiscuous mode [ 62.364885][ T4779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.379999][ T4779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.401216][ T4820] bpf_get_probe_write_proto: 2 callbacks suppressed [ 62.401232][ T4820] syz.4.318[4820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.410039][ T4820] syz.4.318[4820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.421515][ T4820] syz.4.318[4820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.434181][ T4779] team0: Port device team_slave_0 added [ 62.456264][ T4820] bridge0: port 3(ipvlan2) entered blocking state [ 62.462817][ T4820] bridge0: port 3(ipvlan2) entered disabled state [ 62.469540][ T4820] ipvlan2: entered allmulticast mode [ 62.474845][ T4820] bridge0: entered allmulticast mode [ 62.481140][ T4820] ipvlan2: left allmulticast mode [ 62.486240][ T4820] bridge0: left allmulticast mode [ 62.495059][ T4779] team0: Port device team_slave_1 added [ 62.507907][ T4790] chnl_net:caif_netlink_parms(): no params data found [ 62.524773][ T4779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.531815][ T4779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.557846][ T4779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.572813][ T4779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.579843][ T4779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.605898][ T4779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.651589][ T4779] hsr_slave_0: entered promiscuous mode [ 62.657319][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 62.657334][ T29] audit: type=1326 audit(2000000018.330:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 62.686930][ T29] audit: type=1326 audit(2000000018.330:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 62.710305][ T29] audit: type=1326 audit(2000000018.330:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 62.733799][ T29] audit: type=1326 audit(2000000018.350:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4825 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 62.734095][ T4779] hsr_slave_1: entered promiscuous mode [ 62.763384][ T4779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.770995][ T4779] Cannot create hsr debugfs directory [ 62.803937][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.811066][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.818908][ T4790] bridge_slave_0: entered allmulticast mode [ 62.825481][ T4790] bridge_slave_0: entered promiscuous mode [ 62.833105][ T4790] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.840361][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.847845][ T4790] bridge_slave_1: entered allmulticast mode [ 62.855025][ T4790] bridge_slave_1: entered promiscuous mode [ 62.863500][ T29] audit: type=1326 audit(2000000018.540:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 62.865998][ T4837] program syz.4.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.894151][ T29] audit: type=1326 audit(2000000018.540:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 62.896265][ T4837] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 62.919297][ T29] audit: type=1326 audit(2000000018.540:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 62.951043][ T29] audit: type=1326 audit(2000000018.540:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 62.974632][ T29] audit: type=1326 audit(2000000018.540:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 62.997965][ T29] audit: type=1326 audit(2000000018.540:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4836 comm="syz.4.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 63.027870][ T4841] loop4: detected capacity change from 0 to 128 [ 63.038471][ T4841] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.050873][ T4841] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.068920][ T4790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.079016][ T4052] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.081922][ T4790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.119751][ T4790] team0: Port device team_slave_0 added [ 63.141875][ T984] hid-generic 0000:0000:0000.0007: unknown main item tag 0x7 [ 63.149365][ T984] hid-generic 0000:0000:0000.0007: unknown main item tag 0x6 [ 63.156910][ T984] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.164342][ T984] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.171873][ T984] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.179408][ T984] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.186868][ T984] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 63.194778][ T984] hid-generic 0000:0000:0000.0007: hidraw0: HID vffffff.fe Device [syz0] on syz1 [ 63.196075][ T4790] team0: Port device team_slave_1 added [ 63.251226][ T4779] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.262675][ T4849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.326'. [ 63.271979][ T4790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.278977][ T4790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.305064][ T4790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.316547][ T4790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.323718][ T4790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.349906][ T4790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.366246][ T4779] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.393321][ T3346] hid-generic 0000:0000:0002.0008: unknown main item tag 0x0 [ 63.394080][ T4852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 63.400847][ T3346] hid-generic 0000:0000:0002.0008: unknown main item tag 0x0 [ 63.417005][ T3346] hid-generic 0000:0000:0002.0008: unknown main item tag 0x0 [ 63.424437][ T3346] hid-generic 0000:0000:0002.0008: unknown main item tag 0x0 [ 63.431875][ T3346] hid-generic 0000:0000:0002.0008: unknown main item tag 0x0 [ 63.439293][ T3346] hid-generic 0000:0000:0002.0008: unknown main item tag 0x0 [ 63.446734][ T3346] hid-generic 0000:0000:0002.0008: unknown main item tag 0x0 [ 63.454225][ T3346] hid-generic 0000:0000:0002.0008: unknown main item tag 0x0 [ 63.461669][ T3346] hid-generic 0000:0000:0002.0008: unknown main item tag 0x0 [ 63.469201][ T3346] hid-generic 0000:0000:0002.0008: unknown main item tag 0x0 [ 63.476578][ T3346] hid-generic 0000:0000:0002.0008: unknown main item tag 0x0 [ 63.484078][ T3346] hid-generic 0000:0000:0002.0008: unknown main item tag 0x0 [ 63.492189][ T3346] hid-generic 0000:0000:0002.0008: hidraw0: HID vffffff.fe Device [syz0] on syz0 [ 63.506120][ T4779] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.521816][ T4790] hsr_slave_0: entered promiscuous mode [ 63.529624][ T4790] hsr_slave_1: entered promiscuous mode [ 63.544338][ T4790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.555060][ T4790] Cannot create hsr debugfs directory [ 63.570086][ T4858] program syz.2.331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.590279][ T4858] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 63.593700][ T4779] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.621136][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 63.632858][ T4862] loop7: detected capacity change from 0 to 16384 [ 63.709255][ T4779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.727725][ T4790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.751292][ T4779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.779771][ T4779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.795874][ T4790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.796870][ T4868] loop1: detected capacity change from 0 to 512 [ 63.816637][ T4779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.823801][ T4868] EXT4-fs: Ignoring removed i_version option [ 63.846217][ T4868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 63.855207][ T4868] System zones: 1-12 [ 63.858690][ T4864] loop7: detected capacity change from 16384 to 16383 [ 63.866104][ T4868] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.334: bg 0: block 131: padding at end of block bitmap is not set [ 63.885092][ T4868] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 63.894225][ T4868] EXT4-fs (loop1): 1 truncate cleaned up [ 63.894928][ T4790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.929575][ T4779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.941951][ T4779] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.981040][ T4790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.996996][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.004123][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.015222][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 64.016740][ T2066] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.031091][ T2066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.057090][ T4779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.067496][ T4779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.084104][ T4866] Invalid logical block size (65472) [ 64.139643][ T4790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.150800][ T4790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.160430][ T4790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.188106][ T4884] FAULT_INJECTION: forcing a failure. [ 64.188106][ T4884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.193947][ T4779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.201245][ T4884] CPU: 0 UID: 0 PID: 4884 Comm: syz.1.340 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 64.218595][ T4884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.228778][ T4884] Call Trace: [ 64.232066][ T4884] [ 64.235014][ T4884] dump_stack_lvl+0xf2/0x150 [ 64.239690][ T4884] dump_stack+0x15/0x20 [ 64.243849][ T4884] should_fail_ex+0x223/0x230 [ 64.248539][ T4884] should_fail+0xb/0x10 [ 64.252706][ T4884] should_fail_usercopy+0x1a/0x20 [ 64.257788][ T4884] _copy_from_user+0x1e/0xd0 [ 64.262404][ T4884] copy_msghdr_from_user+0x54/0x2a0 [ 64.267679][ T4884] __sys_sendmsg+0x171/0x270 [ 64.272357][ T4884] __x64_sys_sendmsg+0x46/0x50 [ 64.277178][ T4884] x64_sys_call+0x2689/0x2d60 [ 64.281866][ T4884] do_syscall_64+0xc9/0x1c0 [ 64.286369][ T4884] ? clear_bhb_loop+0x55/0xb0 [ 64.291109][ T4884] ? clear_bhb_loop+0x55/0xb0 [ 64.295842][ T4884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.301903][ T4884] RIP: 0033:0x7f19fd13dff9 [ 64.306387][ T4884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.326005][ T4884] RSP: 002b:00007f19fbdb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.334465][ T4884] RAX: ffffffffffffffda RBX: 00007f19fd2f5f80 RCX: 00007f19fd13dff9 [ 64.342436][ T4884] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000006 [ 64.350429][ T4884] RBP: 00007f19fbdb7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.358397][ T4884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.366466][ T4884] R13: 0000000000000000 R14: 00007f19fd2f5f80 R15: 00007ffcbc569f68 [ 64.374453][ T4884] [ 64.387930][ T4887] netlink: 36 bytes leftover after parsing attributes in process `syz.4.341'. [ 64.401370][ T4790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.415364][ T4890] program syz.2.342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.434710][ T4890] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 64.515901][ T4898] loop1: detected capacity change from 0 to 512 [ 64.526710][ T4779] veth0_vlan: entered promiscuous mode [ 64.537035][ T4779] veth1_vlan: entered promiscuous mode [ 64.554305][ T4898] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.344: casefold flag without casefold feature [ 64.556195][ T4790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.582548][ T4779] veth0_macvtap: entered promiscuous mode [ 64.591985][ T4779] veth1_macvtap: entered promiscuous mode [ 64.602459][ T4898] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.344: couldn't read orphan inode 15 (err -117) [ 64.620838][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.631390][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.636412][ T4898] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.344: Directory hole found for htree leaf block 0 [ 64.641212][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.641230][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.641241][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.684740][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.694580][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.698417][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x7 [ 64.705047][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.712458][ T3346] hid-generic 0000:0000:0000.0009: ignoring exceeding usage max [ 64.727006][ T4779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.734468][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.744788][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.745752][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.752189][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.762675][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.770040][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.779808][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.787156][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.797563][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.797582][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.804950][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.814745][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.814758][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.825177][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.832577][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.842373][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.852865][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.860155][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.869930][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.877374][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.896270][ T4779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.904998][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.916814][ T4779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.919590][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.919612][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.919710][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.919733][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.919755][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.919778][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.919800][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.919832][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.919854][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.919877][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.919938][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.919958][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.919979][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.920005][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.920024][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.920083][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.920103][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.920122][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 64.920144][ T3346] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 65.015332][ T3346] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 65.018212][ T4779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.096095][ T4779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.104838][ T4779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.122083][ T4898] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.344: Directory hole found for htree leaf block 0 [ 65.134716][ T4905] FAULT_INJECTION: forcing a failure. [ 65.134716][ T4905] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 65.148287][ T4905] CPU: 0 UID: 0 PID: 4905 Comm: syz.4.346 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 65.158898][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.168969][ T4905] Call Trace: [ 65.172254][ T4905] [ 65.175193][ T4905] dump_stack_lvl+0xf2/0x150 [ 65.179822][ T4905] dump_stack+0x15/0x20 [ 65.183983][ T4905] should_fail_ex+0x223/0x230 [ 65.188684][ T4905] should_fail_alloc_page+0xfd/0x110 [ 65.193978][ T4905] __alloc_pages_noprof+0x109/0x340 [ 65.199196][ T4905] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 65.204585][ T4905] alloc_pages_noprof+0xe1/0x100 [ 65.209534][ T4905] pte_alloc_one+0x32/0xf0 [ 65.213955][ T4905] __pte_alloc+0x33/0x270 [ 65.218290][ T4905] copy_page_range+0x32ce/0x3860 [ 65.223235][ T4905] ? mas_wr_walk_descend+0x359/0x410 [ 65.228542][ T4905] copy_mm+0x96c/0x10e0 [ 65.232710][ T4905] copy_process+0xd5b/0x1f90 [ 65.237327][ T4905] kernel_clone+0x167/0x5e0 [ 65.241848][ T4905] ? vfs_write+0x580/0x910 [ 65.246285][ T4905] __x64_sys_clone+0xe8/0x120 [ 65.250985][ T4905] x64_sys_call+0x2d23/0x2d60 [ 65.255673][ T4905] do_syscall_64+0xc9/0x1c0 [ 65.260183][ T4905] ? clear_bhb_loop+0x55/0xb0 [ 65.264878][ T4905] ? clear_bhb_loop+0x55/0xb0 [ 65.269571][ T4905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.275495][ T4905] RIP: 0033:0x7f76e684dff9 [ 65.279923][ T4905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.299553][ T4905] RSP: 002b:00007f76e549ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 65.307975][ T4905] RAX: ffffffffffffffda RBX: 00007f76e6a06058 RCX: 00007f76e684dff9 [ 65.315949][ T4905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002005000 [ 65.323923][ T4905] RBP: 00007f76e54a0090 R08: 0000000000000000 R09: 0000000000000000 [ 65.331898][ T4905] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 65.339871][ T4905] R13: 0000000000000000 R14: 00007f76e6a06058 R15: 00007ffccce7ac48 [ 65.347854][ T4905] [ 65.456990][ T4790] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.490580][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 65.499848][ T4922] loop2: detected capacity change from 0 to 164 [ 65.522513][ T4925] loop0: detected capacity change from 0 to 1024 [ 65.526922][ T4915] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.529359][ T4925] EXT4-fs: Ignoring removed orlov option [ 65.541728][ T4925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.550093][ T4922] isofs_fill_super: root inode is not a directory. Corrupted media? [ 65.552749][ T4915] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.642293][ T4932] process 'syz.0.353' launched './file0/file0' with NULL argv: empty string added [ 65.665116][ T4923] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.672231][ T4923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.682611][ T4923] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.689724][ T4923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.736655][ T4926] team_slave_0: entered promiscuous mode [ 65.742372][ T4926] team_slave_1: entered promiscuous mode [ 65.748633][ T4931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.354'. [ 65.782468][ T4934] netlink: 'syz.4.350': attribute type 10 has an invalid length. [ 65.804154][ T4934] team_slave_0: left promiscuous mode [ 65.809794][ T4934] team_slave_1: left promiscuous mode [ 65.817907][ T4936] loop0: detected capacity change from 0 to 2048 [ 65.827943][ T4934] team_slave_0: entered promiscuous mode [ 65.833691][ T4934] team_slave_1: entered promiscuous mode [ 65.842622][ T4934] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.851711][ T4934] bond0: (slave team0): Enslaving as an active interface with an up link [ 65.867363][ T3764] loop0: p1 < > p2 p3 p4 < p5 > [ 65.874610][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.879807][ T3764] loop0: p2 size 458752 extends beyond EOD, truncated [ 65.881689][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.891515][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x7 [ 65.903098][ T3512] hid-generic 0000:0000:0000.000A: ignoring exceeding usage max [ 65.908029][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.915246][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 65.917795][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.925151][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 65.939762][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 65.947158][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 65.952373][ T4790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.954592][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 65.964909][ T4790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.972326][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 65.990066][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 65.997471][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.002310][ T4914] team_slave_0: left promiscuous mode [ 66.004936][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.010270][ T4914] team_slave_1: left promiscuous mode [ 66.023098][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.026032][ T3764] loop0: p3 start 4284289 is beyond EOD, truncated [ 66.030527][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.042528][ T3764] loop0: p5 size 458752 extends beyond EOD, truncated [ 66.044416][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.058594][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.064003][ T4936] loop0: p1 < > p2 p3 p4 < p5 > [ 66.065979][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.078405][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.085806][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.089901][ T4936] loop0: p2 size 458752 extends beyond EOD, truncated [ 66.093247][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.093271][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.093294][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.101851][ T4936] loop0: p3 start 4284289 is beyond EOD, [ 66.107436][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.107460][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.107481][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.114978][ T4936] truncated [ 66.122290][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.131059][ T4936] loop0: p5 size 458752 extends beyond EOD, [ 66.135389][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.142756][ T4936] truncated [ 66.177477][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.184942][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.192398][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.199839][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.207278][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.214773][ T3512] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 66.234036][ T3512] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 66.345056][ T4952] FAULT_INJECTION: forcing a failure. [ 66.345056][ T4952] name failslab, interval 1, probability 0, space 0, times 0 [ 66.357790][ T4952] CPU: 0 UID: 0 PID: 4952 Comm: syz.1.360 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 66.368434][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.378499][ T4952] Call Trace: [ 66.381779][ T4952] [ 66.384732][ T4952] dump_stack_lvl+0xf2/0x150 [ 66.389422][ T4952] dump_stack+0x15/0x20 [ 66.393643][ T4952] should_fail_ex+0x223/0x230 [ 66.398403][ T4952] ? __alloc_skb+0x10b/0x310 [ 66.403044][ T4952] should_failslab+0x8f/0xb0 [ 66.407691][ T4952] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 66.413590][ T4952] ? __rtnl_unlock+0x99/0xb0 [ 66.418187][ T4952] __alloc_skb+0x10b/0x310 [ 66.422608][ T4952] netlink_ack+0xef/0x4f0 [ 66.427013][ T4952] ? __dev_queue_xmit+0x161/0x2040 [ 66.432132][ T4952] ? ref_tracker_alloc+0x1f5/0x2f0 [ 66.437309][ T4952] netlink_rcv_skb+0x19c/0x230 [ 66.442089][ T4952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.447555][ T4952] rtnetlink_rcv+0x1c/0x30 [ 66.451992][ T4952] netlink_unicast+0x599/0x670 [ 66.456789][ T4952] netlink_sendmsg+0x5cc/0x6e0 [ 66.461555][ T4952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.466845][ T4952] __sock_sendmsg+0x140/0x180 [ 66.471524][ T4952] ____sys_sendmsg+0x312/0x410 [ 66.476354][ T4952] __sys_sendmsg+0x1d9/0x270 [ 66.480970][ T4952] __x64_sys_sendmsg+0x46/0x50 [ 66.485830][ T4952] x64_sys_call+0x2689/0x2d60 [ 66.490558][ T4952] do_syscall_64+0xc9/0x1c0 [ 66.495070][ T4952] ? clear_bhb_loop+0x55/0xb0 [ 66.499777][ T4952] ? clear_bhb_loop+0x55/0xb0 [ 66.504635][ T4952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.510563][ T4952] RIP: 0033:0x7f19fd13dff9 [ 66.515042][ T4952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.534656][ T4952] RSP: 002b:00007f19fbdb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.543113][ T4952] RAX: ffffffffffffffda RBX: 00007f19fd2f5f80 RCX: 00007f19fd13dff9 [ 66.551197][ T4952] RDX: 0000000000000000 RSI: 00000000200037c0 RDI: 0000000000000006 [ 66.559166][ T4952] RBP: 00007f19fbdb7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.567134][ T4952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.575108][ T4952] R13: 0000000000000000 R14: 00007f19fd2f5f80 R15: 00007ffcbc569f68 [ 66.583092][ T4952] [ 66.608972][ T4790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.692563][ T4960] program syz.0.362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.709222][ T4960] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 66.824552][ T4790] veth0_vlan: entered promiscuous mode [ 66.862373][ T4790] veth1_vlan: entered promiscuous mode [ 66.931634][ T4973] loop7: detected capacity change from 0 to 16384 [ 66.950140][ T4790] veth0_macvtap: entered promiscuous mode [ 66.971041][ T4975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.366'. [ 66.995662][ T4790] veth1_macvtap: entered promiscuous mode [ 67.034026][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.044666][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.054503][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.065004][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.074915][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.085411][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.095262][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.105729][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.115630][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.126078][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.177244][ T4790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.197645][ T4979] loop2: detected capacity change from 0 to 512 [ 67.230197][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.240755][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.241961][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x7 [ 67.250580][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.250597][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.250614][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.250656][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.250668][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.250682][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.250698][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.258054][ T24] hid-generic 0000:0000:0000.000B: ignoring exceeding usage max [ 67.268486][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.282164][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.288698][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.298520][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.298540][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.308965][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.318622][ T4979] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.367: bg 0: block 393: padding at end of block bitmap is not set [ 67.318797][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.331333][ T4979] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 67.336789][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.349688][ T4790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.353986][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.354030][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.354048][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.372261][ T4979] EXT4-fs (loop2): 2 truncates cleaned up [ 67.379303][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.392368][ T4790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.403261][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.410724][ T4790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.419335][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.426700][ T4790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.426734][ T4790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.431274][ T4979] EXT4-fs mount: 6 callbacks suppressed [ 67.431291][ T4979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.433980][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.544730][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.552213][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.559609][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.567030][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.574451][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.581938][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.589343][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.596722][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.604120][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.611558][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.619002][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.626443][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.633954][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.641484][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.648886][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.656266][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.663657][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.671050][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 67.679696][ T24] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 67.691195][ T3578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.700606][ T4976] loop7: detected capacity change from 16384 to 16383 [ 67.732494][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 67.732508][ T29] audit: type=1400 audit(2000000023.410:2433): avc: denied { mounton } for pid=4790 comm="syz-executor" path="/root/syzkaller.YJzaId/syz-tmp" dev="sda1" ino=1958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.826555][ T29] audit: type=1400 audit(2000000023.450:2434): avc: denied { mount } for pid=4790 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.848915][ T29] audit: type=1400 audit(2000000023.450:2435): avc: denied { mount } for pid=4790 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.870995][ T29] audit: type=1400 audit(2000000023.450:2436): avc: denied { mounton } for pid=4790 comm="syz-executor" path="/root/syzkaller.YJzaId/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.897858][ T29] audit: type=1400 audit(2000000023.450:2437): avc: denied { mounton } for pid=4790 comm="syz-executor" path="/root/syzkaller.YJzaId/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.925414][ T29] audit: type=1400 audit(2000000023.450:2438): avc: denied { mounton } for pid=4790 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.948333][ T29] audit: type=1400 audit(2000000023.480:2439): avc: denied { map } for pid=4989 comm="syz.4.371" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.972489][ T29] audit: type=1400 audit(2000000023.480:2440): avc: denied { read write } for pid=4989 comm="syz.4.371" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.011598][ T29] audit: type=1326 audit(2000000023.680:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826aa3dff9 code=0x7ffc0000 [ 68.017433][ T4997] loop0: detected capacity change from 0 to 2048 [ 68.035085][ T29] audit: type=1326 audit(2000000023.680:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4995 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826aa3dff9 code=0x7ffc0000 [ 68.107249][ T5000] loop2: detected capacity change from 0 to 512 [ 68.117315][ T5000] EXT4-fs: Ignoring removed i_version option [ 68.124815][ T4997] loop0: p1 < > p2 p3 p4 < p5 > [ 68.130302][ T4977] Invalid logical block size (65472) [ 68.136793][ T5000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 68.145608][ T5000] System zones: 1-12 [ 68.156104][ T5000] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.374: bg 0: block 131: padding at end of block bitmap is not set [ 68.178500][ T5000] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 68.187376][ T4997] loop0: p2 size 458752 extends beyond EOD, truncated [ 68.211767][ T5000] EXT4-fs (loop2): 1 truncate cleaned up [ 68.217592][ T4997] loop0: p3 start 4284289 is beyond EOD, truncated [ 68.231791][ T5000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.263559][ T4997] loop0: p5 size 458752 extends beyond EOD, truncated [ 68.303037][ T5014] loop1: detected capacity change from 0 to 512 [ 68.330924][ T3578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.384880][ T5008] loop3: detected capacity change from 0 to 512 [ 68.385820][ T5014] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.379: iget: bad extended attribute block 1 [ 68.391810][ T5008] EXT4-fs: Ignoring removed i_version option [ 68.410544][ T5014] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.379: couldn't read orphan inode 15 (err -117) [ 68.411374][ T5017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.380'. [ 68.424980][ T5008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 68.448778][ T5014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.473214][ T5008] System zones: 1-12 [ 68.477409][ T5008] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.376: bg 0: block 131: padding at end of block bitmap is not set [ 68.510243][ T5008] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 68.527754][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x7 [ 68.532328][ T5025] loop4: detected capacity change from 0 to 512 [ 68.535240][ T3337] hid-generic 0000:0000:0000.000C: ignoring exceeding usage max [ 68.552940][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.560415][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.562938][ T5026] netlink: 'syz.2.383': attribute type 10 has an invalid length. [ 68.567860][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.567903][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.567922][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.575742][ T5026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.383'. [ 68.583090][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.592215][ T5026] bridge0: port 3(batadv0) entered blocking state [ 68.597802][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.606724][ T5026] bridge0: port 3(batadv0) entered disabled state [ 68.614201][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.623860][ T5027] loop2: detected capacity change from 0 to 256 [ 68.627962][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.636910][ T5026] batadv0: entered allmulticast mode [ 68.641837][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.656027][ T5026] batadv0: entered promiscuous mode [ 68.660758][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.668645][ T5026] bridge0: port 3(batadv0) entered blocking state [ 68.673355][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.680789][ T5026] bridge0: port 3(batadv0) entered forwarding state [ 68.689133][ T5008] EXT4-fs (loop3): 1 truncate cleaned up [ 68.694675][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.694754][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.694780][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.694806][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.694832][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.694864][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.694937][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.703723][ T2066] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 68.707166][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.707198][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.714630][ T2066] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 68.721963][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.721984][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.729652][ T5027] FAT-fs (loop2): bogus number of FAT sectors [ 68.736744][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.736768][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.736793][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.744220][ T5027] FAT-fs (loop2): Can't find a valid FAT filesystem [ 68.751572][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.837571][ T5025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.837679][ T3337] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 68.873259][ T5008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.876802][ T5025] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.885905][ T3337] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 68.924809][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.947673][ T5038] loop7: detected capacity change from 0 to 16384 [ 68.980599][ T4790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.991040][ T4052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.040624][ T5050] loop4: detected capacity change from 0 to 512 [ 69.048489][ T5050] EXT4-fs: Ignoring removed i_version option [ 69.068386][ T5050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 69.086807][ T5050] System zones: 1-12 [ 69.093102][ T5050] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.389: bg 0: block 131: padding at end of block bitmap is not set [ 69.111870][ T5050] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 69.120713][ T5045] loop7: detected capacity change from 16384 to 16383 [ 69.131199][ T5050] EXT4-fs (loop4): 1 truncate cleaned up [ 69.150970][ T5050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.182700][ T5062] netlink: 36 bytes leftover after parsing attributes in process `syz.3.393'. [ 69.195366][ T4052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.210086][ T5053] Invalid logical block size (65472) [ 69.234769][ T5064] loop4: detected capacity change from 0 to 512 [ 69.261044][ T5064] journal_path: Lookup failure for './bus' [ 69.266930][ T5064] EXT4-fs: error: could not find journal device path [ 69.317799][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x7 [ 69.325280][ T9] hid-generic 0000:0000:0000.000D: ignoring exceeding usage max [ 69.336761][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.344277][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.351689][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.359245][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.366884][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.374317][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.381776][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.389193][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.396623][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.404310][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.411747][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.419320][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.419878][ T5072] netlink: 92 bytes leftover after parsing attributes in process `syz.3.395'. [ 69.426696][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.426723][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.440452][ T5071] loop4: detected capacity change from 0 to 128 [ 69.442978][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.464208][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.471613][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.477330][ T5071] +}[@: attempt to access beyond end of device [ 69.477330][ T5071] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 69.479028][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.479053][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.479142][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.491965][ T5071] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 69.522733][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.530360][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.537894][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.537919][ T5074] loop0: detected capacity change from 0 to 128 [ 69.552237][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.556656][ T5074] +}[@: attempt to access beyond end of device [ 69.556656][ T5074] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 69.559748][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.572598][ T5074] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 69.588685][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.596067][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.603603][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 69.622902][ T9] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 69.663683][ T5077] loop0: detected capacity change from 0 to 128 [ 69.664884][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 69.693899][ T5080] bond0: entered promiscuous mode [ 69.699013][ T5080] bond_slave_0: entered promiscuous mode [ 69.704784][ T5080] bond_slave_1: entered promiscuous mode [ 69.715417][ T5080] team0: entered promiscuous mode [ 69.720684][ T5080] team_slave_0: entered promiscuous mode [ 69.726741][ T5080] team_slave_1: entered promiscuous mode [ 69.776151][ T5077] +}[@: attempt to access beyond end of device [ 69.776151][ T5077] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 69.789375][ T5077] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 69.820765][ T5091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.405'. [ 69.830453][ T5088] uprobe: syz.1.404:5088 failed to unregister, leaking uprobe [ 69.880630][ T5095] loop4: detected capacity change from 0 to 512 [ 69.890305][ T5097] loop1: detected capacity change from 0 to 512 [ 69.902420][ T5095] EXT4-fs: Ignoring removed i_version option [ 69.914638][ T5097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.941538][ T5095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 69.953307][ T5097] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.964078][ T5095] System zones: 1-12 [ 69.968299][ T5095] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.406: bg 0: block 131: padding at end of block bitmap is not set [ 69.982795][ T5095] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 69.992127][ T5095] EXT4-fs (loop4): 1 truncate cleaned up [ 69.998286][ T5095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.011836][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.100531][ T4052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.174271][ T5112] dvmrp0: entered allmulticast mode [ 70.183104][ T5112] dvmrp0: left allmulticast mode [ 70.275697][ T5118] loop4: detected capacity change from 0 to 1024 [ 70.318013][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x7 [ 70.325511][ T3347] hid-generic 0000:0000:0000.000E: ignoring exceeding usage max [ 70.337443][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.349168][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.356684][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.364613][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.372135][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.379692][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.387077][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.394501][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.402006][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.409462][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.416892][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.424324][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.431748][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.439240][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.446630][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.454043][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.461454][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.468875][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.476280][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.483763][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.491184][ T3347] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 70.504029][ T3347] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 70.569720][ T5122] loop1: detected capacity change from 0 to 512 [ 70.579930][ T5122] EXT4-fs: Ignoring removed i_version option [ 70.601466][ T5122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 70.609522][ T5122] System zones: 1-12 [ 70.613789][ T5122] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.414: bg 0: block 131: padding at end of block bitmap is not set [ 70.630318][ T5122] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 70.639423][ T5122] EXT4-fs (loop1): 1 truncate cleaned up [ 70.645800][ T5122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.700186][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.820147][ T5129] program syz.2.417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.831963][ T5129] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 70.960412][ T5135] loop3: detected capacity change from 0 to 2048 [ 70.966767][ T5131] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.419'. [ 70.971685][ T5131] serio: Serial port ptm0 [ 71.002314][ T5140] loop4: detected capacity change from 0 to 512 [ 71.009315][ T5140] EXT4-fs: Ignoring removed i_version option [ 71.017330][ T5140] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 71.025510][ T5140] System zones: 1-12 [ 71.029966][ T5135] loop3: p1 < > p2 p3 p4 < p5 > [ 71.036366][ T5135] loop3: p2 size 458752 extends beyond EOD, truncated [ 71.037354][ T5142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.420'. [ 71.053533][ T5135] loop3: p3 start 4284289 is beyond EOD, truncated [ 71.060860][ T5140] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.422: bg 0: block 131: padding at end of block bitmap is not set [ 71.082541][ T5145] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5145 comm=syz.1.423 [ 71.103396][ T5135] loop3: p5 size 458752 extends beyond EOD, truncated [ 71.116236][ T5140] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 71.126396][ T5140] EXT4-fs (loop4): 1 truncate cleaned up [ 71.230519][ T5149] loop7: detected capacity change from 0 to 16384 [ 71.240739][ T5140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.326575][ T4052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.365447][ T5158] loop3: detected capacity change from 0 to 512 [ 71.372742][ T5156] loop1: detected capacity change from 0 to 512 [ 71.378489][ T5158] EXT4-fs: Ignoring removed i_version option [ 71.408461][ T5156] EXT4-fs: Ignoring removed i_version option [ 71.427603][ T5156] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 71.434452][ T5158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 71.435602][ T5156] System zones: 1-12 [ 71.453098][ T5156] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.438: bg 0: block 131: padding at end of block bitmap is not set [ 71.457358][ T5158] System zones: 1-12 [ 71.490171][ T5158] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.429: bg 0: block 131: padding at end of block bitmap is not set [ 71.515160][ T5170] netlink: 36 bytes leftover after parsing attributes in process `syz.0.432'. [ 71.524183][ T5170] netlink: 444 bytes leftover after parsing attributes in process `syz.0.432'. [ 71.526817][ T5156] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 71.536327][ T5158] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 71.543858][ T5156] EXT4-fs (loop1): 1 truncate cleaned up [ 71.556909][ T5156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.598236][ T5158] EXT4-fs (loop3): 1 truncate cleaned up [ 71.608687][ T5158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.612268][ T5174] loop0: detected capacity change from 0 to 512 [ 71.628228][ T5155] loop7: detected capacity change from 16384 to 16383 [ 71.648529][ T5174] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.660679][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.684334][ T4790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.700745][ T5174] EXT4-fs (loop0): 1 truncate cleaned up [ 71.706654][ T5174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.773172][ T5177] 9pnet: Could not find request transport: t [ 71.801925][ T5180] loop3: detected capacity change from 0 to 512 [ 71.817195][ T5174] syz.0.434[5174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.817254][ T5174] syz.0.434[5174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.818560][ T5180] EXT4-fs: Ignoring removed i_version option [ 71.852455][ T5180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 71.879700][ T5180] System zones: 1-12 [ 71.899153][ T5161] Invalid logical block size (65472) [ 71.947887][ T5180] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.435: bg 0: block 131: padding at end of block bitmap is not set [ 72.037755][ T5180] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 72.076941][ T5180] EXT4-fs (loop3): 1 truncate cleaned up [ 72.083936][ T5180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.160811][ T4790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.164716][ T5197] loop2: detected capacity change from 0 to 2048 [ 72.228598][ T5197] loop2: p1 < > p2 p3 p4 < p5 > [ 72.242679][ T5197] loop2: p2 size 458752 extends beyond EOD, truncated [ 72.268834][ T5197] loop2: p3 start 4284289 is beyond EOD, truncated [ 72.286010][ T5197] loop2: p5 size 458752 extends beyond EOD, truncated [ 72.333598][ T5201] loop3: detected capacity change from 0 to 2048 [ 72.373141][ T5201] loop3: p1 < > p2 p3 p4 < p5 > [ 72.378942][ T5201] loop3: p2 size 458752 extends beyond EOD, truncated [ 72.386452][ T5201] loop3: p3 start 4284289 is beyond EOD, truncated [ 72.408634][ T5201] loop3: p5 size 458752 extends beyond EOD, truncated [ 72.449548][ T2969] loop3: p1 < > p2 p3 p4 < p5 > [ 72.455162][ T2969] loop3: p2 size 458752 extends beyond EOD, truncated [ 72.481911][ T2969] loop3: p3 start 4284289 is beyond EOD, truncated [ 72.506995][ T4779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.517082][ T2969] loop3: p5 size 458752 extends beyond EOD, truncated [ 72.706560][ T5209] loop2: detected capacity change from 0 to 512 [ 72.729083][ T5209] EXT4-fs: Ignoring removed i_version option [ 72.761175][ T5209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 72.769163][ T5209] System zones: 1-12 [ 72.773424][ T5209] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.445: bg 0: block 131: padding at end of block bitmap is not set [ 72.809942][ T5209] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 72.840220][ T5209] EXT4-fs (loop2): 1 truncate cleaned up [ 72.846287][ T5209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.895831][ T5218] loop7: detected capacity change from 0 to 16384 [ 72.962554][ T3578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.994497][ T5222] loop3: detected capacity change from 0 to 512 [ 73.004245][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 73.004260][ T29] audit: type=1326 audit(2000000028.680:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2640dff9 code=0x7ffc0000 [ 73.031840][ T5227] loop4: detected capacity change from 0 to 512 [ 73.060532][ T5222] EXT4-fs: Ignoring removed i_version option [ 73.064368][ T5225] pimreg: entered allmulticast mode [ 73.066745][ T29] audit: type=1326 audit(2000000028.680:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2640dff9 code=0x7ffc0000 [ 73.086219][ T5222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 73.095302][ T29] audit: type=1326 audit(2000000028.720:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6f2640dff9 code=0x7ffc0000 [ 73.103507][ T5222] System zones: [ 73.126384][ T29] audit: type=1326 audit(2000000028.720:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2640dff9 code=0x7ffc0000 [ 73.126444][ T29] audit: type=1326 audit(2000000028.720:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2640dff9 code=0x7ffc0000 [ 73.130089][ T5222] 1-12 [ 73.153295][ T29] audit: type=1326 audit(2000000028.720:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f2640dff9 code=0x7ffc0000 [ 73.176535][ T5222] [ 73.179211][ T29] audit: type=1326 audit(2000000028.720:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2640dff9 code=0x7ffc0000 [ 73.228058][ T29] audit: type=1326 audit(2000000028.720:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2640dff9 code=0x7ffc0000 [ 73.228119][ T29] audit: type=1326 audit(2000000028.720:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6f2640dff9 code=0x7ffc0000 [ 73.228178][ T29] audit: type=1326 audit(2000000028.720:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz.2.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2640dff9 code=0x7ffc0000 [ 73.257964][ T5222] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.461: bg 0: block 131: padding at end of block bitmap is not set [ 73.289160][ T5227] EXT4-fs: Ignoring removed i_version option [ 73.323969][ T5230] program syz.1.453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.332803][ T5227] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 73.340901][ T5222] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 73.341084][ T5227] System zones: 1-12 [ 73.352119][ T5222] EXT4-fs (loop3): 1 truncate cleaned up [ 73.353888][ T5230] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 73.367766][ T5224] loop7: detected capacity change from 16384 to 16383 [ 73.368083][ T5227] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.452: bg 0: block 131: padding at end of block bitmap is not set [ 73.380558][ T5222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.400123][ T5227] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 73.402755][ T5231] xt_ecn: cannot match TCP bits for non-tcp packets [ 73.411819][ T5227] EXT4-fs (loop4): 1 truncate cleaned up [ 73.426609][ T5227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.473405][ T4052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.498166][ T5232] Invalid logical block size (65472) [ 73.522757][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.530277][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.537665][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.545194][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.552671][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.560134][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.567548][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.574995][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.582409][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.589840][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.597295][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.604733][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.612153][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.619611][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.627054][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.634466][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.641901][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.649406][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.656820][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.664218][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.671671][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.679111][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.686537][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.693924][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.701341][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.708744][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.716124][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.723545][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.730941][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.738464][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.745952][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.753357][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.760814][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.768222][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.775608][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.783087][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.790548][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.797974][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.805547][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.812961][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.820439][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.827810][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.835298][ T3512] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 73.850371][ T3512] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 73.894430][ T4790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.013764][ T5257] program syz.3.466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.023196][ T5257] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 74.055872][ T5260] loop7: detected capacity change from 0 to 16384 [ 74.073089][ T5261] __nla_validate_parse: 2 callbacks suppressed [ 74.073104][ T5261] netlink: 92 bytes leftover after parsing attributes in process `syz.4.463'. [ 74.120449][ T5267] loop3: detected capacity change from 0 to 512 [ 74.133120][ T5266] loop0: detected capacity change from 0 to 2048 [ 74.134351][ T5267] EXT4-fs: Ignoring removed i_version option [ 74.157734][ T5267] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 74.165763][ T5267] System zones: 1-12 [ 74.171243][ T5267] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.469: bg 0: block 131: padding at end of block bitmap is not set [ 74.205183][ T5267] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 74.214368][ T5266] loop0: p1 < > p2 p3 p4 < p5 > [ 74.221720][ T5266] loop0: p2 size 458752 extends beyond EOD, truncated [ 74.229060][ T5267] EXT4-fs (loop3): 1 truncate cleaned up [ 74.234969][ T5266] loop0: p3 start 4284289 is beyond EOD, truncated [ 74.243015][ T5267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.248803][ T5269] loop7: detected capacity change from 16384 to 16383 [ 74.262672][ T5266] loop0: p5 size 458752 extends beyond EOD, truncated [ 74.388771][ T4790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.419744][ T5271] Invalid logical block size (65472) [ 74.424540][ T5273] loop3: detected capacity change from 0 to 1024 [ 74.442956][ T5273] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 74.477533][ T5273] JBD2: no valid journal superblock found [ 74.483467][ T5273] EXT4-fs (loop3): Could not load journal inode [ 74.514075][ T5273] tmpfs: Unknown parameter 'séze' [ 74.697555][ T5278] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.708586][ T5278] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.832448][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.839769][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.877957][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.885092][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.932257][ T5293] loop1: detected capacity change from 0 to 512 [ 74.975378][ T5293] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 75.020089][ T5293] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 75.028089][ T5293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.067736][ T5293] xt_TCPMSS: Only works on TCP SYN packets [ 75.074332][ T5293] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.477: Directory hole found for htree leaf block 0 [ 75.115034][ T5293] EXT4-fs error (device loop1): ext4_add_entry:2437: inode #2: comm syz.1.477: Directory hole found for htree leaf block 0 [ 75.134434][ T1782] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.146556][ T5282] team_slave_0: entered promiscuous mode [ 75.152234][ T5282] team_slave_1: entered promiscuous mode [ 75.177368][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.186894][ T5277] team_slave_0: left promiscuous mode [ 75.192328][ T5277] team_slave_1: left promiscuous mode [ 75.248542][ T1782] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.290468][ T5315] syz.1.482[5315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.290604][ T5315] syz.1.482[5315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.291748][ T1782] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.313854][ T5315] syz.1.482[5315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.346327][ T5320] program syz.4.483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.374840][ T5320] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 75.417052][ T5328] loop7: detected capacity change from 0 to 16384 [ 75.440269][ T1782] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.469147][ T5296] chnl_net:caif_netlink_parms(): no params data found [ 75.607199][ T5343] loop2: detected capacity change from 0 to 1024 [ 75.638987][ T5333] loop7: detected capacity change from 16384 to 16383 [ 75.640974][ T5343] loop2: detected capacity change from 0 to 2048 [ 75.657229][ T5347] loop4: detected capacity change from 0 to 2048 [ 75.712130][ T5347] loop4: p1 < > p4 [ 75.717149][ T5347] loop4: p4 size 8388608 extends beyond EOD, truncated [ 75.726899][ T5343] ext4: Unknown parameter 'uid<00000000000000032768' [ 75.757364][ T1782] bridge_slave_1: left allmulticast mode [ 75.763088][ T1782] bridge_slave_1: left promiscuous mode [ 75.768861][ T1782] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.788262][ T5341] Invalid logical block size (65472) [ 75.823485][ T1782] bridge_slave_0: left allmulticast mode [ 75.829226][ T1782] bridge_slave_0: left promiscuous mode [ 75.835025][ T1782] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.852793][ T2969] loop4: p1 < > p4 [ 75.865406][ T2969] loop4: p4 size 8388608 extends beyond EOD, truncated [ 75.920604][ T2969] loop4: p1 < > p4 [ 75.927383][ T2969] loop4: p4 size 8388608 extends beyond EOD, truncated [ 76.103252][ T3764] udevd[3764]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 76.136316][ T3764] udevd[3764]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 76.153499][ T5396] loop0: detected capacity change from 0 to 512 [ 76.189639][ T1782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.202820][ T1782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.219690][ T5396] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: 1 [ 76.227910][ T5396] ref_ctr increment failed for inode: 0xba offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888114aae4c0 [ 76.245148][ T1782] bond0 (unregistering): Released all slaves [ 76.254985][ T5396] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 76.263289][ T5396] ref_ctr decrement failed for inode: 0xba offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888114aae4c0 [ 76.277025][ T3764] udevd[3764]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 76.287706][ T3483] udevd[3483]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 76.297077][ T5396] ref_ctr going negative. vaddr: 0x20002082, curr val: -437, delta: -1 [ 76.305759][ T5396] ref_ctr decrement failed for inode: 0xba offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888114aae4c0 [ 76.320623][ T5396] uprobe: syz.0.507:5396 failed to unregister, leaking uprobe [ 76.362428][ T1782] hsr_slave_0: left promiscuous mode [ 76.381791][ T5413] loop0: detected capacity change from 0 to 512 [ 76.388798][ T5413] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.404848][ T1782] hsr_slave_1: left promiscuous mode [ 76.412212][ T1782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.419687][ T1782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.428456][ T5413] EXT4-fs (loop0): 1 truncate cleaned up [ 76.434463][ T5413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.434646][ T1782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.454133][ T1782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.463640][ T1782] veth1_macvtap: left promiscuous mode [ 76.469230][ T1782] veth0_macvtap: left promiscuous mode [ 76.474754][ T1782] veth1_vlan: left promiscuous mode [ 76.480170][ T1782] veth0_vlan: left promiscuous mode [ 76.503705][ T5417] FAULT_INJECTION: forcing a failure. [ 76.503705][ T5417] name failslab, interval 1, probability 0, space 0, times 0 [ 76.516583][ T5417] CPU: 1 UID: 0 PID: 5417 Comm: syz.0.513 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 76.527271][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.537333][ T5417] Call Trace: [ 76.540600][ T5417] [ 76.543526][ T5417] dump_stack_lvl+0xf2/0x150 [ 76.548135][ T5417] dump_stack+0x15/0x20 [ 76.552297][ T5417] should_fail_ex+0x223/0x230 [ 76.556995][ T5417] ? sctp_make_abort_user+0x176/0x500 [ 76.562481][ T5417] should_failslab+0x8f/0xb0 [ 76.567071][ T5417] __kmalloc_noprof+0xa5/0x370 [ 76.571849][ T5417] ? _sctp_make_chunk+0x1f0/0x210 [ 76.576941][ T5417] sctp_make_abort_user+0x176/0x500 [ 76.582138][ T5417] sctp_sendmsg_check_sflags+0x17c/0x1d0 [ 76.587819][ T5417] sctp_sendmsg+0x754/0x1920 [ 76.592500][ T5417] ? inet_send_prepare+0x133/0x230 [ 76.597611][ T5417] ? __pfx_sctp_sendmsg+0x10/0x10 [ 76.602660][ T5417] inet_sendmsg+0xc5/0xd0 [ 76.606994][ T5417] __sock_sendmsg+0x102/0x180 [ 76.611695][ T5417] ____sys_sendmsg+0x312/0x410 [ 76.616497][ T5417] __sys_sendmmsg+0x259/0x500 [ 76.621198][ T5417] ? handle_edge_irq+0x4f7/0x5b0 [ 76.626166][ T5417] __x64_sys_sendmmsg+0x57/0x70 [ 76.631043][ T5417] x64_sys_call+0xa49/0x2d60 [ 76.635760][ T5417] do_syscall_64+0xc9/0x1c0 [ 76.640299][ T5417] ? clear_bhb_loop+0x55/0xb0 [ 76.645057][ T5417] ? clear_bhb_loop+0x55/0xb0 [ 76.649773][ T5417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.655667][ T5417] RIP: 0033:0x7f02d47adff9 [ 76.660122][ T5417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.679736][ T5417] RSP: 002b:00007f02d3406038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.688172][ T5417] RAX: ffffffffffffffda RBX: 00007f02d4966058 RCX: 00007f02d47adff9 [ 76.696214][ T5417] RDX: 0000000000000001 RSI: 0000000020000bc0 RDI: 0000000000000003 [ 76.704178][ T5417] RBP: 00007f02d3406090 R08: 0000000000000000 R09: 0000000000000000 [ 76.712149][ T5417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.720290][ T5417] R13: 0000000000000000 R14: 00007f02d4966058 R15: 00007ffc97e199c8 [ 76.728341][ T5417] [ 76.791186][ T1782] team0 (unregistering): Port device team_slave_1 removed [ 76.803220][ T1782] team0 (unregistering): Port device team_slave_0 removed [ 76.931031][ T5432] ref_ctr increment failed for inode: 0x276 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888115c4df80 [ 76.959414][ T5429] uprobe: syz.2.514:5429 failed to unregister, leaking uprobe [ 77.011280][ T5440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.515'. [ 77.056570][ T5365] chnl_net:caif_netlink_parms(): no params data found [ 77.080437][ T5445] loop2: detected capacity change from 0 to 512 [ 77.144725][ T5445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.172762][ T5445] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.184278][ T5445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.202113][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.209243][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.226544][ T5365] bridge_slave_0: entered allmulticast mode [ 77.233326][ T5365] bridge_slave_0: entered promiscuous mode [ 77.248015][ T4779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.260018][ T5365] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.267085][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.274351][ T5365] bridge_slave_1: entered allmulticast mode [ 77.308430][ T5365] bridge_slave_1: entered promiscuous mode [ 77.410154][ T5481] syz.0.516[5481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.410213][ T5481] syz.0.516[5481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.413773][ T1782] bond0 (unregistering): Released all slaves [ 77.434170][ T5481] syz.0.516[5481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.442423][ T5483] loop1: detected capacity change from 0 to 512 [ 77.451019][ T5481] syz.0.516[5481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.455047][ T5483] EXT4-fs: Ignoring removed i_version option [ 77.473719][ T5481] syz.0.516[5481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.477240][ T5481] syz.0.516[5481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.492065][ T5365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.499030][ T5483] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 77.513810][ T5365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.540160][ T5483] System zones: 1-12 [ 77.544904][ T5483] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.523: bg 0: block 131: padding at end of block bitmap is not set [ 77.566083][ T5483] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 77.576032][ T5483] EXT4-fs (loop1): 1 truncate cleaned up [ 77.583911][ T5483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.602216][ T5481] syz.0.516[5481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.602271][ T5481] syz.0.516[5481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.614083][ T5481] syz.0.516[5481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.681853][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.710477][ T5495] pimreg: entered allmulticast mode [ 77.724867][ T5499] pim6reg: entered allmulticast mode [ 77.743574][ T5365] team0: Port device team_slave_0 added [ 77.750385][ T5365] team0: Port device team_slave_1 added [ 77.756066][ T5506] pim6reg: left allmulticast mode [ 77.836919][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.844010][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.870089][ T5365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.881703][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.888769][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.895649][ T5521] loop1: detected capacity change from 0 to 512 [ 77.914805][ T5365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.011555][ T29] kauditd_printk_skb: 794 callbacks suppressed [ 78.011589][ T29] audit: type=1326 audit(2000000033.690:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76e6844fa7 code=0x7ffc0000 [ 78.013648][ T5533] loop1: detected capacity change from 0 to 1024 [ 78.017893][ T29] audit: type=1326 audit(2000000033.690:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76e67e9959 code=0x7ffc0000 [ 78.043801][ T5365] hsr_slave_0: entered promiscuous mode [ 78.047427][ T29] audit: type=1326 audit(2000000033.690:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 78.074819][ T5533] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.110435][ T5365] hsr_slave_1: entered promiscuous mode [ 78.112174][ T5533] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 78.124868][ T5533] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.128286][ T29] audit: type=1326 audit(2000000033.720:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76e6844fa7 code=0x7ffc0000 [ 78.136262][ T5533] EXT4-fs error (device loop1): ext4_map_blocks:705: inode #3: block 3: comm syz.1.535: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.154509][ T29] audit: type=1326 audit(2000000033.720:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76e67e9959 code=0x7ffc0000 [ 78.154542][ T29] audit: type=1326 audit(2000000033.720:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f76e684dff9 code=0x7ffc0000 [ 78.170543][ T5533] Quota error (device loop1): write_blk: dquota write failed [ 78.191585][ T29] audit: type=1326 audit(2000000033.750:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76e6844fa7 code=0x7ffc0000 [ 78.214779][ T5533] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3 [ 78.222141][ T29] audit: type=1326 audit(2000000033.750:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.4.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76e67e9959 code=0x7ffc0000 [ 78.245568][ T5533] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.535: Failed to acquire dquot type 0 [ 78.259447][ T5365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.288374][ T5533] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 3: comm syz.1.535: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.294743][ T5365] Cannot create hsr debugfs directory [ 78.298382][ T5533] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.535: Failed to acquire dquot type 0 [ 78.330166][ T5533] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.535: Freeing blocks not in datazone - block = 0, count = 4096 [ 78.350046][ T5533] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 3: comm syz.1.535: lblock 3 mapped to illegal pblock 3 (length 1) [ 78.374791][ T5533] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.535: Failed to acquire dquot type 0 [ 78.398450][ T5533] EXT4-fs (loop1): 1 orphan inode deleted [ 78.405731][ T5533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.462881][ T5551] pim6reg1: entered promiscuous mode [ 78.468470][ T5551] pim6reg1: entered allmulticast mode [ 78.481539][ T5551] syz.4.538[5551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.498883][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.575060][ T5562] loop1: detected capacity change from 0 to 2048 [ 78.598689][ T5562] loop1: p1 < > p4 [ 78.605566][ T5562] loop1: p4 size 8388608 extends beyond EOD, truncated [ 78.703766][ T2969] loop1: p1 < > p4 [ 78.725683][ T2969] loop1: p4 size 8388608 extends beyond EOD, truncated [ 78.774377][ T5576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.541'. [ 78.836853][ T3764] udevd[3764]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 78.847712][ T3560] udevd[3560]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 78.906110][ T5365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.943450][ T5598] loop0: detected capacity change from 0 to 512 [ 78.950385][ T5365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.974584][ T5598] EXT4-fs: Ignoring removed i_version option [ 78.981357][ T5365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.995745][ T5365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.006604][ T5598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 79.006660][ T80] ================================================================== [ 79.006690][ T80] BUG: KCSAN: data-race in blk_mq_start_request / bt_for_each [ 79.015760][ T5598] System zones: [ 79.022627][ T80] [ 79.022637][ T80] write to 0xffff888101450fd0 of 8 bytes by task 46 on cpu 1: [ 79.022656][ T80] blk_mq_start_request+0x1e4/0x3b0 [ 79.030101][ T5598] 1-12 [ 79.033614][ T80] loop_queue_rq+0x44/0x660 [ 79.035927][ T5598] [ 79.058083][ T80] blk_mq_dispatch_rq_list+0x2a2/0xf30 [ 79.063547][ T80] __blk_mq_sched_dispatch_requests+0x1ce/0xd50 [ 79.069804][ T80] blk_mq_sched_dispatch_requests+0x78/0xe0 [ 79.075706][ T80] blk_mq_run_hw_queue+0x29c/0x4d0 [ 79.080845][ T80] blk_mq_run_hw_queues+0x15b/0x1e0 [ 79.086075][ T80] blk_mq_requeue_work+0x3fa/0x430 [ 79.091224][ T80] process_scheduled_works+0x483/0x9a0 [ 79.096717][ T80] worker_thread+0x51d/0x6f0 [ 79.101314][ T80] kthread+0x1d1/0x210 [ 79.105394][ T80] ret_from_fork+0x4b/0x60 [ 79.109823][ T80] ret_from_fork_asm+0x1a/0x30 [ 79.114621][ T80] [ 79.116941][ T80] read to 0xffff888101450fd0 of 8 bytes by task 80 on cpu 0: [ 79.124307][ T80] bt_for_each+0x279/0x480 [ 79.128764][ T80] blk_mq_queue_tag_busy_iter+0x1a4/0x330 [ 79.128788][ T5598] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.546: bg 0: block 131: padding at end of block bitmap is not set [ 79.134499][ T80] blk_mq_timeout_work+0xc4/0x350 [ 79.153671][ T80] process_scheduled_works+0x483/0x9a0 [ 79.159155][ T80] worker_thread+0x51d/0x6f0 [ 79.163755][ T80] kthread+0x1d1/0x210 [ 79.167833][ T80] ret_from_fork+0x4b/0x60 [ 79.172259][ T80] ret_from_fork_asm+0x1a/0x30 [ 79.177052][ T80] [ 79.179380][ T80] value changed: 0xffff8881021db700 -> 0xffff8881010ac800 [ 79.186501][ T80] [ 79.188823][ T80] Reported by Kernel Concurrency Sanitizer on: [ 79.194993][ T80] CPU: 0 UID: 0 PID: 80 Comm: kworker/0:1H Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 79.205690][ T80] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.215777][ T80] Workqueue: kblockd blk_mq_timeout_work [ 79.221456][ T80] ================================================================== [ 79.263650][ T5365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.272112][ T5598] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 79.286746][ T5365] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.300095][ T1782] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.307179][ T1782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.316119][ T5598] EXT4-fs (loop0): 1 truncate cleaned up [ 79.322679][ T1782] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.329746][ T1782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.348448][ T5598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.429846][ T4779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.440653][ T5365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.511081][ T5365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.596298][ T5365] veth0_vlan: entered promiscuous mode [ 79.605600][ T5365] veth1_vlan: entered promiscuous mode [ 79.625306][ T5365] veth0_macvtap: entered promiscuous mode [ 79.635164][ T5365] veth1_macvtap: entered promiscuous mode [ 79.647169][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.657681][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.667598][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.678202][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.688005][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.698563][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.708383][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.718815][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.728631][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.739073][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.750049][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.758919][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.769434][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.779353][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.789878][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.799773][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.810327][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.820146][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.830655][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.840490][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.851044][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.860883][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.871336][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.882558][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.899085][ T5365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.907824][ T5365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.916574][ T5365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.925384][ T5365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0