last executing test programs: 4.547420221s ago: executing program 2 (id=83): unshare(0x62040200) socket$netlink(0x10, 0x3, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x4001c3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000340)=""/215, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000400)="3292f60e34b68b1f15dcf60000", 0xd, 0x20000001, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0xfc, 0xff, 0xfffff00c}, {0x6, 0xfc, 0x2, 0x7}]}, 0x10) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000200)={0x20000001, 0xfffffff8}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x20040810, &(0x7f0000000040)={0x2, 0x41, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbead5547a7a0eac674fe017bbfb11"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100000000000000050000000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8080c61) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00;~'], 0x1c}}, 0x0) 4.300174121s ago: executing program 2 (id=91): socket$inet(0x2, 0x2, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x8, 0x4], [0x0, 0x8, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x75}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000007000000ff0f000009"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(0x0, 0x2a4c0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r7, 0x0) r8 = syz_io_uring_setup(0x110, &(0x7f0000000680)={0x0, 0xcfb6, 0x10, 0x0, 0xfffffff9}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7ff, 0x6000}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x20001400) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xcb}]}}]}, 0x44}, 0x1, 0x8100000018000000}, 0x0) r13 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) dup(r13) socket(0x10, 0x2, 0x0) 3.845890752s ago: executing program 2 (id=98): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x9, 0x5, {{0x7, 0x4, 0x1, 0x0, 0x1c, 0x66, 0x0, 0x2, 0x4, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x7, 0x69, [@dev={0xac, 0x14, 0x14, 0xa}]}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x20, 0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x8, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', 0x0}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x24, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4eaa}, @jmp={0x5, 0x1, 0x4, 0x2, 0x2, 0xfffffffffffffff0, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400}, @ldst={0x0, 0x3, 0x6, 0xb, 0x5, 0x20}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x60000000}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x6, 0x1000, &(0x7f0000000540)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001580)={0x0, 0x9, 0xffffff00}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000015c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001600)=[{0x5, 0x2, 0x4, 0xb}, {0x4, 0x5, 0x2, 0x2}, {0x5, 0x3, 0x9, 0x7}, {0x4, 0x4, 0xe, 0x3}, {0x4, 0x3, 0xd, 0x3}, {0x4, 0x5, 0x4, 0x5}, {0x0, 0x1, 0x8, 0x9}], 0x10, 0x200, @void, @value}, 0x94) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x2, 0x3, 0x2, 0x9, 0x5, 0x8, 0x8}, @printk={@lu}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0xa, 0xb, 0xa, 0xa8}, @generic={0xea, 0x9, 0x9, 0x401, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0xfffffc01, 0x4a, &(0x7f00000000c0)=""/74, 0x40f00, 0x1, '\x00', r1, 0x1a, r3, 0x8, &(0x7f0000000200)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x4, 0x5, 0x6}, 0x10, 0xc74b, r7, 0x8, &(0x7f0000001740)=[r9, r10], &(0x7f0000001780)=[{0x4, 0x2, 0xe, 0x1}, {0x5, 0x1, 0xd, 0x2}, {0x2, 0x4, 0x20000001, 0x3}, {0x5, 0x5, 0x110, 0x8}, {0x1, 0x5, 0x3, 0xa}, {0x1, 0x4, 0x4, 0x4}, {0x0, 0x1, 0xe, 0xa}, {0x1, 0x2, 0x1, 0x5}], 0x10, 0x5, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000001580)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "b3a6c7", 0x10, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@dstopts={0x4, 0x1, '\x00', [@generic={0xe}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x1}]}]}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 2.567313295s ago: executing program 3 (id=122): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fallocate(r0, 0x3, 0x0, 0x10000) 2.328237825s ago: executing program 1 (id=123): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000010000000000000030000f8000000000000000000000000004e0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0x3a) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2, 0xa, 0x7d, 0xc7ad09342fb45d64, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x8080) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6) socket$nl_netfilter(0x10, 0x3, 0xc) 2.139272896s ago: executing program 3 (id=125): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) (async) fremovexattr(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1e}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) socket$l2tp6(0xa, 0x2, 0x73) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r6, 0x40095505, 0x0) (async) ioctl$EVIOCGBITSW(r6, 0x40095505, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_usb_ep_write(r7, 0xb, 0xc0, &(0x7f0000000280)="7fd1de6ffeb4fc0eb8e30cf61cb4f45d492df652722651f4a1430c0cd2718dd40c17a1201b5e6c6cb77ce84f65fea37056924301b0a7a771a723d513b820712d7ece85f985bb317610937d87925ab0b1bcbff226848c7200ee93d798a99ada22b7fb81375964fc77f32b869121394c02577d1f30b2858eac35245de8ff1e083a8d314e2afe4e2fe7f6ddb13c613ad27eb7df7553cee72b3a345fb2e27f0bbcccf394db6519d31f1b16ee746dcf27546fb8266c3ce941caf28a00b638032a7f3b") 1.871355156s ago: executing program 3 (id=127): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) connect$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x4, 0x2}, 0x4}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x18) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r5 = epoll_create(0x3ff) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000280)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xf, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x17, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r8, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, 0x0, 0x0) 1.870756476s ago: executing program 3 (id=129): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r0 = syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x13) sendmmsg$unix(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x400000, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r8, &(0x7f0000001280), 0x6) 1.860656386s ago: executing program 0 (id=130): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0xe8, 0x0, 0x0, 0x2, 0x0, @private=0x500, @private=0xa010100}, @address_request={0x11, 0x2}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x29, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$unix(0x1, 0x2, 0x0) accept4$unix(r2, &(0x7f00000002c0), &(0x7f0000000400)=0x6e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r4}, 0x9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.363287627s ago: executing program 1 (id=136): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x9, 0x3, 0xf, [{@empty}, {@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010102, 0x6}, {@multicast1}, {@rand_addr=0x64010101, 0xbb24}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x6, 0x3, "d4"}, {0x0, 0xf, "f342386f1a8f0158068e022446"}, {0x6, 0xd, "d93fd23b9b6f2715bb63cc"}, {0x5, 0x9, "e6dd93e2101c8f"}, {0x5, 0xa, "07f69c57f18e003f"}, {0x1, 0x7, "78f90b1549"}, {0x1, 0x2}, {0x0, 0x7, "fe83d773e5"}]}, @end]}}}], 0x90}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0xfff, 0x0, 0x5}, {}, {}, {}, {0x0, 0x2}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x4504432c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = syz_io_uring_setup(0x24f5, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000800)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) io_uring_enter(r5, 0x1d2d, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x7) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r10, 0x40047451, 0x2000000c) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 1.362934557s ago: executing program 4 (id=137): r0 = open(&(0x7f0000000000)='./file0\x00', 0x301100, 0xa) syz_emit_ethernet(0x3b6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) 1.328160107s ago: executing program 4 (id=138): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0x8, 0x20110, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x14, r2, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.280587057s ago: executing program 0 (id=139): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000000340)={0x800000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) 1.280393867s ago: executing program 4 (id=140): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, 0x0, 0x2c, 0x0, @void}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) 1.280163437s ago: executing program 1 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) pipe2$9p(&(0x7f00000001c0), 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000d40)={0x1ff, 0x4, 0x9}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x10000c, 0xffffffffffffffff, 0x59c, 0xffffffffffffffff}) 1.258242397s ago: executing program 0 (id=142): creat(&(0x7f0000000000)='./bus\x00', 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000900), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5, 0x0, 0x7265}, 0xffffffc1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.093356148s ago: executing program 4 (id=143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x1}, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6) r6 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0xb8d2, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x90800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYRES16=r1, @ANYRES8=r1], 0x2ec}, 0x1, 0x0, 0x0, 0x40844}, 0x84) socketpair(0x1d, 0x800, 0x5, &(0x7f0000000240)) 1.024523718s ago: executing program 1 (id=144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r3 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2f5}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000001540)=[0x4]}, 0x20) 1.018113448s ago: executing program 1 (id=145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2000) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1580}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x68040200) readv(r3, &(0x7f0000000e80)=[{&(0x7f00000005c0)=""/145, 0x91}, {&(0x7f0000000d80)=""/201, 0xc9}, {&(0x7f0000000680)=""/151, 0x97}], 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x1404, &(0x7f0000000740)={[{@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000500)={[{@delalloc}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@i_version}, {@grpjquota, 0x2e}, {@noload}, {@nogrpid}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000740)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9}, 0xa0}}, 0x0) munlockall() sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000d7e473be3ec8c3b212828334f2ca16494cfe38e142a5ce84628943f1fe6c39c0a08be93023402f4e68694d2cee5a32a16648a198ed2f7821b142dd84158354b6a7d368fafe0c9f120ee4aa0859536263399f0bb2d1def6542b63aa58e94dcdc966dad0e6e78b9fc7a8395199148af3fd324caee45befa2e3876bf7ebadb2973a76b316b4a0b64e84f1041cbb4f490ab4421c25ca05345d66a02c12b47e5d6a16418a25b781f13d660caab166500bb041b1c65c6f296b6d7f92520e82dae945b3348bdc5d5516589338521de4aa7df25100f918b1d364e2750fd9c1d007ca1fdb29cb243150ffc33a9f4952b7c5ae2bed65a7"], 0x3c}}, 0x0) 1.014140118s ago: executing program 0 (id=146): r0 = syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000000)={[{@minixdf}, {@data_journal}, {}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000003c0)="$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") truncate(&(0x7f0000000380)='./file1\x00', 0x400000007fff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file1\x00'}) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)={0xffffffffffffffd5, 0x1, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_MASK={0x88, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x103048}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x2, 0x70bd2a, 0x25dfdbfd, {0x80, 0x0, 0x10, 0xf, 0x0, 0x4, 0xc8, 0x5}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) 827.149728ms ago: executing program 0 (id=147): iopl(0x3) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (fail_nth: 10) 826.934138ms ago: executing program 3 (id=148): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fallocate(r0, 0x3, 0x0, 0x10000) 764.568378ms ago: executing program 2 (id=149): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x383, &(0x7f0000000100)="$eJzs3c9rI2UYwPEnP5ofXdrkIIqC9EEvehna6lkN0gWx4NLdiLvCwux2qqFjUjIhEhFbT17Fm/+A4LLHvS2o/0Av3taLF2+9LAi6B3Fk3pnpTpJJJxu3pN1+P1DyzLw/5n2TITxvYN4effTtZ7s7nrVj9yRfUcmJiDwSqUteYjm/bF6DMzkpSdKBvH7pzwcvX71+4/3G5ubGlurlxrU31lV1eeWnz7+sRtXul+WwfvPo4fofh88fvnj077VPW562PG13emrrrc7vPfuW6+h2y9u1VK+4ju052mp7Tjcs74TlO25nb2+gdnt7aXGv63ie2u2B7joD7XW01x2o/YndaqtlWbq0KBdLZeTYz2W3ad7Z2rIbM17w9ozt8JQVRXz/hPJut2EXRKzqWEnzzqkODAAAnEkj+f/31SiTrEv+OKHMJdcCKfl/HJv8P8g6H+f/d1/5pXfpw3vLUf5/v5SW/7/5W9h+KP8Prv6k+X+wTDkx//9x5Hg8Izr39p+kcnb+P80qAnO1Uho7lfzQFkz+vxit342vP767agLyfwAAAAAAAAAAAAAAAAAAAAAAzoNHvl/zfb8Wv8Z/jx8hiI7jo5MeNMa5M+nzL0fPgR3fD3gmXb1+Qyrmwb3isoj7Tb/Zb4avUXlccVVq8o+5HyLhhhMHplADdfnZ3e+bx+7c/X6zYEoaIiquOLImNakPtTfx5fc2N9ZUS0EXpn14/f1+M1cMumrsSMu0X5eaPJfWfmFjXUPD7Uvy2quJ9pbU5Nfb0hFXtqPvsfj6X62pvvvB5kj7qqmX5u1T/1QAAAAAAHi6LNVKtHyuD69/w/W7ZammlQdreUmuz8d/HzheX6+mrs+LtZeK8507AAAAAAAXhVf6Ytd2XafrDSYGVcmqU456O7mffGo/xYyrjwUPTLDgFibXKSQ2O52251L0HzSmHUbXG8jUY46Dv8qS+ibEW7gOFVWmelcnBfH8p6hcmbrnQnzb5MfnfnMpc6grwXh0pukkgvhno0l15MqsPU8K4pspq/IL3/3w92yXyEW79iaL3rpXyZipCXIjZw4ybtqHvp85noVT/MoBAAAAMCdx0l/14jPvzHdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcQP9rdzRf0nezGwnmPUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgrPgvAAD//3I4788=") open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) 764.428058ms ago: executing program 4 (id=150): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)="03", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) recvmmsg(r1, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}, 0xfffffff7}], 0x1, 0x2, 0x0) 745.195778ms ago: executing program 4 (id=151): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0x26) getdents64(r5, &(0x7f0000000200)=""/119, 0x77) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x400}, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x6, 0x8, 0x3ff, 0x400}) 698.818038ms ago: executing program 2 (id=152): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x382, &(0x7f0000000540)="$eJzs3c9rI2UYwPEnP5ofXbbJQRQF6YNe9DK01bMapAtiwaW7EXcFYXY71dAxKZkQiYitJ6/izX9AcNnj3hbUf6AXb+vFi7deFgRdRByZd2a6k2TSSeOWtNvvB0qemffHvG8yhOcNzNvDD775dGfbs7btnuQrKjkRkUcidclLLOeXzWtwJiclSdqXVy/98eDFazduvtvY2FjfVL3SuP7amqouLf/42RfVqNr9shzUPzp8uPb7wbMHzx/+e/2TlqctT9udntp6q/Nbz77lOrrV8nYs1auuY3uOttqe0w3LO2H5ttvZ3R2o3d66vLjbdTxP7fZAd5yB9jra6w7U/thutdWyLL28KBdLZeTYz2W3ad7Z3LQbM17w9ozt8KT97fv+McXdbsMuiFjVsZLmnVMdFwAAOJNG8v/vqlEmWZf8UUKZS64FUvL/ODb5f5B1Ps7/7770c+/S+/eWovz/fikt/3/917D9UP4fXP2k+X+wTDk2//9h5Hg8Izr39k5SOTv/n2YVgblaLo2dSn5oCyb/X4zW78ZXH95dMQH5PwAAAAAAAAAAAAAAAAAAAAAA58Ej36/5vl+LX+O/x48QRMfx0XEPGuPcmfT5l6PnwI7uBzyVrt24KRXz4F5xScT9ut/sN8PXqDyuuCI1+cfcD5Fww4l9U6iBuvzk7vXNY3fuXr9ZMCUNERVXHFmVmtSH2pv4yjsb66uqpaAL0z68/l6/mSsGXTW2pWXar0lNnklrv7C+pqHh9iV55eVEe0tq8stt6YgrW9H3WHz9L1dV335vY6R91dRL8+apfyoAAAAAADxZlmolWj7Xh9e/4frdslTTyoO1vCTX5+O/Dxytr1dS1+fF2gvF+c4dAAAAAICLwit9vmO7rtP1BhODqmTVKUe9Hd9PPrWfYsbVx4IHJlhwC5PrFBKbnU7bcyn6DxrTDqPrDWTqMcfBn2VJfRPiLVyHiipTvauTgnj+U1SuTN1zIb5t8iefu9P1loPx6EzTSQTxz0aT6sjVWXueFMQ3U1bl5779/q/ZLpGLdu1NFr1xr5IxUxPkRs7sZ9y0D30/czwLp/iVAwAAAGBO4qS/6sVn3prvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuID+1+5ovqTvZjcSzHuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFnxXwAAAP//jOnzCw==") open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (fail_nth: 3) 362.858269ms ago: executing program 3 (id=153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1050f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x4, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x80, 0x2}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x474, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x424, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x4b8}, @TCA_FLOW_MASK={0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xe, 0x6, 0xfffffc01, 0x3, 0x6, 0x8, 0x9, 0xb, 0x93f5, 0x80000001, 0x100, 0x7e97a181, 0x1, 0x3, 0x4, 0x1, 0x487, 0x5d, 0x379101e, 0xc827, 0x8000, 0x3, 0x2f3036a8, 0xffffff80, 0x360, 0x800, 0x41b4, 0x0, 0x4, 0x4, 0x400, 0x5, 0x34, 0x4, 0xd, 0x1ff, 0xa, 0x8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x315, 0x2, 0x4, 0x0, 0x6, 0x0, 0x3, 0x5, 0x0, 0x8, 0x101, 0x5, 0x0, 0xb396, 0xb47, 0x400000, 0x3ff, 0xa, 0x40, 0x4, 0x4, 0x1, 0x7e7b, 0x4, 0x7, 0x8, 0x6, 0x0, 0x100, 0x0, 0x9, 0x7, 0x2bd, 0x5, 0x4cb6, 0x3, 0x9, 0xb, 0x7, 0x6, 0x80000001, 0x81ba, 0x5, 0x8, 0x7f, 0x1, 0xffff, 0x6, 0x1, 0xbb, 0x6, 0x0, 0x21b8, 0x4, 0x2, 0x1ff, 0x1, 0x5, 0xfff, 0x8, 0x9, 0x2, 0x4416, 0x277180fe, 0x2, 0x4f, 0x3, 0x7, 0x7fff, 0x0, 0xe, 0x729a, 0x1000, 0x4, 0x8000, 0x4, 0xa, 0xd, 0x3, 0x2, 0x6, 0x58, 0xfffffffa, 0x3, 0x5, 0x5, 0x1, 0xff, 0x2, 0x3, 0x7f, 0xffff8001, 0x1, 0xfffffff8, 0x35, 0x8, 0x7, 0x4, 0x80000000, 0x0, 0x9, 0x7, 0xe, 0x8000, 0xbf0, 0x100000, 0xffffff4f, 0x3, 0x1, 0x5, 0x2, 0x7f, 0x505e, 0x9, 0x6, 0x2, 0x4, 0x100, 0x7, 0xf, 0x40, 0x2, 0x3ff, 0x4, 0x2, 0x81, 0x4, 0x6, 0x0, 0x7fffffff, 0x0, 0x2, 0x4e08, 0x6, 0x5, 0x84a, 0x100, 0x7, 0x7, 0x7629, 0x396, 0x2, 0x407, 0x5, 0x4, 0x5, 0xf5, 0x4, 0x3, 0x8, 0x8, 0x4, 0x8, 0x0, 0x1, 0x3, 0xb2, 0xfffffff9, 0x9, 0x7fff, 0x4c4, 0x9, 0x1, 0x321, 0x4, 0x48000000, 0x3, 0x3473594a, 0x3, 0x546, 0x1, 0x0, 0x57, 0x5349, 0x0, 0x81, 0x59, 0x8, 0x9, 0x82eb, 0x200, 0xfffffffc, 0xc6e, 0x7, 0x80000000, 0x2, 0x101, 0x4, 0x7fff, 0x101, 0x2, 0x3, 0xb4fd, 0x2, 0x8df, 0x9, 0xbd, 0xfffffff6, 0x579d, 0x10, 0x0, 0x130, 0x6, 0x8, 0x5, 0x8, 0x7, 0x5, 0x0, 0x10001, 0x0, 0x81]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x9, 0xf8}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x474}}, 0x0) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000010000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0xa) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x10800, 0x0) close_range(r5, r9, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = socket(0x10, 0x3, 0x0) connect$netlink(r11, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x20001, 0x20000000}, 0xc) 252.369759ms ago: executing program 0 (id=154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r4 = gettid() socket$nl_route(0x10, 0x3, 0x0) r5 = getpgid(r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="490900000000000000001500000004002b8008000300", @ANYRES32=r9, @ANYBLOB="08002a0000000000050029000100000020002b80040003800800010001040000050002"], 0x58}}, 0x0) prlimit64(r5, 0x2, &(0x7f0000000040)={0x8, 0x3c}, &(0x7f0000000080)) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="f7ddffff000000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="040020000000000000000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRESOCT=r11, @ANYRESHEX=r0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 43.198289ms ago: executing program 2 (id=155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r3 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2f5}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000001540)=[0x4]}, 0x20) 0s ago: executing program 1 (id=156): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="180400000000de96cf06000004000000000000000000", @ANYRES16, @ANYRES16=r0], 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)=""/202, 0xca}, {&(0x7f0000000640)=""/218, 0xda}], 0x2, &(0x7f0000000180)=""/115, 0x73}, 0x162) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000020000000800020000000000"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000)=r3, 0x4) sendmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x20040084) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff, 0xffffffff], [0xff, 0xffffff00, 0xff000000], 'batadv0\x00', 'lo\x00', {}, {0xff}, 0x2f, 0x6, 0x1, 0x50}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7, 0x200, '\x00', {0x3}}}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x400008, 0x0, 0x2, 'syz1\x00'}}, @common=@inet=@set2={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) recvmsg$unix(r7, &(0x7f0000000040)={0x0, 0xfffffffffffffe9f, 0x0}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) kernel console output (not intermixed with test programs): [ 17.624082][ T29] audit: type=1400 audit(1733661926.169:81): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 21.135450][ T29] audit: type=1400 audit(1733661929.689:82): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.136570][ T3282] cgroup: Unknown subsys name 'net' [ 21.158161][ T29] audit: type=1400 audit(1733661929.689:83): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.185514][ T29] audit: type=1400 audit(1733661929.709:84): avc: denied { unmount } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.305189][ T3282] cgroup: Unknown subsys name 'cpuset' [ 21.311227][ T3282] cgroup: Unknown subsys name 'rlimit' [ 21.409536][ T29] audit: type=1400 audit(1733661929.959:85): avc: denied { setattr } for pid=3282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.432918][ T29] audit: type=1400 audit(1733661929.959:86): avc: denied { create } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.453369][ T29] audit: type=1400 audit(1733661929.959:87): avc: denied { write } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.473751][ T29] audit: type=1400 audit(1733661929.959:88): avc: denied { read } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.494073][ T29] audit: type=1400 audit(1733661929.969:89): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.518921][ T29] audit: type=1400 audit(1733661929.969:90): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.525348][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.550939][ T29] audit: type=1400 audit(1733661930.099:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.589442][ T3282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.584306][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 22.669077][ T3295] chnl_net:caif_netlink_parms(): no params data found [ 22.705098][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.712161][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.719300][ T3296] bridge_slave_0: entered allmulticast mode [ 22.725630][ T3296] bridge_slave_0: entered promiscuous mode [ 22.732276][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.739387][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.746506][ T3296] bridge_slave_1: entered allmulticast mode [ 22.752759][ T3296] bridge_slave_1: entered promiscuous mode [ 22.766912][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 22.785046][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.799309][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 22.812601][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.841827][ T3296] team0: Port device team_slave_0 added [ 22.851463][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 22.864127][ T3296] team0: Port device team_slave_1 added [ 22.892248][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.899362][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.906538][ T3295] bridge_slave_0: entered allmulticast mode [ 22.912762][ T3295] bridge_slave_0: entered promiscuous mode [ 22.925334][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.932289][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.958473][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.977236][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.984333][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.991502][ T3295] bridge_slave_1: entered allmulticast mode [ 22.997813][ T3295] bridge_slave_1: entered promiscuous mode [ 23.006135][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.013128][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.039030][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.066373][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.073465][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.080625][ T3306] bridge_slave_0: entered allmulticast mode [ 23.087180][ T3306] bridge_slave_0: entered promiscuous mode [ 23.107327][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.114449][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.121572][ T3306] bridge_slave_1: entered allmulticast mode [ 23.127981][ T3306] bridge_slave_1: entered promiscuous mode [ 23.136725][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.145963][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.153004][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.160232][ T3299] bridge_slave_0: entered allmulticast mode [ 23.166755][ T3299] bridge_slave_0: entered promiscuous mode [ 23.185413][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.194626][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.201847][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.209064][ T3299] bridge_slave_1: entered allmulticast mode [ 23.215586][ T3299] bridge_slave_1: entered promiscuous mode [ 23.223363][ T3296] hsr_slave_0: entered promiscuous mode [ 23.229317][ T3296] hsr_slave_1: entered promiscuous mode [ 23.261608][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.270887][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.277985][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.285172][ T3298] bridge_slave_0: entered allmulticast mode [ 23.291310][ T3298] bridge_slave_0: entered promiscuous mode [ 23.298323][ T3295] team0: Port device team_slave_0 added [ 23.309808][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.323326][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.336958][ T3295] team0: Port device team_slave_1 added [ 23.347392][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.354541][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.361662][ T3298] bridge_slave_1: entered allmulticast mode [ 23.368221][ T3298] bridge_slave_1: entered promiscuous mode [ 23.375013][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.394822][ T3306] team0: Port device team_slave_0 added [ 23.421095][ T3306] team0: Port device team_slave_1 added [ 23.431132][ T3299] team0: Port device team_slave_0 added [ 23.437892][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.451469][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.458456][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.484496][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.499564][ T3299] team0: Port device team_slave_1 added [ 23.506106][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.521445][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.528473][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.554537][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.565719][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.572653][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.598584][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.628470][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.635457][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.661456][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.677959][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.685053][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.711203][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.733389][ T3298] team0: Port device team_slave_0 added [ 23.740057][ T3298] team0: Port device team_slave_1 added [ 23.746058][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.753016][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.779000][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.818272][ T3306] hsr_slave_0: entered promiscuous mode [ 23.824350][ T3306] hsr_slave_1: entered promiscuous mode [ 23.830353][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.837953][ T3306] Cannot create hsr debugfs directory [ 23.845411][ T3295] hsr_slave_0: entered promiscuous mode [ 23.851406][ T3295] hsr_slave_1: entered promiscuous mode [ 23.857364][ T3295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.865013][ T3295] Cannot create hsr debugfs directory [ 23.876107][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.883111][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.909060][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.920253][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.927314][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.953275][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.972778][ T3299] hsr_slave_0: entered promiscuous mode [ 23.979606][ T3299] hsr_slave_1: entered promiscuous mode [ 23.985533][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.993082][ T3299] Cannot create hsr debugfs directory [ 24.031578][ T3298] hsr_slave_0: entered promiscuous mode [ 24.037709][ T3298] hsr_slave_1: entered promiscuous mode [ 24.043570][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.051202][ T3298] Cannot create hsr debugfs directory [ 24.110760][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.121301][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.139205][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.149677][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.218945][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.236634][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.250944][ T3295] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.259719][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.268327][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.279135][ T3295] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.299239][ T3295] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.307937][ T3295] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.333944][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.343372][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.359129][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.367815][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.376675][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.390609][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.399623][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.408155][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.421704][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.452811][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.465236][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.472297][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.481675][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.488808][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.499846][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.539885][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.562864][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.570027][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.579132][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.586250][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.596998][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.612637][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.622710][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.633892][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.641023][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.653311][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.660486][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.682087][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.695909][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.702960][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.711851][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.718924][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.735249][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.777221][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.788351][ T3295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.811744][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.841941][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.861773][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.868882][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.883923][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.891042][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.911833][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.947532][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.981625][ T3296] veth0_vlan: entered promiscuous mode [ 24.992202][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.014752][ T3296] veth1_vlan: entered promiscuous mode [ 25.044155][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.084783][ T3296] veth0_macvtap: entered promiscuous mode [ 25.105316][ T3296] veth1_macvtap: entered promiscuous mode [ 25.125148][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.147337][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.157645][ T3306] veth0_vlan: entered promiscuous mode [ 25.169801][ T3306] veth1_vlan: entered promiscuous mode [ 25.180616][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.189829][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.198561][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.207475][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.228418][ T3295] veth0_vlan: entered promiscuous mode [ 25.235388][ T3299] veth0_vlan: entered promiscuous mode [ 25.242369][ T3295] veth1_vlan: entered promiscuous mode [ 25.261132][ T3299] veth1_vlan: entered promiscuous mode [ 25.270822][ T3306] veth0_macvtap: entered promiscuous mode [ 25.278722][ T3298] veth0_vlan: entered promiscuous mode [ 25.292533][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.294135][ T3306] veth1_macvtap: entered promiscuous mode [ 25.313833][ T3295] veth0_macvtap: entered promiscuous mode [ 25.329859][ T3295] veth1_macvtap: entered promiscuous mode [ 25.347444][ T3299] veth0_macvtap: entered promiscuous mode [ 25.357071][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.367598][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.379904][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.389141][ T3298] veth1_vlan: entered promiscuous mode [ 25.405547][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.416176][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.427132][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.435557][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.444365][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.453128][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.455198][ T3436] futex_wake_op: +}[@ tries to shift op by 144; fix this program [ 25.461861][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.486977][ T3299] veth1_macvtap: entered promiscuous mode [ 25.495134][ T3298] veth0_macvtap: entered promiscuous mode [ 25.502147][ T3298] veth1_macvtap: entered promiscuous mode [ 25.508768][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.519356][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.529266][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.539765][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.550498][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.574995][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.585494][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.595371][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.605846][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.616576][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.627343][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.637975][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.647900][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.658408][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.668238][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.678683][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.690278][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.693870][ T3439] loop1: detected capacity change from 0 to 512 [ 25.707819][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.718287][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.728117][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.730051][ T3439] ======================================================= [ 25.730051][ T3439] WARNING: The mand mount option has been deprecated and [ 25.730051][ T3439] and is ignored by this kernel. Remove the mand [ 25.730051][ T3439] option from the mount to silence this warning. [ 25.730051][ T3439] ======================================================= [ 25.738586][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.738600][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.738615][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.803609][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.814066][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.815191][ T3439] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 25.829365][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.839257][ T3439] System zones: 0-2, 18-18, 34-34 [ 25.841478][ T3295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.847049][ T3439] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6: bg 0: block 248: padding at end of block bitmap is not set [ 25.853105][ T3295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.875903][ T3295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.884637][ T3295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.900044][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.910523][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.920438][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.922555][ T3448] loop4: detected capacity change from 0 to 2048 [ 25.930880][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.930893][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.930907][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.931612][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.954741][ T3439] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.6: Failed to acquire dquot type 1 [ 25.975956][ T3448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.000725][ T3439] EXT4-fs (loop1): 1 truncate cleaned up [ 26.018813][ T3439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.025229][ T3299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.040103][ T3299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.048864][ T3299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.057584][ T3299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.069265][ T3439] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.075396][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.090010][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.099902][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.110439][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.120340][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.130822][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.140652][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.151087][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.156422][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 26.156435][ T29] audit: type=1400 audit(1733661934.709:144): avc: denied { read } for pid=3438 comm="syz.1.6" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.161463][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.166952][ T29] audit: type=1400 audit(1733661934.709:145): avc: denied { open } for pid=3438 comm="syz.1.6" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.190787][ T3298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.197753][ T3443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.220676][ T3298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.230215][ T3443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.237860][ T3298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.263011][ T3298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.276146][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.291315][ T3401] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 26.300375][ T3401] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:7: Failed to release dquot type 1 [ 26.303153][ T29] audit: type=1400 audit(1733661934.849:146): avc: denied { ioctl } for pid=3438 comm="syz.1.6" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.320316][ T3439] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 26.386469][ T29] audit: type=1400 audit(1733661934.939:147): avc: denied { create } for pid=3454 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 26.401044][ T3453] loop4: detected capacity change from 0 to 2048 [ 26.412967][ T3455] loop3: detected capacity change from 0 to 256 [ 26.433203][ T3455] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 26.447747][ T3455] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.483355][ T29] audit: type=1400 audit(1733661934.999:148): avc: denied { create } for pid=3454 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.505386][ T3461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 26.514821][ T3453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.524025][ T29] audit: type=1400 audit(1733661935.039:149): avc: denied { setopt } for pid=3460 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.546187][ T29] audit: type=1400 audit(1733661935.039:150): avc: denied { bind } for pid=3460 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.546206][ T29] audit: type=1400 audit(1733661935.039:151): avc: denied { node_bind } for pid=3460 comm="syz.2.3" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 26.546246][ T29] audit: type=1400 audit(1733661935.039:152): avc: denied { name_bind } for pid=3460 comm="syz.2.3" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 26.551445][ T3461] loop0: detected capacity change from 0 to 512 [ 26.554590][ T3461] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.554604][ T3461] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 26.581698][ T3461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 26.619205][ T3467] infiniband syz1: set active [ 26.628493][ T3461] System zones: [ 26.633340][ T3467] infiniband syz1: added bond_slave_1 [ 26.678294][ T3461] 1-12 [ 26.681868][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.691141][ T3461] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 26.706072][ T3461] EXT4-fs (loop0): 1 truncate cleaned up [ 26.712001][ T3461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.725129][ T3467] RDS/IB: syz1: added [ 26.731708][ T3467] smc: adding ib device syz1 with port count 1 [ 26.738800][ T3467] smc: ib device syz1 port 1 has pnetid [ 26.795382][ T3461] +}[@ (3461) used greatest stack depth: 10600 bytes left [ 26.813149][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.849148][ T3470] loop4: detected capacity change from 0 to 1024 [ 26.863371][ T3470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.938737][ T3439] syz.1.6 (3439) used greatest stack depth: 9304 bytes left [ 26.958614][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.005641][ T3485] bond1: entered promiscuous mode [ 27.010745][ T3485] bond1: entered allmulticast mode [ 27.016110][ T3485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 27.098687][ T3488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.127071][ T3488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 27.218475][ T3492] loop0: detected capacity change from 0 to 2048 [ 27.236727][ T3492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.273153][ T3499] loop2: detected capacity change from 0 to 512 [ 27.285495][ T3499] EXT4-fs: inline encryption not supported [ 27.327369][ T3499] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 27.338952][ T3499] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 27.349113][ T3499] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.15: Corrupt directory, running e2fsck is recommended [ 27.373444][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.390032][ T3499] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 27.394768][ T3506] syz.1.20[3506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.399358][ T3501] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 27.410801][ T3506] syz.1.20[3506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.418038][ T3506] syz.1.20[3506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.444884][ T3499] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.15: corrupted in-inode xattr: invalid ea_ino [ 27.474610][ T3499] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.15: couldn't read orphan inode 15 (err -117) [ 27.490798][ T3511] loop1: detected capacity change from 0 to 128 [ 27.502539][ T3512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 27.511470][ T3512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 27.525808][ T3512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 27.543494][ T3499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.563776][ T3512] capability: warning: `syz.0.19' uses 32-bit capabilities (legacy support in use) [ 27.574235][ T3514] loop3: detected capacity change from 0 to 1024 [ 27.585367][ T3514] EXT4-fs: Ignoring removed nobh option [ 27.585404][ T3514] EXT4-fs: Ignoring removed oldalloc option [ 27.591905][ T3514] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 27.617113][ T3499] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 27.628630][ T3499] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 27.638844][ T3499] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.15: Corrupt directory, running e2fsck is recommended [ 27.651675][ T3499] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.15: path /2/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 27.674240][ T3516] loop0: detected capacity change from 0 to 512 [ 27.694882][ T3514] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.22: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 27.713172][ T3499] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 8: comm syz.2.15: path /2/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 27.744938][ T3516] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 27.771026][ T3514] EXT4-fs error (device loop3): ext4_quota_enable:7115: comm syz.3.22: Bad quota inode: 3, type: 0 [ 27.788029][ T3514] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 27.817908][ T3516] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 27.824562][ T3514] EXT4-fs (loop3): mount failed [ 27.877124][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.888262][ T3516] EXT4-fs (loop0): orphan cleanup on readonly fs [ 27.937753][ T3516] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.19: Invalid block bitmap block 0 in block_group 0 [ 27.970393][ T3525] loop3: detected capacity change from 0 to 1024 [ 27.977362][ T3516] EXT4-fs (loop0): Remounting filesystem read-only [ 27.995848][ T3525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.004829][ T3516] EXT4-fs (loop0): 1 orphan inode deleted [ 28.053821][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.079252][ T3516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 28.092348][ T3516] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 28.099180][ T3532] geneve0: entered allmulticast mode [ 28.099538][ T3516] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.167919][ T3536] loop4: detected capacity change from 0 to 1764 [ 28.210822][ T3532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29'. [ 28.242765][ T3542] FAULT_INJECTION: forcing a failure. [ 28.242765][ T3542] name failslab, interval 1, probability 0, space 0, times 1 [ 28.255475][ T3542] CPU: 1 UID: 0 PID: 3542 Comm: syz.4.30 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 28.265992][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 28.276055][ T3542] Call Trace: [ 28.279346][ T3542] [ 28.282348][ T3542] dump_stack_lvl+0xf2/0x150 [ 28.287013][ T3542] dump_stack+0x15/0x1a [ 28.291237][ T3542] should_fail_ex+0x223/0x230 [ 28.295942][ T3542] should_failslab+0x8f/0xb0 [ 28.300603][ T3542] kmem_cache_alloc_noprof+0x52/0x320 [ 28.305994][ T3542] ? audit_log_start+0x34c/0x6b0 [ 28.311000][ T3542] audit_log_start+0x34c/0x6b0 [ 28.315838][ T3542] ? strncpy_from_user+0x1ef/0x210 [ 28.321050][ T3542] audit_seccomp+0x4b/0x130 [ 28.325569][ T3542] ? cgroup_rstat_updated+0x9f/0x570 [ 28.330912][ T3542] __seccomp_filter+0x6fa/0x1180 [ 28.336100][ T3542] ? __perf_event_task_sched_out+0x138/0x1010 [ 28.342332][ T3542] ? __dequeue_entity+0x22/0x310 [ 28.347297][ T3542] __secure_computing+0x9f/0x1c0 [ 28.352294][ T3542] syscall_trace_enter+0xd1/0x1f0 [ 28.357403][ T3542] do_syscall_64+0xaa/0x1c0 [ 28.361920][ T3542] ? clear_bhb_loop+0x55/0xb0 [ 28.366645][ T3542] ? clear_bhb_loop+0x55/0xb0 [ 28.371409][ T3542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.377373][ T3542] RIP: 0033:0x7ff93528e8ec [ 28.381801][ T3542] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 28.401478][ T3542] RSP: 002b:00007ff933907050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 28.409909][ T3542] RAX: ffffffffffffffda RBX: 00007ff935455fa0 RCX: 00007ff93528e8ec [ 28.417893][ T3542] RDX: 000000000000000f RSI: 00007ff9339070b0 RDI: 0000000000000005 [ 28.421913][ T3549] loop0: detected capacity change from 0 to 2048 [ 28.425864][ T3542] RBP: 00007ff9339070a0 R08: 0000000000000000 R09: 0000000000000000 [ 28.440278][ T3542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 28.448262][ T3542] R13: 0000000000000000 R14: 00007ff935455fa0 R15: 00007ffe0fb7a0e8 [ 28.456251][ T3542] [ 28.489933][ T3549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.507900][ T3551] loop4: detected capacity change from 0 to 2048 [ 28.534790][ T3551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.566232][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.639604][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.667786][ T3559] raw_sendmsg: syz.0.35 forgot to set AF_INET. Fix it! [ 28.786230][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.833918][ T3567] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.39'. [ 28.847649][ T3571] program syz.4.40 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 28.898974][ T3572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37'. [ 28.980304][ T3583] loop1: detected capacity change from 0 to 2048 [ 29.022546][ T3583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.133479][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.212921][ T3597] SELinux: Context Ü is not valid (left unmapped). [ 29.276089][ T3614] FAULT_INJECTION: forcing a failure. [ 29.276089][ T3614] name failslab, interval 1, probability 0, space 0, times 0 [ 29.288783][ T3614] CPU: 0 UID: 0 PID: 3614 Comm: syz.1.52 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 29.299326][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 29.309393][ T3614] Call Trace: [ 29.312685][ T3614] [ 29.315626][ T3614] dump_stack_lvl+0xf2/0x150 [ 29.316624][ T3621] FAULT_INJECTION: forcing a failure. [ 29.316624][ T3621] name failslab, interval 1, probability 0, space 0, times 0 [ 29.320227][ T3614] dump_stack+0x15/0x1a [ 29.336956][ T3614] should_fail_ex+0x223/0x230 [ 29.341713][ T3614] should_failslab+0x8f/0xb0 [ 29.346366][ T3614] kmem_cache_alloc_noprof+0x52/0x320 [ 29.351819][ T3614] ? vm_area_alloc+0x2c/0x130 [ 29.356500][ T3614] vm_area_alloc+0x2c/0x130 [ 29.361033][ T3614] __mmap_region+0x6b5/0x13f0 [ 29.365717][ T3614] mmap_region+0x164/0x1e0 [ 29.370186][ T3614] do_mmap+0x718/0xb60 [ 29.374329][ T3614] vm_mmap_pgoff+0x133/0x290 [ 29.378991][ T3614] ksys_mmap_pgoff+0xd0/0x330 [ 29.383676][ T3614] ? syscall_trace_enter+0x104/0x1f0 [ 29.388966][ T3614] ? fpregs_assert_state_consistent+0x83/0xa0 [ 29.395078][ T3614] x64_sys_call+0x1940/0x2dc0 [ 29.399753][ T3614] do_syscall_64+0xc9/0x1c0 [ 29.404256][ T3614] ? clear_bhb_loop+0x55/0xb0 [ 29.408983][ T3614] ? clear_bhb_loop+0x55/0xb0 [ 29.413719][ T3614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.419614][ T3614] RIP: 0033:0x7fddcaf4ff13 [ 29.424082][ T3614] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 29.443682][ T3614] RSP: 002b:00007fddc95c6e38 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 29.452090][ T3614] RAX: ffffffffffffffda RBX: 0000000000000518 RCX: 00007fddcaf4ff13 [ 29.460221][ T3614] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 29.468227][ T3614] RBP: 00000000200008c2 R08: 00000000ffffffff R09: 0000000000000000 [ 29.476239][ T3614] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 29.484203][ T3614] R13: 00007fddc95c6f10 R14: 00007fddc95c6ed0 R15: 0000000020000380 [ 29.492343][ T3614] [ 29.495354][ T3621] CPU: 1 UID: 0 PID: 3621 Comm: syz.3.55 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 29.505880][ T3621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 29.515952][ T3621] Call Trace: [ 29.519230][ T3621] [ 29.522242][ T3621] dump_stack_lvl+0xf2/0x150 [ 29.526890][ T3621] dump_stack+0x15/0x1a [ 29.531143][ T3621] should_fail_ex+0x223/0x230 [ 29.536001][ T3621] should_failslab+0x8f/0xb0 [ 29.540714][ T3621] __kmalloc_node_noprof+0xad/0x410 [ 29.545924][ T3621] ? __kvmalloc_node_noprof+0x72/0x170 [ 29.551485][ T3621] __kvmalloc_node_noprof+0x72/0x170 [ 29.556804][ T3621] unix_prepare_fpl+0x159/0x290 [ 29.561711][ T3621] unix_scm_to_skb+0x1a8/0x250 [ 29.566527][ T3621] unix_dgram_sendmsg+0x493/0xff0 [ 29.571639][ T3621] ? selinux_socket_sendmsg+0x185/0x1c0 [ 29.577193][ T3621] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 29.582734][ T3621] __sock_sendmsg+0x140/0x180 [ 29.587412][ T3621] ____sys_sendmsg+0x312/0x410 [ 29.592182][ T3621] __sys_sendmmsg+0x227/0x4b0 [ 29.596881][ T3621] __x64_sys_sendmmsg+0x57/0x70 [ 29.601734][ T3621] x64_sys_call+0x29aa/0x2dc0 [ 29.606407][ T3621] do_syscall_64+0xc9/0x1c0 [ 29.610901][ T3621] ? clear_bhb_loop+0x55/0xb0 [ 29.615609][ T3621] ? clear_bhb_loop+0x55/0xb0 [ 29.620275][ T3621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.626193][ T3621] RIP: 0033:0x7f6e2305fed9 [ 29.630669][ T3621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.650389][ T3621] RSP: 002b:00007f6e216d7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 29.658873][ T3621] RAX: ffffffffffffffda RBX: 00007f6e23225fa0 RCX: 00007f6e2305fed9 [ 29.666836][ T3621] RDX: 0000000000000001 RSI: 0000000020005e00 RDI: 0000000000000004 [ 29.674812][ T3621] RBP: 00007f6e216d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 29.682775][ T3621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 29.690742][ T3621] R13: 0000000000000000 R14: 00007f6e23225fa0 R15: 00007ffc7b4c3a38 [ 29.698765][ T3621] [ 29.848323][ T3614] pimreg: entered allmulticast mode [ 29.874931][ T3638] loop2: detected capacity change from 0 to 256 [ 29.893576][ T3638] FAT-fs (loop2): codepage cp1251 not found [ 29.894164][ T3641] loop4: detected capacity change from 0 to 2048 [ 29.932681][ T3647] FAULT_INJECTION: forcing a failure. [ 29.932681][ T3647] name failslab, interval 1, probability 0, space 0, times 0 [ 29.945458][ T3647] CPU: 1 UID: 0 PID: 3647 Comm: syz.1.61 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 29.955966][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 29.966012][ T3647] Call Trace: [ 29.969325][ T3647] [ 29.972287][ T3647] dump_stack_lvl+0xf2/0x150 [ 29.976881][ T3647] dump_stack+0x15/0x1a [ 29.981038][ T3647] should_fail_ex+0x223/0x230 [ 29.985769][ T3647] should_failslab+0x8f/0xb0 [ 29.990440][ T3647] __kmalloc_noprof+0xab/0x3f0 [ 29.995233][ T3647] ? pfkey_sadb2xfrm_user_sec_ctx+0x2c/0xf0 [ 30.001178][ T3647] pfkey_sadb2xfrm_user_sec_ctx+0x2c/0xf0 [ 30.006893][ T3647] pfkey_compile_policy+0x388/0x420 [ 30.012085][ T3647] ? __pfx_pfkey_compile_policy+0x10/0x10 [ 30.017796][ T3647] xfrm_user_policy+0x390/0x550 [ 30.022688][ T3647] do_ipv6_setsockopt+0x1563/0x2250 [ 30.027919][ T3647] ? __rcu_read_unlock+0x4e/0x70 [ 30.032884][ T3647] ? avc_has_perm_noaudit+0x1cc/0x210 [ 30.038267][ T3647] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 30.044619][ T3647] ipv6_setsockopt+0x57/0x130 [ 30.049368][ T3647] rawv6_setsockopt+0x21e/0x410 [ 30.054224][ T3647] sock_common_setsockopt+0x64/0x80 [ 30.059545][ T3647] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 30.065449][ T3647] __sys_setsockopt+0x187/0x200 [ 30.070296][ T3647] __x64_sys_setsockopt+0x66/0x80 [ 30.075321][ T3647] x64_sys_call+0x282e/0x2dc0 [ 30.080013][ T3647] do_syscall_64+0xc9/0x1c0 [ 30.084509][ T3647] ? clear_bhb_loop+0x55/0xb0 [ 30.089182][ T3647] ? clear_bhb_loop+0x55/0xb0 [ 30.093850][ T3647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.099809][ T3647] RIP: 0033:0x7fddcaf4fed9 [ 30.104219][ T3647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.123900][ T3647] RSP: 002b:00007fddc95c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 30.132378][ T3647] RAX: ffffffffffffffda RBX: 00007fddcb115fa0 RCX: 00007fddcaf4fed9 [ 30.140340][ T3647] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000003 [ 30.148302][ T3647] RBP: 00007fddc95c70a0 R08: 000000000000005c R09: 0000000000000000 [ 30.156355][ T3647] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 30.164321][ T3647] R13: 0000000000000000 R14: 00007fddcb115fa0 R15: 00007ffd07570638 [ 30.172329][ T3647] [ 30.191261][ T3641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.252251][ T3655] loop2: detected capacity change from 0 to 512 [ 30.259941][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.270364][ T3655] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.290009][ T3655] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 30.291620][ T3653] sg_write: process 43 (syz.0.63) changed security contexts after opening file descriptor, this is not allowed. [ 30.313216][ T3653] program syz.0.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 30.318454][ T3655] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 30.335294][ T3655] System zones: 0-2, 18-18, 34-34 [ 30.361717][ T3655] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 30.379575][ T3655] EXT4-fs (loop2): 1 truncate cleaned up [ 30.386161][ T3655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.401798][ T3655] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.65: corrupted xattr block 19: invalid header [ 30.415898][ T3655] EXT4-fs (loop2): Remounting filesystem read-only [ 30.422429][ T3655] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 30.431771][ T3655] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 30.452562][ T3664] loop0: detected capacity change from 0 to 512 [ 30.455719][ T3655] pimreg: entered allmulticast mode [ 30.479702][ T3664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.493211][ T3664] ext4 filesystem being mounted at /18/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 30.516750][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.534198][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.585965][ T3677] loop3: detected capacity change from 0 to 256 [ 30.613448][ T3677] FAULT_INJECTION: forcing a failure. [ 30.613448][ T3677] name failslab, interval 1, probability 0, space 0, times 0 [ 30.626296][ T3677] CPU: 1 UID: 0 PID: 3677 Comm: syz.3.74 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 30.636872][ T3677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 30.646946][ T3677] Call Trace: [ 30.650234][ T3677] [ 30.653249][ T3677] dump_stack_lvl+0xf2/0x150 [ 30.657939][ T3677] dump_stack+0x15/0x1a [ 30.662115][ T3677] should_fail_ex+0x223/0x230 [ 30.666813][ T3677] should_failslab+0x8f/0xb0 [ 30.671427][ T3677] __kmalloc_node_noprof+0xad/0x410 [ 30.676648][ T3677] ? __kvmalloc_node_noprof+0x72/0x170 [ 30.682132][ T3677] __kvmalloc_node_noprof+0x72/0x170 [ 30.687463][ T3677] seq_read_iter+0x144/0x930 [ 30.692092][ T3677] ? _raw_spin_unlock+0x26/0x50 [ 30.696997][ T3677] ? alloc_pages_bulk_noprof+0x532/0x650 [ 30.702691][ T3677] copy_splice_read+0x3a0/0x5d0 [ 30.707545][ T3677] ? __pfx_copy_splice_read+0x10/0x10 [ 30.712957][ T3677] splice_direct_to_actor+0x269/0x670 [ 30.718458][ T3677] ? __pfx_direct_splice_actor+0x10/0x10 [ 30.724097][ T3677] do_splice_direct+0xd7/0x150 [ 30.728891][ T3677] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 30.734792][ T3677] do_sendfile+0x398/0x660 [ 30.739203][ T3677] __x64_sys_sendfile64+0x110/0x150 [ 30.744469][ T3677] x64_sys_call+0xfbd/0x2dc0 [ 30.749053][ T3677] do_syscall_64+0xc9/0x1c0 [ 30.753550][ T3677] ? clear_bhb_loop+0x55/0xb0 [ 30.758261][ T3677] ? clear_bhb_loop+0x55/0xb0 [ 30.762930][ T3677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.768828][ T3677] RIP: 0033:0x7f6e2305fed9 [ 30.773240][ T3677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.792845][ T3677] RSP: 002b:00007f6e216d7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 30.801283][ T3677] RAX: ffffffffffffffda RBX: 00007f6e23225fa0 RCX: 00007f6e2305fed9 [ 30.809247][ T3677] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 30.817210][ T3677] RBP: 00007f6e216d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 30.825172][ T3677] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.833199][ T3677] R13: 0000000000000000 R14: 00007f6e23225fa0 R15: 00007ffc7b4c3a38 [ 30.841177][ T3677] [ 30.886094][ T3681] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 30.899336][ T3686] loop3: detected capacity change from 0 to 2048 [ 30.926894][ T3686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.967366][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.028168][ T3704] loop4: detected capacity change from 0 to 1024 [ 31.037967][ T3706] netlink: 'syz.3.82': attribute type 4 has an invalid length. [ 31.084154][ T3704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.103440][ T3704] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.133550][ T3718] netlink: 'syz.3.86': attribute type 21 has an invalid length. [ 31.150608][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.195382][ T3725] Process accounting resumed [ 31.214900][ T3712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 31.242307][ T3712] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 31.262237][ T3734] Zero length message leads to an empty skb [ 31.322674][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 31.322689][ T29] audit: type=1400 audit(1733661939.869:763): avc: denied { create } for pid=3741 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.358264][ T3743] syz.2.91[3743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.358338][ T3743] syz.2.91[3743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.380543][ T3743] syz.2.91[3743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.394580][ T29] audit: type=1326 audit(1733661939.879:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93528fed9 code=0x7ffc0000 [ 31.429128][ T29] audit: type=1326 audit(1733661939.879:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7ff93528fed9 code=0x7ffc0000 [ 31.452301][ T29] audit: type=1326 audit(1733661939.879:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93528fed9 code=0x7ffc0000 [ 31.475644][ T29] audit: type=1326 audit(1733661939.879:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff93528fed9 code=0x7ffc0000 [ 31.499062][ T29] audit: type=1326 audit(1733661939.879:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93528fed9 code=0x7ffc0000 [ 31.522471][ T29] audit: type=1326 audit(1733661939.879:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff93528fed9 code=0x7ffc0000 [ 31.545557][ T29] audit: type=1326 audit(1733661939.879:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93528fed9 code=0x7ffc0000 [ 31.569277][ T29] audit: type=1326 audit(1733661939.879:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7ff93528fed9 code=0x7ffc0000 [ 31.573690][ T3750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 31.592302][ T29] audit: type=1326 audit(1733661939.879:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.4.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93528fed9 code=0x7ffc0000 [ 31.637760][ T3750] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 31.720909][ T3756] TCP: TCP_TX_DELAY enabled [ 31.730035][ T3756] loop1: detected capacity change from 0 to 512 [ 31.738944][ T3756] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.94: invalid indirect mapped block 256 (level 2) [ 31.767413][ T3756] EXT4-fs (loop1): 2 truncates cleaned up [ 31.773519][ T3756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.813144][ T3756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 31.839451][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.866379][ T3773] loop0: detected capacity change from 0 to 1024 [ 31.877343][ T3773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.904823][ T3781] loop4: detected capacity change from 0 to 1024 [ 31.911750][ T3781] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 31.922689][ T3781] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 31.933464][ T3773] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.0.99: corrupted in-inode xattr: bad magic number in in-inode xattr [ 31.936491][ T3781] JBD2: no valid journal superblock found [ 31.954636][ T3781] EXT4-fs (loop4): Could not load journal inode [ 31.963475][ T3775] syz.1.101 uses obsolete (PF_INET,SOCK_PACKET) [ 31.972381][ T3773] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #14: comm syz.0.99: attempt to clear invalid blocks 1634560256 len 1 [ 32.212277][ T3798] vlan2: entered promiscuous mode [ 32.217460][ T3798] team0: Device vlan2 is already an upper device of the team interface [ 32.312529][ T3804] loop3: detected capacity change from 0 to 512 [ 32.328050][ T3804] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.340307][ T3804] EXT4-fs (loop3): 1 truncate cleaned up [ 32.350199][ T3804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.377576][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.379278][ T3802] loop7: detected capacity change from 0 to 16384 [ 32.450665][ T3819] loop3: detected capacity change from 0 to 2048 [ 32.475878][ T3819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.516447][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.548142][ T3813] loop7: detected capacity change from 16384 to 16383 [ 32.557391][ T1102] kernel write not supported for file /vcsa1 (pid: 1102 comm: kworker/0:2) [ 32.573769][ T3826] loop3: detected capacity change from 0 to 512 [ 32.592434][ T3826] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.611091][ T3826] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.112: corrupted in-inode xattr: invalid ea_ino [ 32.626950][ T3826] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.112: couldn't read orphan inode 15 (err -117) [ 32.654206][ T3826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.666355][ T1102] IPVS: starting estimator thread 0... [ 32.673177][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.721964][ T3832] netlink: 60 bytes leftover after parsing attributes in process `syz.1.115'. [ 32.733733][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.746682][ T3832] loop1: detected capacity change from 0 to 256 [ 32.754925][ T3830] IPVS: using max 3696 ests per chain, 184800 per kthread [ 32.780918][ T3832] FAT-fs (loop1): Directory bread(block 64) failed [ 32.782035][ T3840] loop3: detected capacity change from 0 to 512 [ 32.788605][ T3832] FAT-fs (loop1): Directory bread(block 65) failed [ 32.800754][ T3832] FAT-fs (loop1): Directory bread(block 66) failed [ 32.807482][ T3832] FAT-fs (loop1): Directory bread(block 67) failed [ 32.815474][ T3840] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 32.823826][ T3832] FAT-fs (loop1): Directory bread(block 68) failed [ 32.831809][ T3840] EXT4-fs (loop3): orphan cleanup on readonly fs [ 32.836862][ T3832] FAT-fs (loop1): Directory bread(block 69) failed [ 32.847833][ T3840] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #16: comm +}[@: casefold flag without casefold feature [ 32.860832][ T3840] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm +}[@: couldn't read orphan inode 16 (err -117) [ 32.868803][ T3844] loop0: detected capacity change from 0 to 512 [ 32.873430][ T3840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.885346][ T3832] FAT-fs (loop1): Directory bread(block 70) failed [ 32.901204][ T3844] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 32.920936][ T3832] FAT-fs (loop1): Directory bread(block 71) failed [ 32.946038][ T3832] FAT-fs (loop1): Directory bread(block 72) failed [ 32.957297][ T3844] loop0: detected capacity change from 0 to 1024 [ 32.966103][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.981105][ T3832] FAT-fs (loop1): Directory bread(block 73) failed [ 33.025451][ T3844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.042859][ T3857] FAULT_INJECTION: forcing a failure. [ 33.042859][ T3857] name failslab, interval 1, probability 0, space 0, times 0 [ 33.055598][ T3857] CPU: 1 UID: 0 PID: 3857 Comm: syz.4.121 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 33.066204][ T3857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 33.076300][ T3857] Call Trace: [ 33.079650][ T3857] [ 33.082590][ T3857] dump_stack_lvl+0xf2/0x150 [ 33.085830][ T3858] loop3: detected capacity change from 0 to 2048 [ 33.087207][ T3857] dump_stack+0x15/0x1a [ 33.097715][ T3857] should_fail_ex+0x223/0x230 [ 33.102411][ T3857] should_failslab+0x8f/0xb0 [ 33.107102][ T3857] kmem_cache_alloc_noprof+0x52/0x320 [ 33.112554][ T3857] ? skb_clone+0x154/0x1f0 [ 33.116996][ T3857] skb_clone+0x154/0x1f0 [ 33.121429][ T3857] __netlink_deliver_tap+0x2bd/0x4f0 [ 33.126788][ T3857] netlink_unicast+0x64a/0x670 [ 33.131556][ T3857] netlink_sendmsg+0x5cc/0x6e0 [ 33.136327][ T3857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.141688][ T3857] __sock_sendmsg+0x140/0x180 [ 33.146453][ T3857] ____sys_sendmsg+0x312/0x410 [ 33.151254][ T3857] __sys_sendmsg+0x19d/0x230 [ 33.155893][ T3857] __x64_sys_sendmsg+0x46/0x50 [ 33.160657][ T3857] x64_sys_call+0x2734/0x2dc0 [ 33.165331][ T3857] do_syscall_64+0xc9/0x1c0 [ 33.169843][ T3857] ? clear_bhb_loop+0x55/0xb0 [ 33.174525][ T3857] ? clear_bhb_loop+0x55/0xb0 [ 33.179275][ T3857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.185183][ T3857] RIP: 0033:0x7ff93528fed9 [ 33.189593][ T3857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.209272][ T3857] RSP: 002b:00007ff933907058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.217682][ T3857] RAX: ffffffffffffffda RBX: 00007ff935455fa0 RCX: 00007ff93528fed9 [ 33.225719][ T3857] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 33.233685][ T3857] RBP: 00007ff9339070a0 R08: 0000000000000000 R09: 0000000000000000 [ 33.241652][ T3857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.249704][ T3857] R13: 0000000000000000 R14: 00007ff935455fa0 R15: 00007ffe0fb7a0e8 [ 33.257730][ T3857] [ 33.338247][ T3858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.490443][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.577633][ T3843] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 33.592841][ T3843] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 33.597554][ T3866] syz.3.125[3866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.605418][ T3843] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.605418][ T3843] [ 33.608218][ T3866] syz.3.125[3866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.616685][ T3843] EXT4-fs (loop0): Total free blocks count 0 [ 33.616700][ T3843] EXT4-fs (loop0): Free/Dirty block details [ 33.616711][ T3843] EXT4-fs (loop0): free_blocks=68451041280 [ 33.616722][ T3843] EXT4-fs (loop0): dirty_blocks=16 [ 33.616732][ T3843] EXT4-fs (loop0): Block reservation details [ 33.616741][ T3843] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 33.682431][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.728729][ T3879] : renamed from hsr0 (while UP) [ 33.865522][ T3890] loop4: detected capacity change from 0 to 256 [ 33.928471][ T3896] SELinux: policydb version 109 does not match my version range 15-33 [ 33.936859][ T3896] SELinux: failed to load policy [ 33.957373][ T3898] loop4: detected capacity change from 0 to 512 [ 33.966579][ T3898] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.973398][ T3898] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 33.988521][ T3898] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 33.995557][ T3898] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.134: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 34.013760][ T3898] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.134: couldn't read orphan inode 13 (err -117) [ 34.026157][ T3898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.051743][ T3898] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 34.061490][ T3898] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 2 [ 34.101925][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.186767][ T3901] loop4: detected capacity change from 0 to 2048 [ 34.216618][ T3901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.242763][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.300855][ T3913] FAULT_INJECTION: forcing a failure. [ 34.300855][ T3913] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.313944][ T3913] CPU: 0 UID: 0 PID: 3913 Comm: syz.0.139 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 34.324553][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 34.324643][ T3913] Call Trace: [ 34.324666][ T3913] [ 34.324673][ T3913] dump_stack_lvl+0xf2/0x150 [ 34.324706][ T3913] dump_stack+0x15/0x1a [ 34.324733][ T3913] should_fail_ex+0x223/0x230 [ 34.324794][ T3913] should_fail+0xb/0x10 [ 34.324816][ T3913] should_fail_usercopy+0x1a/0x20 [ 34.324901][ T3913] _copy_from_user+0x1e/0xb0 [ 34.324930][ T3913] copy_clone_args_from_user+0x145/0x460 [ 34.325113][ T3913] ? audit_log_end+0x1d0/0x1e0 [ 34.325141][ T3913] __se_sys_clone3+0x6e/0x200 [ 34.325168][ T3913] __x64_sys_clone3+0x31/0x40 [ 34.325189][ T3913] x64_sys_call+0x2d56/0x2dc0 [ 34.325208][ T3913] do_syscall_64+0xc9/0x1c0 [ 34.325227][ T3913] ? clear_bhb_loop+0x55/0xb0 [ 34.325284][ T3913] ? clear_bhb_loop+0x55/0xb0 [ 34.325303][ T3913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.325332][ T3913] RIP: 0033:0x7f444811fed9 [ 34.325391][ T3913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.325407][ T3913] RSP: 002b:00007f4446796f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 34.325424][ T3913] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f444811fed9 [ 34.325436][ T3913] RDX: 00007f4446796f40 RSI: 0000000000000058 RDI: 00007f4446796f40 [ 34.325447][ T3913] RBP: 00007f44467970a0 R08: 0000000000000000 R09: 0000000000000058 [ 34.325460][ T3913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.325472][ T3913] R13: 0000000000000000 R14: 00007f44482e5fa0 R15: 00007ffee997b4b8 [ 34.325520][ T3913] [ 34.568824][ T3921] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 34.649212][ T3928] loop0: detected capacity change from 0 to 512 [ 34.684251][ T3930] loop1: detected capacity change from 0 to 512 [ 34.692041][ T3928] EXT4-fs: Mount option(s) incompatible with ext2 [ 34.784741][ T3930] netlink: 140 bytes leftover after parsing attributes in process `syz.1.145'. [ 34.808722][ T3921] can: request_module (can-proto-5) failed. [ 34.812911][ T3936] loop0: detected capacity change from 0 to 512 [ 34.821978][ T3937] loop2: detected capacity change from 0 to 128 [ 34.828416][ T3934] loop3: detected capacity change from 0 to 2048 [ 34.834686][ T3936] EXT4-fs: inline encryption not supported [ 34.844974][ T3937] vfat: Unknown parameter 'vfat' [ 34.873557][ T3936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.895800][ T3936] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.907258][ T3936] FAULT_INJECTION: forcing a failure. [ 34.907258][ T3936] name failslab, interval 1, probability 0, space 0, times 0 [ 34.907463][ T3934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.920043][ T3936] CPU: 1 UID: 0 PID: 3936 Comm: syz.0.147 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 34.942712][ T3936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 34.945408][ T3948] loop2: detected capacity change from 0 to 128 [ 34.952829][ T3936] Call Trace: [ 34.952838][ T3936] [ 34.965281][ T3936] dump_stack_lvl+0xf2/0x150 [ 34.969997][ T3936] dump_stack+0x15/0x1a [ 34.974189][ T3936] should_fail_ex+0x223/0x230 [ 34.978862][ T3936] should_failslab+0x8f/0xb0 [ 34.983545][ T3936] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 34.989891][ T3936] ? sidtab_sid2str_get+0xb8/0x140 [ 34.995062][ T3936] kmemdup_noprof+0x2a/0x60 [ 34.999567][ T3936] sidtab_sid2str_get+0xb8/0x140 [ 35.004542][ T3936] security_sid_to_context_core+0x1eb/0x2f0 [ 35.010434][ T3936] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 35.016415][ T3936] security_sid_to_context+0x27/0x30 [ 35.021747][ T3936] avc_audit_post_callback+0x9d/0x530 [ 35.027189][ T3936] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 35.033169][ T3936] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 35.039260][ T3936] common_lsm_audit+0x90f/0x1010 [ 35.044328][ T3936] ? avc_perm_nonode+0xcd/0xe0 [ 35.049144][ T3936] slow_avc_audit+0xf9/0x140 [ 35.053749][ T3936] avc_has_perm+0x129/0x160 [ 35.058265][ T3936] may_create+0x25d/0x300 [ 35.062666][ T3936] selinux_inode_mknod+0xc0/0xd0 [ 35.067601][ T3936] security_inode_mknod+0x8b/0xd0 [ 35.072619][ T3936] vfs_mknod+0x28b/0x310 [ 35.076876][ T3936] unix_bind+0x2de/0x870 [ 35.081153][ T3936] __sys_bind+0x10c/0x190 [ 35.085496][ T3936] __x64_sys_bind+0x41/0x50 [ 35.090164][ T3936] x64_sys_call+0x20ab/0x2dc0 [ 35.094836][ T3936] do_syscall_64+0xc9/0x1c0 [ 35.099335][ T3936] ? clear_bhb_loop+0x55/0xb0 [ 35.104142][ T3936] ? clear_bhb_loop+0x55/0xb0 [ 35.108972][ T3936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.114874][ T3936] RIP: 0033:0x7f444811fed9 [ 35.119290][ T3936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.139094][ T3936] RSP: 002b:00007f4446797058 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 35.147541][ T3936] RAX: ffffffffffffffda RBX: 00007f44482e5fa0 RCX: 00007f444811fed9 [ 35.155524][ T3936] RDX: 000000000000006e RSI: 0000000020003000 RDI: 0000000000000003 [ 35.163570][ T3936] RBP: 00007f44467970a0 R08: 0000000000000000 R09: 0000000000000000 [ 35.171536][ T3936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 35.179518][ T3936] R13: 0000000000000000 R14: 00007f44482e5fa0 R15: 00007ffee997b4b8 [ 35.187491][ T3936] [ 35.199867][ T3936] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.147: corrupted inode contents [ 35.204358][ T3948] FAT-fs (loop2): Directory bread(block 524065) failed [ 35.212009][ T3936] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.147: mark_inode_dirty error [ 35.230323][ T3936] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.147: corrupted inode contents [ 35.235927][ T3948] FAT-fs (loop2): Directory bread(block 524066) failed [ 35.242448][ T3936] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.147: mark_inode_dirty error [ 35.249117][ T3948] FAT-fs (loop2): Directory bread(block 524067) failed [ 35.267277][ T3948] FAT-fs (loop2): Directory bread(block 524068) failed [ 35.274153][ T3948] FAT-fs (loop2): Directory bread(block 524069) failed [ 35.282489][ T3948] FAT-fs (loop2): Directory bread(block 524070) failed [ 35.282841][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.289361][ T3948] FAT-fs (loop2): Directory bread(block 524071) failed [ 35.289462][ T3948] FAT-fs (loop2): Directory bread(block 524072) failed [ 35.312840][ T3948] FAULT_INJECTION: forcing a failure. [ 35.312840][ T3948] name failslab, interval 1, probability 0, space 0, times 0 [ 35.325470][ T3948] CPU: 0 UID: 0 PID: 3948 Comm: syz.2.152 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 35.325539][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.336051][ T3948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 35.336067][ T3948] Call Trace: [ 35.336073][ T3948] [ 35.336081][ T3948] dump_stack_lvl+0xf2/0x150 [ 35.336116][ T3948] dump_stack+0x15/0x1a [ 35.370058][ T3948] should_fail_ex+0x223/0x230 [ 35.374839][ T3948] should_failslab+0x8f/0xb0 [ 35.379445][ T3948] kmem_cache_alloc_noprof+0x52/0x320 [ 35.384816][ T3948] ? alloc_empty_file+0xd0/0x200 [ 35.389756][ T3948] ? mntput+0x49/0x70 [ 35.393736][ T3948] alloc_empty_file+0xd0/0x200 [ 35.398494][ T3948] path_openat+0x6a/0x1fa0 [ 35.402905][ T3948] ? _parse_integer_limit+0x167/0x180 [ 35.408304][ T3948] ? _parse_integer+0x27/0x30 [ 35.413047][ T3948] ? kstrtoull+0x110/0x140 [ 35.417547][ T3948] ? kstrtouint+0x77/0xc0 [ 35.421889][ T3948] ? kstrtouint_from_user+0xb0/0xe0 [ 35.427084][ T3948] ? bpf_ringbuf_discard+0xcd/0xf0 [ 35.432276][ T3948] do_filp_open+0x107/0x230 [ 35.436787][ T3948] do_sys_openat2+0xab/0x120 [ 35.441415][ T3948] __x64_sys_open+0xe6/0x110 [ 35.446055][ T3948] x64_sys_call+0x13e1/0x2dc0 [ 35.450726][ T3948] do_syscall_64+0xc9/0x1c0 [ 35.455221][ T3948] ? clear_bhb_loop+0x55/0xb0 [ 35.459980][ T3948] ? clear_bhb_loop+0x55/0xb0 [ 35.464721][ T3948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.470628][ T3948] RIP: 0033:0x7f70a29bfed9 [ 35.475058][ T3948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.494811][ T3948] RSP: 002b:00007f70a1037058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 35.503270][ T3948] RAX: ffffffffffffffda RBX: 00007f70a2b85fa0 RCX: 00007f70a29bfed9 [ 35.511305][ T3948] RDX: 0000000000000000 RSI: 00000000000040c2 RDI: 00000000200000c0 [ 35.519476][ T3948] RBP: 00007f70a10370a0 R08: 0000000000000000 R09: 0000000000000000 [ 35.527450][ T3948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.535525][ T3948] R13: 0000000000000000 R14: 00007f70a2b85fa0 R15: 00007ffd429e7c98 [ 35.543515][ T3948] [ 35.577550][ T3951] loop3: detected capacity change from 0 to 128 [ 35.584251][ T3951] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.596823][ T3954] loop0: detected capacity change from 0 to 512 [ 35.617491][ T3951] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.629335][ T3957] ================================================================== [ 35.637435][ T3957] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 35.645239][ T3957] [ 35.647543][ T3957] write to 0xffffea00046c8118 of 8 bytes by task 3871 on cpu 0: [ 35.655165][ T3957] __filemap_remove_folio+0x1ac/0x2c0 [ 35.660522][ T3957] filemap_remove_folio+0x6b/0x1f0 [ 35.665616][ T3957] truncate_inode_folio+0x42/0x50 [ 35.670620][ T3957] shmem_undo_range+0x25b/0xa70 [ 35.675450][ T3957] shmem_evict_inode+0x14d/0x530 [ 35.680368][ T3957] evict+0x2f0/0x570 [ 35.684333][ T3957] iput+0x42a/0x5b0 [ 35.688121][ T3957] dentry_unlink_inode+0x24f/0x260 [ 35.693216][ T3957] __dentry_kill+0x18b/0x4c0 [ 35.697783][ T3957] dput+0x5c/0xd0 [ 35.701394][ T3957] do_renameat2+0x748/0xa70 [ 35.705882][ T3957] __x64_sys_rename+0x58/0x70 [ 35.710553][ T3957] x64_sys_call+0x2b1c/0x2dc0 [ 35.715212][ T3957] do_syscall_64+0xc9/0x1c0 [ 35.719695][ T3957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.725573][ T3957] [ 35.727875][ T3957] read to 0xffffea00046c8118 of 8 bytes by task 3957 on cpu 1: [ 35.735396][ T3957] folio_mapping+0xa0/0x120 [ 35.739886][ T3957] lru_add+0x89/0x440 [ 35.743847][ T3957] folio_batch_move_lru+0x15f/0x230 [ 35.749026][ T3957] folio_add_lru+0x145/0x1f0 [ 35.753601][ T3957] shmem_get_folio_gfp+0x7d6/0xd90 [ 35.758695][ T3957] shmem_write_begin+0xa2/0x180 [ 35.763526][ T3957] generic_perform_write+0x1a8/0x4a0 [ 35.768790][ T3957] shmem_file_write_iter+0xc2/0xe0 [ 35.773885][ T3957] vfs_write+0x77f/0x920 [ 35.778121][ T3957] __x64_sys_pwrite64+0xf6/0x150 [ 35.783041][ T3957] x64_sys_call+0xab0/0x2dc0 [ 35.787614][ T3957] do_syscall_64+0xc9/0x1c0 [ 35.792099][ T3957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.797986][ T3957] [ 35.800288][ T3957] value changed: 0xffff8881186564d0 -> 0x0000000000000000 [ 35.807376][ T3957] [ 35.809675][ T3957] Reported by Kernel Concurrency Sanitizer on: [ 35.815798][ T3957] CPU: 1 UID: 0 PID: 3957 Comm: syz.1.156 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 35.826366][ T3957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 35.836409][ T3957] ================================================================== [ 35.874320][ T3954] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.901985][ T3954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.929232][ T3954] Cannot find del_set index 0 as target [ 35.958916][ T3954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 35.969722][ T3954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 35.990583][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.